Privacy Policy

Who we are

Clubhouse Leader is an iPhone app and this website. Write to us at hello@clubhouseleader.app about anything on this page — including a request to see or delete what we hold.

The company behind it, and where to write to that company on paper, are not on this page yet. That is the first of the missing pieces named at the top. Email reaches a person today.

What we collect

When you sign in

There are two doors, and no password on either. Nothing to steal, nothing to reuse.

• Sign in with Apple. Apple hands us an identifier for your Apple account, and — the first time only — the name and email address you choose to share. If you use Apple's private relay address, that is the address we get and the address we mail. We also keep the tokens Apple issues to prove the sign-in; they are destroyed the moment you delete your account.
• A code by email. We keep your email address and mail you a code that stops working after five minutes.
• A record that you are signed in, which the app carries on your phone and we hold on our side until it expires — seven days without use. It records the address your phone connected from (its IP address) and what it identified itself as (its user-agent line).

What you type into a league

• Your name, your nickname if you set one, your handicap and the tee you play.
• Your avatar colour and your notification choices.
• The photo you pick for your profile, and any crest or round photos you add.
• What you write on the league wall — posts, replies, photo captions, answers to a Poll.

What your league records about your golf

Hole-by-hole scores, results and standings, closest to the pin and long drive, achievement badges, and the buy-ins and payouts your group has agreed. Every change to a handicap is kept with who made it and when, so a season can be audited.

What your commissioner types

The league's name, its home course, the buy-in, and how the group settles up — for example a Venmo or Cash App name, so everyone knows where to send money. It is a label and a handle. Nothing is charged.

If you turn on notifications

Apple gives your phone a delivery token. We store it so we can send you the tee time, the score and the banter you asked for, and nothing else.

On this website

This page and the landing page count visits, taps, which questions get opened and how far down people read. Those counts are anonymous — the site never asks who you are and never sets up a profile for you.

To count a second visit as the same reader coming back rather than a stranger, the site keeps a short random string in your browser. It has no name, no email address and nothing about you attached to it, it stays on that one device, and clearing your browser's site data removes it. It is not used to follow you to any other website, and there is nothing else this site puts on your machine.

What we never collect

• No password. There isn't one.
• No location. The app never asks your phone where it is, and the counts described below are never turned into a place — not from GPS, which we do not ask for, and not from the network address your phone or your browser arrives on, which the counts are sent with that lookup switched off. The course map shows the course's own position, which came from the course book, not from you. A camera can write the spot a photo was taken into the photo itself: when you post one, that is taken out before it is stored, so what we hold is the picture and nothing about the place.
• No recording of your screen. Neither the app nor this website records what you do on screen or plays it back to us.
• No contacts, no calendar, no microphone, no health data.
• No advertising identifier and no cross-app tracking. There is no ad network in this app and nothing to opt out of.
• No card numbers and no bank details. The app takes no payment (see “Money”, below).
• No date of birth.

Camera and photo library

• Camera. Used for one thing: reading the QR code on your commissioner's invite. It takes no picture, and nothing from the camera is uploaded.
• Photo library. Used to let you pick a profile photo, a club crest or a round photo. Only the picture you pick leaves your phone, and we keep the picture, never the place it was taken.

Who else sees it

These are all of them. There are no others, and we sell nothing to anyone.

• Apple — Sign in with Apple, the delivery of notifications to your phone, and the map on the Getting there card, which is Apple's map and is drawn by Apple when you open it.
• Resend — sends the sign-in codes and league invites: the address it goes to and the message itself.
• Expo — delivers the notifications: your phone's delivery token, the words in the notification, and the identifiers that tell the app what to open when you tap it.
• PostHog — counts what happens in the app and on this site, so we can tell what is working. What is sent is the name of what happened and plain numbers — how many players are on a roster, how many rounds a league has played — filed under your account's identifier, so one person's week reads as one person's week.

  Every count the app and our server write themselves goes through a filter in code first, which drops anything named as a name, an email address, a nickname, a phone number, an address, a caption, or a code or link token; a test checks that filter against the list of things each count is allowed to carry. Three kinds of count are automatic and do not go through it, because we write nothing into them: the app noting that a control was tapped, the app noting that it was installed, opened or updated, and this website noting a link click, an opened question, or a section reached. Those carry no text you typed — only which control, which question and which section.

• GolfCourseAPI — only when somebody searches for a golf course to add to the league's book. What is sent is the course they typed. Nothing about a person goes with it.

Not in this product, in case you were wondering: no Google Analytics, no Facebook or advertising pixels, no Stripe or other payment processor, no crash-reporting service beyond the counts above, and no third-party photo hosting.

Where it lives, and for how long

• Everything sits in one database on our own server. The photos are in that same database — they are not handed to anyone else's storage. Resend, Expo and PostHog hold their part of it on their own machines, under their own policies.
• A full copy of that database is taken once a day and the last fourteen are kept, so a bad day can be undone.
• A record that you are signed in expires after seven days without use. Signing out on a phone ends it there and then.
• Notification delivery receipts are thrown away within a day. An uploaded image that nothing points at any more is swept away a day after it is orphaned.
• Everything else is kept until you delete your account, or until your commissioner removes it. A league's season is a record; it is meant to still be there next year.

What the rest of your league can see

A league is a group of people who already know each other, and it behaves like one. The other members see your name, your nickname, your photo, your handicap, your scores and results, what you are owed or owe, your badges and anything you post. Your commissioner can also change your handicap and your seat, and can take down a post.

Anyone holding an invite link can open the page behind it without signing in. That page shows the league's name, its season, how many golfers are in it, the commissioner's name, the league's crest — and the join code itself, because the code is the whole point of the link. A chat app that turns a pasted link into a preview will show the league's name and that code to everybody who can see the message. So treat the link exactly like the code: send it to the people you want in the league.

Money

Clubhouse Leader never takes, holds or moves money. Buy-ins, wagers and payouts are a written record of what your group agreed, and “paid” is a box somebody ticks. Settling up happens between you, the way it always did.

Deleting your account

Open Your account in the app and tap Delete my account. It happens immediately, and here is exactly what it does:

• Your name becomes “Deleted account”, your email address is pointed away from you, and your profile photo is deleted outright.
• The Apple link and the email address you signed in with are destroyed. Signing in again with the same Apple ID or the same address starts a brand-new, empty account.
• Every phone you were signed in on is signed out.
• Any request you made to claim a seat — which carries an email address and a typed profile — is deleted.
• Your seat in each league becomes an open spot. It keeps the name on it, so the league's boards still read right, and the scores, results and money stay with the league — that is its record of its season, not yours alone. Your commissioner can rename that spot, retire it, or hand it to somebody else.

One case is refused: if you are the last commissioner of a league that still has other members in it, hand the league over first, then delete. The app tells you which league and takes you to it.

Want a copy of what we hold, or want a post taken down, or want the whole thing gone including your league's record of it? Write to hello@clubhouseleader.app and we will do it.

Children

Clubhouse Leader is for adults running a golf league. It is not directed at children under 13 and we never ask anyone's age. If you believe a child has an account, write to hello@clubhouseleader.app and we will delete it.

Keeping it safe

• Everything between your phone and us travels encrypted.
• There is no password to leak, and a sign-in code is dead five minutes after it is sent.
• Sign-in codes, invite emails and guesses at a join code are all rate-limited, so nobody can hold the door down.
• Every uploaded image is checked byte by byte to confirm it really is an image before it is stored.

Your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. The app does the last one for you; for anything else, write to hello@clubhouseleader.app. We do not sell personal information and we do not share it for advertising.

Changes to this page

If what we collect changes, this page changes with it, and the date at the top moves. Nothing here describes something we plan to do later — it describes what the product does today.