Privacy notice

Who is responsible

Mates Playing Golf runs MPGolf and decides how your information is used (the "controller" under UK data protection law). Contact: MPGDeleteAccount@javeed.co.uk.

What we hold, and why

• Your account: your email address, to sign you in; your name; and, if you add them, a contact email address, a WhatsApp number and your Handicap Index.
• If you continue with Google: Google tells us your name, email address and profile photo, and that Google has checked the address. We use the address to sign you in and to link a profile already set up for you; your name and photo are kept with your sign-in and not shown to anybody. We never see your Google password, and get nothing else from your Google account.
• Your golf: every round and hole score, what each was played off, the games you were in and who with, and your MPGolf handicap record.
• Your societies: which you belong to, your role, the handicap each sets for you, your results in its events, and a record of who entered or corrected each score, which cannot be edited.
• Its competitions: the tables of each season and its orders of merit, worked out from the cards, results and side prizes its organisers type in by hand, a record of who changed a competition’s settings and when, and team selections: who was picked and why, who said they could or couldn’t play, and every change to the squad. A typed result may name somebody who is not on the app, such as a past member in the society’s history.
• Its fixtures: each event’s booking as its organisers type it in, such as the tee-off, green fee, deadlines and the venue’s contact (a name, phone number and email address at the club); its home club and how golfers pay, with any pay link or bank details its organisers type in; and whether each entrant has paid, as an organiser ticked it or you said so, with who and when. Money never passes through MPGolf. When entries open we give you one notice in the app and, if you have allowed notifications, the same notice on your phone’s lock screen; we keep whether you answered I’m playing or Not this time, and when; the society’s organisers see who entered, not your answer.
• Your phone’s notification address: if you allow notifications, a code that lets us send fixture notices to your phone, with when it was last used, and which notices we sent to it and whether they arrived. It stops being used when you sign out or delete your account.
• Your photo and town, if you add them on Your details. Your photo is made small on your phone before it is sent, and replaced or removed when you say.
• Images you upload: a society’s logo, photographs of its trophies, and photographs of scorecards, which may show handwriting and names.
• Its honours: each trophy, who has held it and since when, with who recorded each hand-over, which cannot be edited; and which season awards the society gives, with who changed that and when.
• Its About page: the description and history its admins write, the committee roles and who held them (a name, and a WhatsApp number only if the holder chooses to show it), and documents its admins upload, which may name members.
• Friends: who your friends are, requests you sent or were sent, and when. Whether you turned on Let golfers find me, golfers you blocked, how many times a day you searched for golfers, and any report you made about a golfer: who, whom, why and when.
• Diagnostics: crash reports with your phone’s model, Android version and app version. Personal details are stripped out first, and a report is not tied to your account.

We hold your account and your golf to provide the app you asked for (our agreement with you). We hold society records and diagnostics so results stay complete, a wrong score can be traced and faults can be fixed (our and the society’s legitimate interests).

A guest you add to a game is a name and, if you give one, a handicap index. A guest has no account.

We do not collect your location, your contacts, advertising identifiers or payment details. There are no adverts, and nothing is sold or shared for marketing.

Who can see what

• Players in the same game see that game: its players, cards and leaderboard.
• A player’s own card link (Send Mo their card) shows that game’s leaderboard to whoever has the link, signed in or not: the course and tees, first names, what each plays off and their scores. It shows nothing else, and stops working when turned off or 2 days after the game finishes. Taking the place with That’s me is recorded with who and when. If you install MPGolf from such a link, the app reads from Google Play, once and on your phone, which card the link was for; nothing about it is sent to us.
• Members of a society you join can read your rounds, scores and handicap history, including rounds from before you joined. Leaving the society stops this.
• A society’s admins and organisers also see the contact details on your profile.
• Whether you have paid an event’s green fee: you and the society’s organisers.
• Members of a society see its competitions’ tables: every player’s name, rounds and scores in them. A table made final is kept as it stood, so a past season does not change.
• Everybody signed in can see the shared library of courses. A scorecard photograph is kept privately as evidence and is not shown to other golfers.
• A society’s logo is public: anybody with its address can see it.
• A photograph of a society’s trophy is private to that society: only its members can see it, and only its organisers can change it.
• Members of a society see its roll of honour, trophies, records and season awards: the names of champions, holders and record holders, worked out from its results.
• A society’s documents, committee and history: its members only. A document is kept privately and opened with a link that lasts five minutes.
• A society is private unless its admins make it public. Anybody signed in can find a public society by name or town and see its name, logo, town and how many members it has, nothing else: never who the members are, or their rounds.
• If you are in a public society, your friends may see it suggested to them, with how many of their friends are in it. Your name is not shown.
• When you ask to join a public society, its admins and organisers see your name and when you asked. Each answer is kept, with who gave it and when.
• Let golfers find me is off until you turn it on (Profile). On, anybody signed in can find you by name and sees your name, photo, town and how many friends you have in common, nothing else: never your rounds, handicap, societies or WHS ID.
• Your photo and town, if you add them: you, your friends, members of your societies and people in a game with you, and anybody signed in while Let golfers find me is on. Never a golfer you have blocked or who has blocked you. Your photo is kept privately and opened with a link that lasts an hour; when you change or remove it, or delete your account, it is no longer shown.
• Whether or not it is on, people you played a game with and members of your societies may see you under People you may know, saying why (the day you played together, or the society), with friends in common. They are people who can already see you in that game or society.
• If you block a golfer, the two of you stop finding each other or seeing each other suggested, and neither can ask the other to be friends. They are not told. A report about a golfer is read only by MPGolf, to decide what to do: nothing, hide the golfer from search for 30 days, or change an offensive name to “Golfer”. What was done is kept, with who did it and when. The golfer is not told who made the report.

The join screen says what will be shared before you confirm.

Who processes it for us

We use these companies to run the app. Each acts only on our instructions.

• Supabase: the database, sign-in and stored images, held in Ireland (European Union).
• Sentry: crash and error reports, held in the European Union.
• Expo: delivers app updates to your phone, and passes our fixture notices to Google (Firebase Cloud Messaging), which delivers them to Android phones. A notice says the fixture, the society and the day, or for an organiser who took a free place. Expo is in the United States.
• Anthropic: reads the figures from a scorecard photograph when you ask for a card to be read. The photograph is sent to Anthropic, in the United States, for that purpose only.
• Google Play: delivers the app. Netlify: hosts our website.
• Google Sign-In: if you choose Continue with Google, Google confirms who you are to us. What Google does with that is in Google’s own privacy policy.
• Course databases (UK Golf API, GolfCourseAPI, OpenGolfAPI): when you search for a course to import, the name you type is sent to them. Nothing about you goes with it.

Your information is held in the European Union, which UK law treats as giving the same protection as the United Kingdom. Where it goes anywhere else, it goes under the safeguards UK law requires, such as approved contract terms.

How long we keep it

• Your profile, rounds and results: for as long as you have an account, and society results for up to ten years, so past competitions still add up.
• On your phone: about 90 days of rounds, so the app works with no signal.
• Your phone’s notification address: kept, no longer used, once you sign out or delete your account, as a record of what was sent.
• Diagnostics: no more than 90 days.

Deleting your account

Profile, then Delete my account. Or, without the app, see the website. It takes effect at once.

• What goes: your name, email address, phone number and Handicap Index; your own rounds and any guests’ cards you scored; your membership of every society; your sign-in; your phones’ notification addresses stop being used.
• What stays: your cards in society events, shown as "Former member" with nothing on them that identifies you, because a society has a legitimate interest in the record of its own past competitions. Rounds other golfers scored stay in their own histories.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, to restrict or object to how we use it, and to have it in a form you can take elsewhere. Most of it you can see and change in the app, and Export my rounds on your profile gives you a copy of your rounds.

Write to MPGDeleteAccount@javeed.co.uk. We reply within one month.

If you are unhappy with our answer you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

Children

MPGolf is for golfers aged 18 and over. We do not knowingly hold an account for anybody younger.

Changes to this notice

When this notice changes in a way that matters, the app will say so before the change applies. The date at the top is when the wording last changed.