Legal

Privacy Policy

Last updated September 5, 2026

SimplyStroke (the “App,” and together with the website at simplystroke.app, the “Service”) is operated by Seaport Systems LLC, a North Carolina limited liability company (“we,” “us,” or “our”). This policy explains what we collect, why, and the choices you have. It covers both the app and the website; where a practice applies to only one, we say so.

The short version: you can keep a solo score without an account, in which case that round never leaves your device. If you create an account, we store your email and the app data you choose to sync, including rounds and private Pro content. Apple processes App Store subscription payments, and RevenueCat helps us verify Pro access. We do not sell your personal information, we do not run ads, and the app does not track you across other companies' apps or websites.

What we collect

Your solo rounds stay local if you play as a guest. The core stroke counter works with no account. In guest mode, the solo rounds you record (course names, dates, pars, strokes, and scores) are stored only on your device. They are not sent to us and we cannot see them. Delete the app and they are gone. If you choose group play, the shared-round data described below is sent so the group can work; technical diagnostics may also be sent as described below.

Account information. If you create an account, we collect your email address (from email/password signup, or shared by Google or Apple when you use those). If you use Sign in with Apple's private-relay option, we receive only a relay address, not your real one. We also store your display name (your first name, seeded from your Google/Apple profile or typed in onboarding). Passwords are handled by Supabase Auth in hashed form; we never see your plaintext password.

Your golf data (when signed in). The rounds you save are synced to our backend so they follow you across devices, including course names, dates, hole counts, pars, strokes, scores, goals, records, saved crews, golf trips, and tournaments. If you never sign in, none of this leaves your device except when you choose a shared group-round feature as described below.

Private round journals. If you use the Pro journal, the note and up to three photos you choose are stored in a private area of our Supabase backend and linked to your account and round. They are not included in scorecard shares or shown to other golfers. Camera and Photos access occurs only when you choose to add or replace a journal photo.

Private iPhone and Apple Watch shot details. With Pro, you can record a stroke, open More on iPhone or Apple Watch, and attach a club choice or text to that latest stroke. The Watch action can be enabled in Profile. Recording a stroke never opens the details flow automatically. If you use iPhone keyboard Dictation or watchOS system Dictation, Apple returns the resulting text to SimplyStroke; the App does not record, receive, retain, or transfer the raw voice audio. The club choice and text are stored privately in Supabase and linked to your account, round, hole, and shot. They are not included in scorecard shares, season recaps, group results, leaderboards, or customer email.

Paper scorecard scanning. If you photograph or choose a paper scorecard to import, Apple's Vision framework reads the prepared image on your iPhone. The source image is kept temporarily in the app's cache and deleted after you save, cancel, or leave the scan flow. It is not uploaded to us or to an OCR provider. Only the scores, pars, course, date, and player name you review and approve are saved as round data.

Group round data. When you host or join a group round using a join code, your display name and your per-hole strokes and scores for that round are stored on our backend and shown live to the other players in that same round. Messages and reactions you choose to send are also stored and shown to that group. Reports and blocks are stored so we can enforce the community rules. Only people with the join code can see the group, so share codes only with people you want in it.

Crews, trips, tournaments, and public leaderboards. Information you add to a crew, golf trip, or tournament, such as its name, location label, dates, roster display names, handicaps, teams, and scores, is stored on our backend and shared with the invited participants. If you separately choose to post a completed round to a public course leaderboard, the display name and optional home city you choose, course, score, and date played become public. Posting is off by default, never includes your email or exact location, and can be undone in the app.

Apple Health on Apple Watch. If you grant permission, the Watch app starts and saves a Golf workout in Apple Health while a round is active. This helps the counter stay available on your wrist and lets the workout count toward your Activity. SimplyStroke does not read your HealthKit data, and workout data is not sent to our backend or another SimplyStroke provider.

Subscription information. Pro purchases are processed by Apple through the App Store. We do not receive your payment-card number. RevenueCat receives an account identifier and App Store purchase and entitlement information so we can activate, restore, and support Pro access. We store the verified entitlement status and expiration date on our backend.

Customer email and preferences. For signed-in users, we store whether you want product updates and a monthly golf digest, plus the information needed to honor unsubscribe and suppression requests. We may send a one-time follow-up after your first completed round, product updates when that preference is enabled, and a monthly recap when an eligible Pro user opts in. Resend processes the email address and message for delivery. We record delivery events such as sent, delivered, bounced, complained, failed, suppressed, and unsubscribed; if email engagement measurement is enabled, we may also record the first open and click for a message. Every customer email includes an unsubscribe link.

Location, only to find nearby courses. If you use “find courses near me,” the app asks permission to access your device location. With permission, it reads your approximate location once, at low accuracy, and sends those coordinates to the OpenStreetMap Overpass API to list golf courses near you. We use your location only in that moment, only to find courses. We do not track your location in the background and we do not store it for advertising or profiling. You can decline the permission and search for courses by name instead.

Course and par lookups. When you search for a course by name, that search text is sent through our server to GolfCourseAPI to fill in par and tee data. The request goes through our own proxy so the provider key never ships in the app. We cache the normalized search text and matching course list for up to 24 hours so repeated searches do not create duplicate paid requests. That cache is not linked to an account.

Diagnostics and crash reports. To keep the app stable, it automatically reports technical errors and crashes to our backend. A report may include the error message and stack trace, the app version and build, your device's operating-system version, the screen you were on, and limited non-sensitive context. If you are signed in, the report includes your account user ID so we can connect repeated issues. These go to our database and our internal admin dashboard and are used only to diagnose and fix bugs, never for advertising, and we do not sell them.

First-party product analytics. We record events such as app launches, rounds started and completed, scorecard imports, and group or tournament use. Each cold launch gets a new random session identifier; we do not create a persistent advertising or device ID. If you are signed in, an event may also include your account user ID. We use these events only to understand whether the app's features work and are useful.

Abuse prevention. Our public course-search and error reporting endpoints convert the request IP address into a one-way hash for short-lived rate limiting. We do not store the raw IP address or use the hash for advertising or cross-app tracking.

Website (simplystroke.app). If you join the waitlist, we store the email you submit, the page that referred you, and the signup date. Our website also uses Google Analytics 4 and Umami (self-hosted) to measure aggregate traffic, things like “400 people read this page this week.” That tells us how the site is used in aggregate; it does not tell us who you are.

Support. If you email us, we receive your address and whatever you put in the message.

What we do not collect

For clarity, the SimplyStroke app:

How we use information

We use what we collect to:

We do not use your personal information for third-party advertising, and we do not sell or rent it.

Who else touches your data

We share data only with providers that process it on our behalf, each limited to what it needs:

We may also disclose information if required by law or legal process, or to protect the rights, safety, or property of Seaport Systems, our users, or the public; and as part of a merger, acquisition, or sale of assets, subject to this policy. We do not sell your personal information or share it for cross-context behavioral advertising.

Cookies

The app does not use cookies. It stores your login session in your device's secure storage (the iOS Keychain) and your local rounds in on-device storage. The web version of the app at app.simplystroke.app stores similar data in your browser's local storage, not in tracking cookies.

The marketing site uses cookies and similar technologies for the Google Analytics 4 and Umami measurement described above. You can control these through your browser settings; blocking them will not stop you using the site. We do not use advertising or cross-site tracking cookies.

How long we keep it

Guest (local) data stays on your device until you delete it or uninstall the app. We never receive it. Account and synced round data is kept while your account is active and is deleted when you delete your account, including private journal notes, photos, and shot details, except limited records we or our payment providers must keep by law. Temporary scorecard-scan images are deleted from the app cache after the scan flow. A Golf workout saved to Apple Health remains under your control in Apple's Health system and is not retained by us. Crash reports are kept only as long as needed to fix issues. Email preferences and suppression records are kept as needed to honor your choices; waitlist emails are kept until you unsubscribe or ask us to remove them.

Security

We encrypt data in transit (HTTPS/TLS), store your authentication session encrypted at rest on your device, and use access controls at our backend so your data is reachable only by you and, for group rounds, by the players you share a code with. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Your rights

You can ask us to show you what we hold about you, correct it, or delete it, by emailing support@simplystroke.app. You can also delete your account and its data from within the app, which removes your account, synced rounds, private journals, photos, shot details, email preferences, RevenueCat customer record, and group-round participation from our systems. Deleting a SimplyStroke account does not cancel an App Store subscription; manage or cancel that subscription in your Apple Account subscription settings. Every customer and waitlist email includes an unsubscribe link.

California residents (CCPA/CPRA). You have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; and not to be discriminated against for exercising these rights. We do not sell or “share” (as California law defines it) your personal information.

EEA / UK residents (GDPR). You have rights to access, correct, delete, restrict, and port your data, and to object to certain processing. Our legal bases are performing our contract with you (running the Service), your consent or saved preferences (optional customer email, waitlist, and site analytics), and our legitimate interests (keeping the Service secure and working). You may complain to your local data-protection authority.

Children

SimplyStroke is not directed to children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us information, tell us and we will delete it.

International users

We operate in the United States, and information we collect is processed and stored there and by our providers. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.

Changes

If we change this policy we will update the date above, and for material changes we will give more prominent notice. Continuing to use the Service after an update means you accept the revised policy.

Contact

Questions or privacy requests go to support@simplystroke.app, Seaport Systems LLC.

Back to SimplyStroke →