Privacy

The short version

• We collect only what the app needs to work, plus opt-out-able diagnostics.
• We never show ads and never sell your individual data. Both are permanent commitments.
• We use your golf activity to build aggregated, anonymised insights that may be sold to golf clubs — never anything that identifies you. You can opt out of contributing entirely.
• You can export everything we hold about you, and delete your account (and all of its data) from inside the app at any time.

Who we are

The data controller is Pinehollow Studios Limited. For any privacy question or request, contact support@pinehollow.studio.

What we collect

Account & profile.Your email address, username, display name, and optionally your first name, home club, home county, a short bio, and an avatar/cover photo. If you sign in with Apple and choose to hide your email, we receive Apple’s private relay address instead of your real one.

Your golf activity. The courses you mark as played, rounds you log (date, optional score, optional notes/reflections), the lists you create, and your friend connections.

About you (optional). During onboarding we ask a few optional questions about you (such as your age band). You can skip them entirely. We use these answers only in the aggregated club insights described below — never to profile you individually.

Photos you upload. Round photos, course photos, and profile images. When you add a photo we extract its embedded metadata (capture time and, if present, GPS location) and keep those details alongside the photo to associate it with a round or course; the image copies we store are re-encoded, which strips the embedded metadata from the stored files.

Location.Only to show you golf courses near you (the “Near you” suggestions on the home screen), and only while the app is open — we take a single location reading at that moment. We never track your location in the background.

Notifications.If you enable push notifications, we store your device’s push token so Apple can deliver them. You can turn categories of notification off in Settings, or revoke the permission entirely in iOS Settings.

Diagnostics.Crash reports and basic performance/diagnostic data (via Sentry, hosted in the EU, and Apple’s MetricKit), to find and fix problems. This is associated with your account unless you turn analytics off.

Usage analytics. Anonymous-by-default records of in-app events (e.g. screens viewed) to understand how the app is used. These respect your analytics opt-out.

What we do not collect: we do not read your contacts/address book, we do not use third-party advertising or tracking SDKs, and we do not track you across other apps or websites.

How we use your data

• To run the app: your collection, map, stats, lists, friends, and leaderboards.
• To keep it working: diagnosing crashes and improving performance.
• To improve it: understanding which features are used (analytics).
• To produce aggregated, anonymised insights for golf clubs — for example, how many Vestige users played a club, or added it to one of their lists, over a period. These insights are always aggregated across many users, never individual-level, never personally identifiable, and exclude anyone who has opted out of analytics. A club will never see that a named person visited.

Who we share it with

We use a small number of service providers (“processors”) to run Vestige:

• Supabase — database, authentication, and file storage (EU region).
• Sentry — crash reporting (EU region).
• Apple — Sign in with Apple, and push notification delivery.
• Mapbox — map rendering.

We do not sell your personal data. The only data that leaves Vestige in a form that could be sold is the aggregated, anonymised club insights described above.

Legal basis (UK GDPR)

We process your data to perform our contract with you (providing the app), on the basis of your consent (e.g. location, optional analytics contribution), and for our legitimate interests in keeping the app secure and improving it.

Your rights

You can, at any time:

• Access & exportyour data — Settings → Privacy & data → Export my data.
• Delete your account — Settings → Account → Delete account. This permanently removes your account and all associated data, including your uploaded photos.
• Opt out of analytics— Settings → Privacy & data. Opting out also excludes you from all aggregated club insights.
• Control your visibility— set your profile to Private or Public at any time, and choose whether you appear on the global and local leaderboards (Settings → Privacy & data).

Under UK GDPR you also have rights to rectification, restriction, objection, and to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Data retention

We keep your data while your account is active. When you delete your account, your data (including stored photos) is removed. Aggregated insights that no longer identify any individual may be retained.

Children

Vestige is intended for users aged 17 and over and is not directed at children.

This website

This website asks for one piece of personal information: the email address you give the waiting list, held to contact you about Vestigeand deleted once it has done its job or on request. It is stored and delivered through Resend, our email provider, and the site is hosted by Vercel — both acting only on our instructions. We also use Vercel’s privacy-first analytics to count visits; it sets no cookies and does not identify you.

Changes to this policy

We may update this policy; we will change the “Last updated” date above and, for material changes, notify you in-app.

Contact

support@pinehollow.studio · Pinehollow Studios Limited