Privacy

Location

iOS and watchOS ask for your permission before the app sees a single fix, and the app only asks for location while you are using it — never in the background for its own purposes.

Every distance is computed on the device, from a course package that is already on the device. That is why a round works with no signal, and it is also why nothing needs to be uploaded: there is no server to compute against.

Your position is not stored in any account, not attached to an identity, not shared with anyone and never used for advertising. You can withdraw the permission at any time in the system Settings; the app then cannot show distances, and says so rather than guessing.

The field-test log, which is off unless you turn it on

There is a switch in Settings, under "Field test", called "Log positions". It is off by default and stays off until you turn it on yourself.

While it is on, the app appends one line per accepted GPS fix to a file in its own storage on the device: the time, the course and hole, the par, the raw coordinate, the smoothed coordinate the engine used, the accuracy the GPS reported, the distances that were on screen, how many hazards were listed, and whether the fix came from the GPS or from demo mode.

That file does not go anywhere on its own. It leaves the device only if you export it yourself with the system share sheet, and you choose where it goes. "Erase log" in the same screen deletes it, and deleting the app deletes it with everything else.

The diagnostic log

Separately, the app keeps a small diagnostic log in its own storage — a line when a round starts or ends, when a layup is planned, when a course fails to load. It holds no coordinates and no identifiers, and it is never uploaded, because the app has no code that can upload anything.

Apple Watch and Health

On the watch the app starts a golf workout while you play. That is what keeps the GPS running when your wrist drops and the screen goes off, and it records the round as a workout in your own Health app. It asks your permission first, it never reads your health data, and the round works without it — you just have to keep the screen awake.

The watch and the phone hand settings and course data to each other directly, over the link Apple provides between your own two devices. There is no server in the middle.

Your waitlist email address

If you sign up on this site we store your address, the language you were reading in, and the fact that it came from here. We use it for one thing: to tell you when the app is on the App Store.

It is kept in a database we run ourselves, hosted on Supabase, which processes it on our behalf and does nothing else with it. It is never sold, never rented, never given to an advertiser, and never used for a newsletter.

The list cannot be read from outside at all. The table has row-level security switched on with no policy that permits a read, and the public API’s permission to read it has been revoked — two independent locks, either of which would be enough. The form can add an address and cannot be used to check whether one is already there.

Ask us to delete it and we will, with no questions and no "are you sure" email. The address is at the bottom of this page.

Course data

Course geometry comes from OpenStreetMap contributors and is used under the Open Database License 1.0; aerial imagery is NAIP, from the United States Department of Agriculture, and is in the public domain.

That data travels towards you and never away from you: downloading a course tells us nothing about you, because there is nothing to tell.

What the app does not do

No advertising and no advertising SDK. No third-party analytics. No tracking across other apps or websites — the app never shows the tracking permission prompt, because there is nothing it could track you with. No account, no password, no sign-in. Nothing is sold to anybody, ever.

This is checkable rather than promised: there is not a single network call in the app’s source.