Privacy Policy

Effective date: 09/24/26 · Last updated: 10/04/26

FlagStick, Inc. ("FlagStick," "we," "us") operates the FlagStick mobile app. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

Account information: phone number (used to sign in and verify your account), and email if you choose that sign-in method instead
Profile information: display name, and anything else you choose to add to your profile
User content: rounds you log and their scores, course ratings (course condition, layout, scenery, value, and pace of play), head-to-head course comparisons, bucket lists, comments, and any reviews or text you write
Social connections: who you follow and who follows you, and the golfers you tag in a round
Contacts: if you choose to find golfers you know, FlagStick reads the phone numbers in your contacts, converts them into one-way hashes on your device, and matches those hashes against FlagStick accounts. We don't store your contacts or the hashes.
Location: if you allow it, FlagStick uses your location to show golf courses near you and to fill in a course's city and state. Your home city and state are saved to your profile if you add them.
Photos: photos you attach to a round, and photos of a scorecard you choose to scan
Usage and device data: app analytics (screens viewed, general usage patterns, searches), crash reports, and device identifiers such as push notification tokens, collected automatically. We don't use the advertising identifier.

How we use it

To operate core features: your course rankings and ratings, the map of courses you've played, the feed, outings and head-to-head records, finding golfers you know, and course discovery
To maintain the accuracy and integrity of the ranking system (e.g., detecting fake or duplicate rounds)
To communicate with you about your account or material changes to the app
To improve the product based on aggregate usage patterns

We do not sell your personal information.

How we share it

Other users: your profile, rounds, ratings, and rankings are visible to your friends per the app's normal social features; anything you mark private stays private
Service providers: infrastructure and backend providers (e.g., Firebase/Google Cloud for authentication and data storage) and course data providers (e.g., OpenGolfAPI) that power the app — these providers only receive what's needed to do their job, under their own confidentiality terms
Scorecard scanning: when you scan a scorecard, the photo is sent to Google's Gemini AI service to read the scores. It is used only to return the scores to you.
Legal: if required by law, subpoena, or to protect the rights and safety of FlagStick or its users

Data retention and deletion

We retain your account and content for as long as your account is active. You can delete your account and associated personal data at any time in the app, under Settings → Delete account, or by contacting support@flagsstickgolf.com; some data may be retained in de-identified or aggregate form for product analytics.

Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to opt out of certain data uses. To exercise any of these, contact support@flagsstickgolf.com.

California residents (CCPA/CPRA)

You have the right to know what personal information we've collected about you, request its deletion, correct inaccurate information, and opt out of its "sale" or "sharing" — as of this policy's effective date, FlagStick does not sell personal information, and our analytics and infrastructure providers (see "How we share it" above) are used to operate and improve the app rather than for third-party ad targeting. If you'd like to opt out of any data use that could qualify as "sharing" under the CCPA's broad definition, email support@flagsstickgolf.com and we'll honor that request. You also have the right not to be discriminated against for exercising these rights. To submit a request, email support@flagsstickgolf.com with "California Privacy Request" in the subject line; we verify your identity using the phone number or email on your account and respond within 45 days.

EEA/UK users (GDPR)

FlagStick doesn't currently operate in the EEA or UK. If you're accessing FlagStick from there, you have the right to access, correct, delete, or port your data, and to object to or restrict certain processing, under the General Data Protection Regulation. Our processing relies on your consent, given at account creation, and on our legitimate interest in operating the app's core features. We'll expand this section with an EU representative and any additional required disclosures before formally launching in the EEA or UK.

Children's privacy

FlagStick is not directed at children under 13, and we do not knowingly collect data from them.

Security

We use reasonable technical and organizational measures to protect your data, but no system is perfectly secure.

Changes to this policy

We'll notify you of material changes via the app or the email/phone on file before they take effect.

Contact

Questions about this policy: support@flagsstickgolf.com