1. Introduction

This Privacy Policy describes how Hadyn Renfort (“we,” “our,” or “us”) collects, uses, and shares information about you when you use the Up & Down: Golf Bets mobile application (“Up & Down” or the “App”) and related services.

Up & Down is a mobile application that helps groups of golfers track scores, manage gameplay, and record per-hole game outcomes. The App does not process real money or facilitate real-money gambling. All wagering values within the App are abstract scoring tokens (“units”) that have no defined monetary value within the App. Any monetary interpretation of these units is established offline between players and is outside the scope of this Privacy Policy.

By using Up & Down, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Information You Provide Directly

When you use Up & Down, you may provide us with the following information:

Account Information

• Apple Account identifier (provided through Sign in with Apple)
• Display name (you choose this; it is shown to other players in shared rounds)
• Email address (provided by Apple if you choose to share it via Sign in with Apple)

Player and Game Information

• Names of players in your golf rounds (you may add these manually for non-registered participants)
• Handicap indexes for players (entered manually)
• Scores, hole-by-hole performance, and gameplay choices
• Course names and details (which you may enter manually or select from external services)
• Round outcomes, settlement balances, and per-hole game results
• Notes, side bet descriptions, and other free-text content you choose to add

Communications

• Support requests, bug reports, and other correspondence you send to us

2.2 Information Collected Automatically

When you use the App, we automatically collect certain information, including:

Usage Information

• Features you use within the App and how you interact with them
• Round and tournament participation history
• Timestamps of activity
• Crash logs and diagnostic data (if you have opted into sharing this with Apple)

Device Information

• Device type, model, and operating system version
• Unique device identifiers as provided by Apple
• App version and build number

Location Information

The App may request access to your device location for the limited purpose of helping you find nearby golf courses. You can decline or revoke this permission in your device settings at any time. We do not track or store your precise location for any purpose other than course suggestions during round setup. Location data is processed transiently and is not associated with your account or stored after each request.

2.3 Information from Third-Party Services

We integrate with the following third-party services, which may share information with us:

• Apple Sign-In: provides us with your Apple Account identifier and, optionally, your email address. We do not receive your Apple ID password or other Apple Account credentials.
• Supabase (our backend infrastructure provider): stores the data you create in the App. Supabase processes data on our behalf and is bound by their own privacy practices.
• Google Places API (when integrated): used to suggest nearby golf courses. Queries are passed through Google’s service; Google’s privacy practices apply to those queries.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Service

• Authenticating your account and maintaining your sessions
• Recording and displaying your golf rounds, tournaments, and trip history
• Calculating scores, settlements, and game outcomes
• Synchronizing data across your devices
• Allowing you to share rounds with other players via share codes

To Improve the Service

• Diagnosing technical issues and crashes
• Understanding how features are used so we can improve them
• Developing new features and capabilities

To Communicate With You

• Responding to support requests
• Sending important account or service notifications (such as security alerts)
• Notifying you of material changes to this Privacy Policy or our Terms of Service

To Comply With Legal Obligations

• Responding to lawful requests from government authorities
• Protecting our legal rights and the safety of our users
• Complying with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We share information only in the limited circumstances described below.

With Other Users

When you participate in a multi-player round, tournament, or trip, your display name, gameplay choices, and scores are visible to other players in that round. If you share a round via share code, anyone with that code can view the round’s scores and current state in real time.

With Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Supabase (database and authentication infrastructure)
• Apple (Sign-In, App Store distribution, push notifications)
• Google (Places API, when used for course search)

These providers are contractually obligated to protect your information and may not use it for their own purposes beyond providing services to us.

For Legal Reasons

We may disclose information if we believe in good faith that disclosure is necessary to: comply with applicable law or legal process; protect our rights, property, or safety, or that of our users or others; investigate fraud or security issues; or respond to government requests.

Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (via email or in-app notice) before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your account information and gameplay data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal, tax, or security reasons.

Aggregated and de-identified data (data that cannot be linked back to you) may be retained indefinitely for analytical purposes.

6. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. We honor the following rights for all users, regardless of jurisdiction:

• Access: You can request a copy of the personal information we have about you.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information.
• Portability: You can request a copy of your data in a machine-readable format.
• Withdrawal of consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at hadyn.upanddown@gmail.com. We will respond within 30 days.

6.1 California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you with additional rights regarding your personal information.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (Apple Account identifier, display name, email address)
• Internet or other electronic network activity (App usage data, interactions with features)
• Geolocation data (only when you grant permission for course search)
• Inferences drawn from the above (such as scoring trends and gameplay history)

Sources of Personal Information

We collect personal information directly from you, automatically through your use of the App, and from third-party services (Apple, Supabase, Google).

Business Purposes for Collection

We use this information to provide and improve the App, communicate with you, and comply with legal obligations, as described in Section 3.

Sale of Personal Information

We do not sell your personal information for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising.

Your CCPA Rights

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of your personal information (we do not sell or share)
• Right to limit use of sensitive personal information (we do not collect sensitive categories)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at hadyn.upanddown@gmail.com. We will verify your identity before responding.

California “Shine the Light” Disclosures

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of their personal information to third parties for direct marketing purposes. We do not share your personal information with third parties for their direct marketing purposes.

6.2 European Union and United Kingdom Residents (GDPR / UK GDPR)

If you are located in the European Union, the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (and the UK GDPR) provides you with additional rights regarding your personal information.

Legal Bases for Processing

We process your personal information under the following legal bases:

• Performance of a contract: We process your information to provide the App’s features as described in our Terms of Service.
• Legitimate interests: We process certain information to improve the App, prevent fraud, and ensure security. Where we rely on legitimate interests, we have determined that these interests do not override your fundamental rights.
• Consent: We process certain information based on your consent (such as location data for course search). You can withdraw consent at any time.
• Legal obligation: We may process your information to comply with applicable laws.

Your GDPR Rights

• Right of access (Article 15): Request a copy of your personal data.
• Right to rectification (Article 16): Correct inaccurate or incomplete data.
• Right to erasure / “right to be forgotten” (Article 17): Request deletion of your personal data.
• Right to restrict processing (Article 18): Limit how we process your data.
• Right to data portability (Article 20): Receive your data in a machine-readable format.
• Right to object (Article 21): Object to processing based on legitimate interests.
• Right to withdraw consent: Where we rely on consent, withdraw it at any time.
• Right to lodge a complaint: Contact your local data protection authority if you believe we have violated your rights.

To exercise these rights, contact us at hadyn.upanddown@gmail.com. We will respond within 30 days.

International Data Transfers

Your data is stored on servers operated by our backend provider (Supabase) and may be transferred to and processed in the United States. We rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner’s Office to ensure appropriate safeguards for international transfers of personal data.

Data Protection Officer

We have not appointed a designated Data Protection Officer, as our processing activities do not currently require one under GDPR. For all data protection inquiries, please contact us at hadyn.upanddown@gmail.com.

7. Children’s Privacy

Up & Down is not directed at children under the age of 18. The App is rated 18+ in the App Store due to references to gambling-style gameplay (using abstract units, not real money). We do not knowingly collect personal information from individuals under 18.

If you believe a child under 18 has provided us with personal information, please contact us at hadyn.upanddown@gmail.com and we will take steps to delete the information.

8. Data Security

We take reasonable measures to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using industry-standard TLS protocols
• Encryption of data at rest in our backend infrastructure
• Authentication via Sign in with Apple, leveraging Apple’s security infrastructure
• Limited access to personal information by authorized personnel only
• Regular security reviews and updates

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Cookies and Tracking Technologies

Up & Down is a native mobile application and does not use traditional web cookies. We use device-level identifiers and storage mechanisms (such as iOS local storage and the iOS keychain) to maintain your session, store your preferences, and cache data for offline use.

We do not use third-party advertising trackers or analytics services that build cross-app profiles of users. We honor “Limit Ad Tracking” and “Allow Apps to Request to Track” settings on your device.

10. Do Not Track

Some browsers transmit “Do Not Track” signals. Because Up & Down is a native mobile app and we do not engage in cross-site tracking, “Do Not Track” signals do not apply to our service. We respect Apple’s App Tracking Transparency framework and do not track users across third-party apps and websites.

11. Third-Party Services and Links

Up & Down may include links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party services. We encourage you to review the privacy policies of every third-party service you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this Policy. If we make material changes, we will notify you through the App or by email before the changes take effect.

Your continued use of Up & Down after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or if you would like to exercise any of your rights, please contact us:

We will respond to inquiries within 30 days.

End of Privacy Policy