Privacy Policy

1. Information we collect

When you create an account, we collect your email address and password. If you sign in with Google, LinkedIn or Apple instead, that account shares your name and email address with us, and Google and LinkedIn a profile picture. Apple lets you hide your email address; if you do, we receive a relay address instead.

Your profile holds what you choose to give it: your name, username, photo and bio; golf details (home course, handicap, skill level, and a GHIN number and official index if you add them); business details (industry, role, company and what you’re looking for); your interests, goals and availability; links to your social profiles; and your ZIP code, from which we work out your city and the approximate coordinates of that ZIP code — never your address. A birthdate is optional, kept private, and used only for matching.

To show whether you’re verified, we look at the domain of your email address and whether you’ve signed in with LinkedIn.

If you ask to hear when PinHi is in the App Store, we keep the email address you give us and which of our social pages sent you there — nothing else, not linked to any account. We use it once, to send one email when the app is available, and delete it as that email is sent.

2. Information generated by using the Service

We store what you do in PinHi: rounds and scorecards (hole by hole, with the course and date), the handicap we work out from them, leagues, matches and standings, games you post or join, posts, photos, videos, comments and reactions, messages (direct, game and league chats), connection requests and any note on them, asks between teammates to put in a word with someone and the note on each, the names of guests you add to a round, the email addresses of people you invite, reports and blocks (section 6), feedback you send us, public share links you create and how often they’re opened, your notification settings, the devices you’ve turned notifications on for, and when you were last active.

3. How we use this information

We use it to run the Service: showing your profile to other members, suggesting people and games, running leagues and working out handicaps, delivering messages, verifying accounts, sending the emails and notifications you’ve left on, reviewing reports and enforcing our Terms, finding and fixing errors, and understanding how the club is used in aggregate.

4. Who can see it

Other members see your profile, because meeting people is what PinHi is for. What you post goes to the audience you pick, a league’s results and standings can be seen by anyone who can see the league, and a live round you choose to share can be followed by your connections while it’s in progress. Two switches in Settings decide the rest: whether members can browse your connection list (people you’re both connected to stay visible either way, and a team follows the same rule, as described below), and whether your scores count toward course averages — only averages are ever shown, never your cards, and never until enough members have played a course.

If you choose to share a card publicly (a round, a milestone, a league result or a season summary), the card you see when you share it — and the one-line description on it — is visible to anyone who has the link until you stop sharing it from Settings.

Your QR code, its link and every card you share carry the same personal code. Anyone who has it can open your add-me page, which shows your first name and photo; members who are logged in see your profile there, as they would anywhere in PinHi. Stopping a share does not change this. Getting a new code from your QR code page does: the old code stops working everywhere, and the cards you still share carry the new one.

If you’re on a team, your teammates, including its admins, see your name on the team. While the team is paying, when one of them opens another member’s profile, it can tell them which of their teammates are connected to that person, so they can ask that teammate to put in a word. It names you there only where they could already see it: you and they are connected too, or you and the person on the profile both let members browse your connections. Turn your connection-list switch off and a teammate you aren’t connected to won’t see who you know. An ask comes to you with the note they wrote, and PinHi sends nothing to the person they’d like to meet. The same rule works the other way round: if you’re connected to someone on a team, their teammates see that connection on your profile only if they’re connected to that person too, or you and that person both let members browse your connections.

If a team pays for your membership, its admins also see the email address your seat was sent to, and manage the seat and its billing. A seat gives them nothing else about you: not your scores or messages.

PinHi’s administrators can see what they need to run the club, including members’ email addresses, verification requests and anything reported to them.

We do not sell your personal information.

5. Services that receive your information

We use these companies to run PinHi. Here is each one, what it does for us, and what it receives.

• Supabase — our database, file storage and sign-in.It holds everything in your account: your profile, rounds, leagues, posts, messages, photos and videos, and your sign-in details. It also runs sign-in, including the emails that confirm your address and reset your password.
• Vercel — hosts PinHi and runs its servers.It sees every request your browser or the app makes to PinHi, including your IP address, your browser and device type, and the page asked for, and keeps request logs for a limited time.
• Resend — delivers our email.It receives your email address and each email we send you, which can include the name of a member who contacted you, a short preview of their message, the note on a connection request, or a teammate’s ask to put in a word, with their note and the name of the person they’d like to meet. When you invite someone by email (a referral, a league invitation, a guest pass or a team seat), it receives their address to deliver it. When you send us feedback, it carries what you wrote, with your email address, to PinHi’s administrators.
• Stripe — takes payment when you buy a plan on the web.It receives your email address, a reference that ties the payment to your PinHi account, the plan you chose, and the card and billing details you enter on its checkout page. We never see your card number. Stripe keeps its own record of every payment.
• Anthropic — its AI model reads photos of scorecards, picks courses and coaches.When you scan a scorecard, it receives the photo, including every score and player name written on it, so the names of the people you played with go too. The result comes back to you to check, and we don’t keep the photo. When you photograph a course’s printed card to fix its layout, it receives that photo too; we hold that one until we’ve checked the layout, then delete it. To look up a course’s rating and slope, it receives the course’s name and town, and nothing about you. When you ask where to play with a connection, it receives a shortlist our server built: course names, how many miles each of you would drive, the days and times you are both free, your playing preferences and the forecast. It never receives either of your names, your locations or your messages, and we ask you once before the first pick. If you set up PinHi Coach, it receives your rounds (scores and the per-hole stats you track), your bag’s distances, your practice log (how many days you’ve practiced the drill it set, and when you last did), your coach setup answers and your typed questions, so it can read your game and write your notes. Never your name, and never another member’s rounds. The setup is where you say yes.
• Sentry — tells us when something breaks.When an error happens, it receives a report: what went wrong, the address of the page, and your browser and device type. For a sample of page loads it also receives how long each step took, with the same page address. That address can contain an ID, such as a league’s. On the Check your email screen after you sign up, and on the screen where you enter an invite code for an account you already have, it contains your email address. A report about an email that failed to send includes the email’s subject line, which can name the member it’s from or about. Beyond those, we don’t add your name or email to anything it receives.
• Google — sign-in, if you choose Continue with Google.It knows you signed in to PinHi, and shares your name, email address and profile picture with us.
• LinkedIn — sign-in, if you choose Continue with LinkedIn.It knows you signed in to PinHi, and shares your name, email address and profile picture with us, but not your job history. Signing in with LinkedIn counts toward your verified badge.
• Apple — sign-in, if you choose Continue with Apple.It knows you signed in to PinHi, and shares your name and email address with us. If you choose Hide My Email, it shares a relay address that forwards to you instead.
• Apple, Google and Mozilla push services — deliver notifications to your phone or browser, if you turn them on.They receive an address for your device, issued by your browser or by Apple, and each notification we send to it. From a browser the words are encrypted, so the push service carries them without being able to read them. From the iOS app they go through Apple’s push service in a form Apple can read.
• OpenStreetMap — draws the map on Connections.Its servers send the map’s images, so they see your IP address and the part of the map you’re looking at. If you tap the location arrow, your phone uses its position to centre the map and never sends it to PinHi, but the map around it is then loaded from OpenStreetMap.
• Open-Meteo — the weather forecast on Home, the Weather page and in course picks.Our server asks it for the forecast at your profile’s approximate location, rounded to about a kilometre, and for the week ahead around the courses a pick considers. It receives those coordinates and nothing else about you: the request comes from our server, not your phone. If you tap the location arrow on the Weather page, your phone’s position is rounded the same way, used for that one forecast and never stored.
• GolfCourseAPI — course layouts: tees, pars and yardages.It receives the name of a course, and nothing about you.

6. Reports, blocks and removed content

You can report a post, comment, message or member to us, and you can block a member. Blocking stops them from messaging you or asking to connect, and keeps what they post out of your view. We store your blocks so they keep working, and your reports so we can act on them.

PinHi’s administrators review reports. When something breaks our Terms, they can remove posts, comments, messages and photos, and suspend the account that posted them.

7. Data retention and deletion

We keep your information for as long as your account is open.

You can delete your account yourself, at any time: open Settings and tap Delete my account at the bottom (it’s at /settings/delete). It happens straight away, with no grace period and no undo. Any active subscription is cancelled first, and if it can’t be cancelled, nothing is deleted. Your profile, rounds, posts, messages, photos and videos go with the account. Course photos and course layouts you contributed stay, because other members’ course pages are built on them, but your name no longer appears on them.

Some copies sit with the services in section 5 and follow their schedules, not ours: Stripe keeps its record of every payment, and email logs, error reports, server logs and database backups are kept for a limited time by the services that hold them.

If you can’t sign in, email groundscrew@thepinhi.com from the address on your account and ask us to delete it.

8. Your choices

You can review and update most of your profile at any time from your profile and Settings, and leave optional fields such as birthdate, location or availability blank. In Settings you can turn email and push notifications on or off, stop sharing any public card, and use the two switches in section 4. You can block any member (section 6).

9. Children’s privacy

The Service is intended for working professionals and is not directed to anyone under 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated date at the top of this page.

11. Contact

Questions about this policy, or requests to see or delete your data, go to groundscrew@thepinhi.com. Anyone can write to it, with or without an account. The Support page has more on getting help.