Privacy
Last updated October 19, 2026. Golfaaja by AMP Media. Friends match play scoring. Events are PIN-gated. No ads.
This policy covers the Golfaaja app on the web at app.golfaaja.com (and its earlier addresses) and the Golfaaja iPhone app.
Create / host only — guests who join a match never need an account (name + playing handicap; optional Contact Info). Firebase Authentication owns credentials. We never see or store plaintext passwords.
We ask for a display name, your first name and an optional last initial. It's shown on scorecards, shared rounds and share images, and you can change it any time in Profile.
We also store the rounds you play while signed in. See Your rounds.
Golfaaja's administrator can see your name, email and phone, and your rounds, only to run the service, fix problems you report, or manage events you've joined. Every time they view or change your data, it's recorded in a log. We never share or sell this information. To ask what's been accessed, email anders@ampmedia.co.
Profile on this device can store a default playing handicap for new matches only — editing it never rewrites handicaps or pops on live or finished scorecards. Password and passkey changes go through Firebase Authentication only; we never store plaintext passwords. Sign out clears the on-device resume pointer so the next person on a shared phone is not dropped into your last round.
We use your email to sign you in and reach you about the waitlist / invites. Account + matches you created: delete via anders@ampmedia.co · Data Deletion Request.
When you're signed in, each round you play is saved to your account as you score, so it's there on any phone you sign in on. We store the scores, the players' names and handicaps as you entered them, side games, and the course you played (course, tee, par, stroke index, rating and slope). We never store your location or GPS data with a round, and it's never in an export. Only you can read your saved rounds. Rounds that were already on your phone are only added if you choose to upload them. Discarding a round deletes it from this phone and your account. A round you delete goes to Recently deleted for 30 days so you can restore it. Delete now, Delete all, and deleting your account skip that wait. Either way, it’s then erased from our servers, and from backups within 30 days. In Profile you can export your own scores as a spreadsheet (CSV) file, from your rounds and from the matches you played in (only your own row, never other players’ names or scores), delete them from your account (and, if you like, from this phone), or delete your account, which deletes every round saved to it. If you're not signed in, rounds stay only on this phone and are lost if you clear your browser data. Saved rounds never appear in a feed. To have your rounds deleted, email anders@ampmedia.co with the subject “Data Deletion Request”.
Email, state, optional phone; invite-friend links (?ref=) so we know who invited whom; invite codes; scorecard photos you upload to help fill course cards (User Content). Not sold, not ads.
Event hosts can export their event's results (each player's name, handicap, scores, team and pairing) as a file.
Hosts can share an unguessable signup link. Guests submit name and playing handicap (index) for that match only. Blank HCP = scratch. Optional email or phone for that match only. Connecting an account is optional. Contact Info for that match only — not the waitlist ladder, not sold, not ads. Entries sit pending until the host confirms; then they join the roster like anyone else. Link isn’t listable. Host (admin PIN) can edit or remove. Same delete path: anders@ampmedia.co · Data Deletion Request (name the match).
A round stays on your phone unless you tap Share this round. When you share it, the round’s player names, handicaps, scores, start holes and side games are saved online so everyone in the round sees the same card. We don’t store email, phone numbers, account details or location with a shared round. Anyone with the link, QR code or 4-digit code can join and see the card, so only share it with people you’re playing with. The code stops working when the round ends, when the starter taps Stop sharing, or after 24 hours, whichever comes first. Shared rounds never appear in a feed, and they’re deleted automatically 30 days after sharing ends. To have one deleted sooner, email anders@ampmedia.co with the subject “Data Deletion Request”.
If you join someone else's shared round while signed in, only your own row (your name, handicap and scores) and the round's details (course, date, side games) are saved to your account. Only you can see or delete your copy; deleting the shared round doesn't delete it, and deleting yours doesn't touch anyone else's.
Home course (optional): if you pick one, we use it to show its weather and tell you about events nearby. You can change or remove it in Profile, and it's deleted with your account.
Notifications: if you allow them, we keep a notification token for your phone to send round updates, and news only if you turn that on. Turning notifications off or signing out deletes the token.
Upcoming rounds: if you schedule a round, we keep its course and tee time to send you a reminder the day before, and delete it once the round is over.
Club distances: saved on this phone, and to your account when you're signed in. Private to you, never shown to other players. Deleted with your account; download them in Your data.
Golfaaja uses your location during a round to show distances to the green. It isn't saved or shared.
The hole map shows yards to the center of the green when the green is in the Utah book. Location is opt-in: on the web, Golfaaja asks first when you open a round or tap for distances, and the browser only asks after you tap Turn on GPS. If you choose Not now, the score screen shows the card yardage instead. We do not store your location. A hole without a mapped green shows no distance.
Golfaaja uses your location during a round, including when the app is in the background, to show distances to the green on your Lock Screen and Apple Watch. It isn't saved or shared, and it stops when the round ends.
Green locations and shapes come from OpenStreetMap: © OpenStreetMap contributors. The data is available under the Open Database License.
Weather comes from Apple Weather for the course's location, never your phone's. Apple Weather data sources.
Weather: we show the forecast for a course. If you allow location, your phone picks the nearest course itself. Your location never leaves your phone, and weather requests aren't tied to your account.
To keep out bots and scraping, the Golfaaja web app uses Google reCAPTCHA Enterprise through Firebase App Check. It looks at device and browser signals and sends them to Google, under Google's Privacy Policy and Terms. On iPhone, we use Apple's App Attest, which confirms the app is genuine without identifying you. We use these checks only to confirm requests come from the real app, never for ads or tracking.
Each event is its own document in Google Firebase under a 4-digit PIN. Reads are PIN-gated. There is no public list of events. No ads.
Join PIN is scores, board, and chat (share it). Admin PIN edits people, rounds, and course (don’t share). Same AMP Media stub otherwise.
Event and league chat. Only players in that event or league, and its organizer, can read its chat. Team chats are only for that team. Chat shows your display name, never your email or phone number. We remove location data from photos before they're shared. Chat turns read-only when the event ends, disappears from the app 7 days later, and is deleted 30 days after that. You can report or block anyone; organizers see reports without your name.
If a private course isn’t playable and you tap I want this course, we send your email and phone to that course only, with this consent, so they can see interest. Not sold, not ads. Delete: anders@ampmedia.co · Data Deletion Request.
Courses can submit details and a scorecard photo at /submit-scorecard. Submissions include contact info and the image for review (User Content).
anders@ampmedia.co · Data Deletion Request (account + matches you created as host + waitlist + uploads). Say the event PIN if you have it.
Contact Info · App Functionality (guest signup email/phone for that match; course interest to the named course). Not tracking.