Divot Golf Privacy Policy

1. Information We Collect

The information we collect depends on whether you use Divot as a guest or create an account and which features you use.

A. Account and authentication information

You can create an account or sign in using a one-time passcode sent to your phone number or, for existing accounts, your email address. When you do, we collect:

• your phone number and/or email address;
• a unique identifier assigned to your account; and
• authentication tokens and related account-security information.

If you create an account using Sign in with Apple or Sign in with Google, where offered, we may also receive:

• a unique identifier assigned by the authentication provider;
• your email address, including an Apple private relay email address if you choose Hide My Email;
• your name, if the provider supplies it; and
• authentication tokens and related account-security information.

We do not receive your Apple or Google password. We use authentication information to create and secure your Divot account, keep you signed in, and help you access saved information.

B. Eligibility and agreement records

Our Terms include eligibility requirements, including a minimum age of 13. During onboarding we collect your date of birth to confirm eligibility; it is stored with your profile.

We also maintain records of the versions of our Terms of Service and Privacy Policy in effect over time, together with your account’s creation date and related account identifiers. Creating an account, or continuing to use the Service after the Terms and this Privacy Policy are presented to you, constitutes your acknowledgement of them.

C. Golf activity and information you provide

Depending on the features you use, we may collect information such as:

• profile information you choose to provide, such as your name, a profile picture, your gender, your home city, and your typical score range;
• golf courses you select or save;
• rounds, scores, shots, putts, chips, penalties, and related entries;
• scorecards, round history, and course selections;
• statistics, summaries, and insights generated from your golf information;
• if you invite other players to a round, the phone number and display name you enter for each invited player — including players who do not have Divot accounts — so they can appear on the scorecard and claim their spot if they later join Divot; and
• preferences and settings associated with your account.

Rounds are shared spaces. The other participants in a round you join or host can view your profile information (including your name, profile picture, date of birth, gender, home city, typical score range, and the phone number associated with your account), your scores, and the round’s photos and videos. Rounds are visible only to their participants, not to the public. A host can add you to a round using your phone number without a separate acceptance step.

Registered users may have this information stored with their accounts so it can be retained and accessed across sessions or devices. Guest information may remain only on the device and may be lost if the app is deleted, the device is reset or replaced, or local app data is removed.

D. Profile pictures, round photos, and videos

If you choose to add a profile picture, the photo you select or take is uploaded to and stored on Divot’s servers with your account. Your profile picture is shown to other players in rounds you share; it is not part of a public profile. It is, however, served from a web address that does not require signing in, so anyone who obtains that address can view the image — choose a picture you are comfortable sharing.

During a round, you may capture photos and videos of your holes using your device’s camera; videos include audio recorded by the microphone. These photos and videos are uploaded to and stored on Divot’s servers so the round’s players can see them: we store an optimized copy of each capture and a small preview image, together with records of the round and player each capture belongs to and any players tagged in it. Access is limited to the participants of that round — other players in your round can view the round’s photos and videos, and rounds are not public. Uploaded copies are re-encoded and do not include embedded photo metadata such as capture location. The original captures also remain on your device; videos are uploaded over Wi-Fi, and captures that exceed the app’s size or duration limits stay on your device only.

If you choose to save a capture to your device’s photo library, iOS asks for add-only photo-library permission. Divot does not read, scan, or upload the contents of your photo library. Camera and microphone access are requested only when you use capture features and are controlled through your device settings.

E. Location information

Divot requests access to your device’s precise location when you choose to use GPS-dependent features, such as the rangefinder. In the current version of the Service, precise live GPS coordinates are processed on your device to calculate and display distances; Divot does not store your live GPS coordinates on its servers. When you look for nearby courses, the app sends your approximate location to our servers to return matching courses; that location is used only to answer the request and is not stored.

Your device’s operating system controls location permission. You may deny or withdraw permission through your device settings. GPS-dependent features will not work without location access, but you may continue to use features that do not require your live location, such as manually searching for and viewing courses.

Course selections, round entries, and other golf information may reveal the general area where you play. We treat that information according to this Privacy Policy even though it is not a stored record of your live GPS coordinates.

F. Course searches and product interactions

We process course searches, course selections, and app interactions as needed to provide requested features. We may also collect limited product-interaction information to understand whether core features work and to protect the Service.

We do not build an advertising profile from your searches or app activity. We do not use this information to track you across apps or websites owned by other companies.

G. Device, log, and diagnostic information

We may collect limited technical information needed to operate, secure, and troubleshoot the Service, such as:

• app and operating-system version;
• device type and general configuration;
• dates and times of requests;
• IP address and similar network information;
• authentication, security, and error events; and
• crash and performance information.

To keep core features working — in particular, uploads of your round photos and videos — the app reports diagnostic events to our servers, for example when an upload is queued, retries, or fails. Each event includes the date and time, the app and operating-system version, the device model, event details (such as internal identifiers for the media item involved, the processing step reached, and error descriptions), and identifiers that let us group related events: your account identifier when you are signed in, a session identifier, and a random install identifier created the first time the app runs on a device. The install identifier is used only for diagnostics — never for advertising — and remains on the device across sign-ins until the app is deleted. Diagnostic events are automatically deleted after 90 days; those linked to your account are also deleted with your account.

We use privacy-minimizing diagnostics and narrowly scoped operational logs; diagnostic events do not include your photos or videos, your location, or free-form content you enter. If you choose to share diagnostics with Apple, Apple may make certain diagnostic information available to us under Apple’s terms and privacy practices.

We do not collect an advertising identifier in the current version of the Service.

H. Support communications

If you contact us, we collect the information you provide, such as your email address, the content of your message, attachments you choose to send, and information needed to investigate or resolve your request.

I. Launch waitlist (website)

If you join the waitlist on our website, we collect the email address you enter and use it only to tell you about Divot’s availability. We store nothing else with it — no name, IP address, or device information. To be removed from the waitlist, email support@divotgolfusa.com; removal deletes your address from our systems.

2. Information We Do Not Currently Collect

The current version of the Service does not collect payment-card information, contacts, HealthKit information, fitness sensor data, or advertising identifiers. Divot does not read or scan your photo library — the only photos and videos stored on Divot’s servers are the round captures you take in the app and the profile picture you choose to upload, as described in Section 1.D.

The Service does not offer public profiles, social feeds, messaging, targeted advertising, or cross-app tracking. Your profile picture and round activity may be visible to other players in rounds you share, but not to the public.

If Divot adds a feature that changes these practices, we will update this Privacy Policy and the relevant notices before or when the feature becomes available.

3. How We Use Information

We use information to:

• provide course search, GPS rangefinder, scoring, scorecard, statistics, and insight features;
• create, authenticate, secure, maintain, and support accounts;
• save and synchronize registered users’ golf information;
• store and display your profile picture and show your round photos and videos alongside your rounds;
• personalize the Service based on information a user has chosen to save;
• respond to support, privacy, and legal requests;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• diagnose errors and maintain the reliability and performance of the Service;
• comply with law and enforce our agreements; and
• evaluate and improve the Service using limited operational and product-interaction information.

We do not use information for targeted advertising, cross-app tracking, or the sale of personal information.

4. How We Disclose Information

We may disclose information in the following circumstances.

A. Service providers

We use service providers that help us operate the Service, such as providers of authentication and SMS delivery, cloud hosting, databases and file storage, course data, maps or imagery, weather information, email, customer support, security, and diagnostics. They may process information only as needed to provide services to us or as otherwise permitted by law.

We require service providers with access to personal information to protect it consistently with this Privacy Policy and applicable law.

B. Apple and Google authentication

When you use Sign in with Apple or Sign in with Google, Apple or Google processes information under its own terms and privacy policy. Divot uses information received from those services only to provide and secure your Divot account and related user-facing features.

If you disconnect an authentication provider, revoke authorization, or delete your Divot account, we will take the steps described in Section 8. Disconnecting Divot does not delete your Apple Account or Google Account.

C. Legal, safety, and security purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, legal process, or a valid government request;
• protect the rights, safety, or property of Divot, our users, or others;
• investigate fraud, abuse, or security incidents; or
• establish, exercise, or defend legal claims.

D. Corporate transactions

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction. Where required, we will provide notice or obtain consent before personal information becomes subject to materially different privacy practices.

E. With your direction

We may disclose information when you direct us to do so or give us permission.

5. No Sale, Targeted Advertising, or Tracking

Divot does not sell personal information. Divot does not share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or track users across apps or websites owned by other companies.

Because the current version of the Service does not engage in tracking as Apple defines that term, Divot does not request App Tracking Transparency authorization.

If these practices change, Divot will update this Privacy Policy, provide any required choices or consent mechanisms, and update its App Store disclosures before beginning the new practice.

6. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining security, complying with legal obligations, and resolving disputes.

Our expected retention periods for the current version of the Service are:

• Account and saved golf information: while your account is active, unless you delete particular information sooner.
• Profile pictures and round photos and videos: while your account is active, unless you or a participant in the round removes them sooner; deleted with your account. If a round’s host deletes the round or their account, the round’s photos, videos, and scores are deleted for all participants. Copies stored on your device remain there until you or the app deletes them.
• Deleted accounts: removed from active systems within 30 days after we verify and accept the deletion request.
• Backup copies: designed to expire through normal backup rotation within 90 days after deletion from active systems.
• Authentication and agreement records: while the account is active and afterward only as reasonably necessary to document the transaction, resolve disputes, enforce agreements, or comply with law.
• Diagnostic events reported by the app: automatically deleted after 90 days; events linked to your account are also deleted immediately with your account. Events reported while signed out are not linked to an account and age out on the same 90-day schedule.
• Security and operational logs: generally retained for up to 12 months, unless a shorter period is sufficient or a longer period is reasonably necessary to investigate an incident or comply with law.
• Support records: for the time needed to resolve the request and maintain an appropriate record of the resolution.

We may retain limited information for longer when required or permitted by law, including information needed for security, fraud prevention, dispute resolution, or legal compliance. Information retained in backups is isolated from ordinary use and deleted according to the backup cycle.

7. Your Choices and Privacy Rights

A. Device permissions

You may control precise location access through iOS Settings. Withdrawing permission prevents GPS-dependent features from using your live location but does not prevent use of features that do not require it.

Camera, microphone, and photo-library-add permissions are likewise controlled through iOS Settings and are requested only when you use the related capture features. Withdrawing them disables photo and video capture or saving to your library but does not affect the rest of the Service.

B. Account information

You may review or update available account information through the app. You may contact us if information cannot be corrected in the app.

C. Privacy requests

Depending on where you live and subject to applicable exceptions, you may have the right to:

• know whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain certain information in a portable format;
• withdraw consent where processing is based on consent;
• opt out of certain sales, sharing, targeted advertising, or profiling; and
• appeal our decision on a privacy request.

Divot does not currently sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

To submit a request, email support@divotgolfusa.com. Please describe your request and provide enough information for us to identify the relevant account. We may need to verify your identity before completing a request. You may use an authorized agent where applicable, but we may require proof of the agent’s authority and verification of your identity.

We will not discriminate against you for exercising a privacy right. We will respond within the period required by applicable law.

D. Authentication-provider controls

You may manage Divot’s access through your Apple or Google account settings. Revoking provider access may sign you out or affect your ability to access a Divot account. If you want Divot account information deleted, use Divot’s in-app account-deletion process or contact us; revoking provider access alone may not delete information already stored by Divot.

E. Communications

At launch, Divot sends only service-related communications, such as authentication, account, security, support, legal, or material policy notices. Divot does not send promotional marketing emails.

8. Account and Data Deletion

Registered users may initiate deletion from the account or privacy settings inside the app. We may require reauthentication and a confirmation step to protect against accidental or unauthorized deletion.

Deleting your Divot account is intended to:

• delete the account and saved golf information from active systems;
• delete your profile picture and your round photos and videos (including optimized copies and previews) from active systems, and remove the photos and videos the app stored locally on your device;
• delete diagnostic events linked to your account;
• revoke or disconnect applicable Sign in with Apple or Sign in with Google credentials;
• sign the app out and remove account-related information stored locally where technically possible; and
• schedule remaining backup copies for expiration through the normal backup cycle.

We expect to complete deletion from active systems within 30 days and backup expiration within 90 days. We may retain limited information when required or permitted by law, as described in Section 6. If you host rounds, deleting your account also deletes those rounds for all participants, including their scores and captures in those rounds.

Deleting Divot does not delete your Apple Account or Google Account. Deleting the app from your device without using the account-deletion process may remove local information but does not by itself delete a registered Divot account or information stored on Divot’s systems. Some device-local records — such as app settings, captures you saved to your photo library, and the app’s install identifier — remain on your device until you remove them or delete the app.

Guest users can remove locally stored guest information by using any available “Clear Guest Data” control or by deleting the app. If Divot creates a server-side guest account in the future, Divot will provide a way to delete that account and its associated information.

9. Children and Teen Users

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Users who have not reached the age of legal majority where they live may use the Service only with the permission and supervision of a parent or legal guardian, as described in our Terms of Service.

Divot does not sell or share the personal information of users under 18 for targeted advertising and does not knowingly use their personal information for targeted advertising.

If we learn that a child under 13 has provided personal information, we will take reasonable steps to close the account and delete the information as required by law. A parent or guardian who believes a child under 13 has provided information may contact support@divotgolfusa.com.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards include measures such as encrypted transmission, access controls, protected authentication credentials, service-provider review, backups, monitoring, and incident-response procedures appropriate to the nature of the information.

No system is completely secure. We cannot guarantee that information will never be lost, accessed, disclosed, altered, or destroyed without authorization.

11. Third-Party Services and Links

The Service may contain information, links, maps, imagery, course information, or other material provided by third parties. A third party’s own privacy policy applies when you interact directly with its service or leave Divot for its website or application.

This Privacy Policy does not govern information that Apple, Google, a golf course, or another third party collects independently for its own purposes.

12. United States Service

The Service is currently offered in the United States. Information may be processed and stored in the United States, where privacy laws may differ from those in other locations.

Before Divot expands to another country, we will review and update our privacy disclosures, data-transfer practices, and user rights as necessary.

13. Changes to This Privacy Policy

We may update this Privacy Policy as the Service evolves or legal requirements change. We will post the updated policy, revise the Effective Date, and provide additional notice when required by law or when changes materially affect how we use personal information.

Where required, we will request consent before applying a materially different practice to information already collected.

14. Contact Us

Questions, complaints, and privacy requests may be sent to:

Knowhere Technologies, Inc. d/b/a Divot Golf
312 W 43rd Street, Unit 15G
New York, NY 10036
United States
Email: support@divotgolfusa.com