Divot Golf Privacy Policy

1. Information We Collect

The information we collect depends on whether you use Divot as a guest or create an account and which features you use.

A. Account and authentication information

You can create an account or sign in using a one-time passcode sent to your phone number or, for existing accounts, your email address. When you do, we collect:

• your phone number and/or email address;
• a unique identifier assigned to your account; and
• authentication tokens and related account-security information.

If you create an account using Sign in with Apple or Sign in with Google, where offered, we may also receive:

• a unique identifier assigned by the authentication provider;
• your email address, including an Apple private relay email address if you choose Hide My Email;
• your name, if the provider supplies it; and
• authentication tokens and related account-security information.

We do not receive your Apple or Google password. We use authentication information to create and secure your Divot account, keep you signed in, and help you access saved information.

B. Eligibility and agreement records

We may retain:

• the version of our Terms of Service and Privacy Policy presented to you;
• the date and time of your acceptance or acknowledgement; and
• related account or device identifiers needed to maintain those records.

Our Terms include eligibility requirements, including a minimum age of 13. We do not collect your full date of birth or separately store your age in the current version of the Service.

C. Golf activity and information you provide

Depending on the features you use, we may collect information such as:

• profile information you choose to provide, such as your name and a profile picture;
• golf courses you select or save;
• rounds, scores, shots, putts, chips, penalties, and related entries;
• scorecards, round history, and course selections;
• statistics, summaries, and insights generated from your golf information; and
• preferences and settings associated with your account.

Registered users may have this information stored with their accounts so it can be retained and accessed across sessions or devices. Guest information may remain only on the device and may be lost if the app is deleted, the device is reset or replaced, or local app data is removed.

D. Profile pictures, round photos, and videos

If you choose to add a profile picture, the photo you select or take is uploaded to and stored on Divot’s servers with your account. Your profile picture may be visible to other players in rounds you share; it is not part of a public profile.

During a round, you may capture photos and videos of your holes using your device’s camera; videos include audio recorded by the microphone. In the current version of the Service, these photos and videos are stored on your device, not on Divot’s servers. We store only limited related records on our servers — such as a file reference and the round and player a capture belongs to — so the app can show your media alongside your rounds. Other players in your round may see the number of captures associated with the round, but not the photos or videos themselves.

If you choose to save a capture to your device’s photo library, iOS asks for add-only photo-library permission. Divot does not read, scan, or upload the contents of your photo library. Camera and microphone access are requested only when you use capture features and are controlled through your device settings.

E. Location information

Divot requests access to your device’s precise location when you choose to use GPS-dependent features, such as the rangefinder. In the current version of the Service, precise live GPS coordinates are processed on your device to calculate and display distances. Divot does not transmit or store your precise live GPS coordinates on its servers.

Your device’s operating system controls location permission. You may deny or withdraw permission through your device settings. GPS-dependent features will not work without location access, but you may continue to use features that do not require your live location, such as manually searching for and viewing courses.

Course selections, round entries, and other golf information may reveal the general area where you play. We treat that information according to this Privacy Policy even though it is not a stored record of your live GPS coordinates.

F. Course searches and product interactions

We process course searches, course selections, and app interactions as needed to provide requested features. We may also collect limited product-interaction information to understand whether core features work and to protect the Service.

We do not build an advertising profile from your searches or app activity. We do not use this information to track you across apps or websites owned by other companies.

G. Device, log, and diagnostic information

We may collect limited technical information needed to operate, secure, and troubleshoot the Service, such as:

• app and operating-system version;
• device type and general configuration;
• dates and times of requests;
• IP address and similar network information;
• authentication, security, and error events; and
• crash and performance information.

We use privacy-minimizing diagnostics and narrowly scoped operational logs. If you choose to share diagnostics with Apple, Apple may make certain diagnostic information available to us under Apple’s terms and privacy practices.

We do not collect an advertising identifier in the current version of the Service.

H. Support communications

If you contact us, we collect the information you provide, such as your email address, the content of your message, attachments you choose to send, and information needed to investigate or resolve your request.

2. Information We Do Not Currently Collect

The current version of the Service does not collect payment-card information, contacts, HealthKit information, fitness sensor data, or advertising identifiers. Divot does not read or scan your photo library, and the round photos and videos you capture stay on your device as described in Section 1.D — the only photo stored on Divot’s servers is a profile picture you choose to upload.

The Service does not offer public profiles, social feeds, messaging, targeted advertising, or cross-app tracking. Your profile picture and round activity may be visible to other players in rounds you share, but not to the public.

If Divot adds a feature that changes these practices, we will update this Privacy Policy and the relevant notices before or when the feature becomes available.

3. How We Use Information

We use information to:

• provide course search, GPS rangefinder, scoring, scorecard, statistics, and insight features;
• create, authenticate, secure, maintain, and support accounts;
• save and synchronize registered users’ golf information;
• store and display your profile picture and show your round photos and videos alongside your rounds;
• personalize the Service based on information a user has chosen to save;
• respond to support, privacy, and legal requests;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• diagnose errors and maintain the reliability and performance of the Service;
• comply with law and enforce our agreements; and
• evaluate and improve the Service using limited operational and product-interaction information.

We do not use information for targeted advertising, cross-app tracking, or the sale of personal information.

4. How We Disclose Information

We may disclose information in the following circumstances.

A. Service providers

We use service providers that help us operate the Service, such as providers of authentication, cloud hosting, databases, course data, maps or imagery, weather information, email, customer support, security, and diagnostics. They may process information only as needed to provide services to us or as otherwise permitted by law.

We require service providers with access to personal information to protect it consistently with this Privacy Policy and applicable law.

B. Apple and Google authentication

When you use Sign in with Apple or Sign in with Google, Apple or Google processes information under its own terms and privacy policy. Divot uses information received from those services only to provide and secure your Divot account and related user-facing features.

If you disconnect an authentication provider, revoke authorization, or delete your Divot account, we will take the steps described in Section 8. Disconnecting Divot does not delete your Apple Account or Google Account.

C. Legal, safety, and security purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, legal process, or a valid government request;
• protect the rights, safety, or property of Divot, our users, or others;
• investigate fraud, abuse, or security incidents; or
• establish, exercise, or defend legal claims.

D. Corporate transactions

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction. Where required, we will provide notice or obtain consent before personal information becomes subject to materially different privacy practices.

E. With your direction

We may disclose information when you direct us to do so or give us permission.

5. No Sale, Targeted Advertising, or Tracking

Divot does not sell personal information. Divot does not share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or track users across apps or websites owned by other companies.

Because the current version of the Service does not engage in tracking as Apple defines that term, Divot does not request App Tracking Transparency authorization.

If these practices change, Divot will update this Privacy Policy, provide any required choices or consent mechanisms, and update its App Store disclosures before beginning the new practice.

6. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining security, complying with legal obligations, and resolving disputes.

Our expected retention periods for the current version of the Service are:

• Account and saved golf information: while your account is active, unless you delete particular information sooner.
• Profile pictures and round-media records: while your account is active, unless you replace or remove them sooner; deleted with your account. Photos and videos stored on your device remain there until you or the app deletes them.
• Deleted accounts: removed from active systems within 30 days after we verify and accept the deletion request.
• Backup copies: designed to expire through normal backup rotation within 90 days after deletion from active systems.
• Authentication and agreement records: while the account is active and afterward only as reasonably necessary to document the transaction, resolve disputes, enforce agreements, or comply with law.
• Security and operational logs: generally retained for up to 12 months, unless a shorter period is sufficient or a longer period is reasonably necessary to investigate an incident or comply with law.
• Support records: for the time needed to resolve the request and maintain an appropriate record of the resolution.

We may retain limited information for longer when required or permitted by law, including information needed for security, fraud prevention, dispute resolution, or legal compliance. Information retained in backups is isolated from ordinary use and deleted according to the backup cycle.

7. Your Choices and Privacy Rights

A. Device permissions

You may control precise location access through iOS Settings. Withdrawing permission prevents GPS-dependent features from using your live location but does not prevent use of features that do not require it.

Camera, microphone, and photo-library-add permissions are likewise controlled through iOS Settings and are requested only when you use the related capture features. Withdrawing them disables photo and video capture or saving to your library but does not affect the rest of the Service.

B. Account information

You may review or update available account information through the app. You may contact us if information cannot be corrected in the app.

C. Privacy requests

Depending on where you live and subject to applicable exceptions, you may have the right to:

• know whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain certain information in a portable format;
• withdraw consent where processing is based on consent;
• opt out of certain sales, sharing, targeted advertising, or profiling; and
• appeal our decision on a privacy request.

Divot does not currently sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

To submit a request, email support@divotgolfusa.com. Please describe your request and provide enough information for us to identify the relevant account. We may need to verify your identity before completing a request. You may use an authorized agent where applicable, but we may require proof of the agent’s authority and verification of your identity.

We will not discriminate against you for exercising a privacy right. We will respond within the period required by applicable law.

D. Authentication-provider controls

You may manage Divot’s access through your Apple or Google account settings. Revoking provider access may sign you out or affect your ability to access a Divot account. If you want Divot account information deleted, use Divot’s in-app account-deletion process or contact us; revoking provider access alone may not delete information already stored by Divot.

E. Communications

At launch, Divot sends only service-related communications, such as authentication, account, security, support, legal, or material policy notices. Divot does not send promotional marketing emails.

8. Account and Data Deletion

Registered users may initiate deletion from the account or privacy settings inside the app. We may require reauthentication and a confirmation step to protect against accidental or unauthorized deletion.

Deleting your Divot account is intended to:

• delete the account and saved golf information from active systems;
• delete your profile picture and round-media records from active systems, and remove the photos and videos the app stored locally on your device;
• revoke or disconnect applicable Sign in with Apple or Sign in with Google credentials;
• sign the app out and remove account-related information stored locally where technically possible; and
• schedule remaining backup copies for expiration through the normal backup cycle.

We expect to complete deletion from active systems within 30 days and backup expiration within 90 days. We may retain limited information when required or permitted by law, as described in Section 6.

Deleting Divot does not delete your Apple Account or Google Account. Deleting the app from your device without using the account-deletion process may remove local information but does not by itself delete a registered Divot account or information stored on Divot’s systems.

Guest users can remove locally stored guest information by using any available “Clear Guest Data” control or by deleting the app. If Divot creates a server-side guest account in the future, Divot will provide a way to delete that account and its associated information.

9. Children and Teen Users

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Users who have not reached the age of legal majority where they live may use the Service only with the permission and supervision of a parent or legal guardian, as described in our Terms of Service.

Divot does not sell or share the personal information of users under 18 for targeted advertising and does not knowingly use their personal information for targeted advertising.

If we learn that a child under 13 has provided personal information, we will take reasonable steps to close the account and delete the information as required by law. A parent or guardian who believes a child under 13 has provided information may contact support@divotgolfusa.com.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards include measures such as encrypted transmission, access controls, protected authentication credentials, service-provider review, backups, monitoring, and incident-response procedures appropriate to the nature of the information.

No system is completely secure. We cannot guarantee that information will never be lost, accessed, disclosed, altered, or destroyed without authorization.

11. Third-Party Services and Links

The Service may contain information, links, maps, imagery, course information, or other material provided by third parties. A third party’s own privacy policy applies when you interact directly with its service or leave Divot for its website or application.

This Privacy Policy does not govern information that Apple, Google, a golf course, or another third party collects independently for its own purposes.

12. United States Service

The Service is currently offered in the United States. Information may be processed and stored in the United States, where privacy laws may differ from those in other locations.

Before Divot expands to another country, we will review and update our privacy disclosures, data-transfer practices, and user rights as necessary.

13. Changes to This Privacy Policy

We may update this Privacy Policy as the Service evolves or legal requirements change. We will post the updated policy, revise the Effective Date, and provide additional notice when required by law or when changes materially affect how we use personal information.

Where required, we will request consent before applying a materially different practice to information already collected.

14. Contact Us

Questions, complaints, and privacy requests may be sent to:

Knowhere Technologies, Inc. d/b/a Divot Golf
312 W 43rd Street, Unit 15G
New York, NY 10036
United States
Email: support@divotgolfusa.com