Privacy Policy

Effective date: 22 October 2026 · previously 17 October 2026

Hip.Golf ("the app", "we") is a golf performance-tracking app available at hip.golf and as a mobile app. This policy explains what data we collect, why, and the choices you have. We aim to collect the minimum needed to make the app work.

Who is responsible for your data

Hip.Golf is operated by David Flavell (United Kingdom). For anything related to your data, contact: hipgolfapp@gmail.com.

What we collect

DataWhat it includesWhy
AccountEmail address and a password (stored as a secure hash by our authentication provider — we never see your password)To create and secure your account
ProfileDisplay name, optional profile photo, optional golf handicapSo friends can recognise you and scores can be calculated
Golf dataRounds, scores, hole-by-hole data, statistics, courses played, optional round photosThe core purpose of the app — tracking your game
Social activityWho you are connected to, groups you join, likes, comments and round messages, competition entries, meetups, challenges, live-round statusTo power the social features you choose to use
Reports and blocksContent or players you report (with a copy of what was reported and the reason), and players you blockTo keep the community safe and act on abuse
Terms acceptanceThe date you agreed to the Terms of UseA record that you agreed before posting
App activityWhich weeks you opened the app: the week only, not the day, the time or what you didTo count how many golfers use the app each week and whether they come back. Only totals are ever looked at (see Analytics)
Push tokenA device token for notificationsOnly if you enable notifications; used to deliver them
Approximate locationYour device location, only at the moment you use "find nearby courses"To show golf courses near you. It is used for that search and not stored
Garmin history (optional)If you use hip.golf/import, the Garmin export file is read in your browser and never uploaded. Only the rounds you choose to import are saved, as ordinary roundsTo start your history from your real golf

We do not collect contacts, browsing history, advertising identifiers, or precise location tracking, and we do not show ads. We use no analytics or tracking service; the only usage measure is the weekly count described there.

How we use your data

We do not sell your data, and we do not use it for advertising.

Legal bases (UK/EU GDPR)

Who processes your data for us

Your data is stored and processed by these service providers, acting under our instructions:

Data sent outside the UK. Some of these providers, including Google, Netlify and Anthropic, are based in the United States or process data outside the UK. Where personal data goes outside the UK, it is protected as UK law requires: by the UK–US data bridge where the provider is certified under it, or by the standard data protection clauses in the provider's terms. Ask us for details at the address above.

Analytics and tracking

Hip.Golf does not use an analytics or tracking service. There is no Google Analytics, no product-analytics provider, no advertising or marketing pixel, and no cross-site tracking of any kind. We do not measure which screens you open, and we do not build a profile of you.

What we do count. When you open the app, it notes the week in our own database: not the day, the time, or anything you did. We use this only to see totals, such as how many golfers were active this week, and how many of the people who joined in a given month were still using the app a month later. Nobody else can see these records, including other users, and they are never shared or sent anywhere. Each one is deleted after two years, and all of them are deleted with your account. Nothing extra is stored on your device for this.

If you would rather not be counted, email hipgolfapp@gmail.com. We will delete your records and stop counting you, and the app works exactly the same.

The app sets no tracking cookies. The only things it keeps on your device are the ones needed to run it — for example staying signed in, and holding a round in progress so it survives losing signal on the course.

Like any website or app, the services that host Hip.Golf (listed above) keep ordinary technical logs of requests made to them, which they use to run and secure the service. That is a normal part of hosting rather than something we analyse.

What other users can see

Hip.Golf has social features, and what others see depends on how you are connected:

If you block someone, you stop seeing each other's comments, likes and round messages, and they can't add you again. Anyone you are not connected to in one of these ways cannot see your profile at all. If you prefer a private experience, leave "Let other golfers find me" off and don't connect with anyone or join groups, competitions or challenges: your data then stays visible only to you.

How long we keep it, and deleting your account

We keep your data while your account exists. You can delete your account from inside the app (Profile → Delete account), which permanently removes your account and all rounds, statistics, photos and social activity. This cannot be undone. If you no longer have the app, ask for deletion here. You can export your rounds as a CSV file from the app at any time before deleting.

Reports are kept so repeated abuse can be recognised. A report is deleted when the reported player's account is deleted, and your name is removed from reports you sent when you delete yours.

Your rights

Under UK/EU data protection law you have the right to access, correct, export, and erase your personal data, to object to or restrict processing, and to withdraw consent. Most of these you can do directly in the app (edit profile, export CSV, delete account); for anything else, email us. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Children

Hip.Golf is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit (HTTPS). Database access is protected by per-user row-level security, so users can only read the data the app's features intend them to see. Passwords are handled by our authentication provider and never stored in readable form.

Changes to this policy

If we make material changes, we'll update this page and the effective date above, and highlight the change in the app.