Privacy Policy

1. Who we are

“GreenBet” (the “App”, “we”, “us”) is published under the iOS bundle identifier com.greenbetgolf.app and Android package com.greenbetgolf.app. This policy explains what data the App collects, how it is used, and the choices you have.

2. Information we collect

2.1 Account information

• Name and email address — collected during signup and used for authentication via Supabase.
• Password — stored as a salted hash by our authentication provider (Supabase). We never see or store the plain-text password.
• Player code — a unique identifier (e.g., GBT-XXXX) generated for your profile so friends can find you in the app.

2.2 Optional profile information

• GHIN number — the 7-digit USGA handicap identifier, if you choose to enter it.
• Handicap index — numeric handicap, if you choose to enter it.
• Venmo handle — if you provide one, it is stored on your profile so other players in your rounds can pre-fill a Venmo payment to you when settling bets. The App opens Venmo with the payment pre-filled; we never move money ourselves.
• Avatar image — if you upload one (this feature may not be active in all builds).

Visibility note: Your name, email, player code, handicap, Venmo handle, and avatar are searchable by other GreenBet users so they can add you to a round. Do not enter information you are not comfortable sharing with people who might add you to a game.

2.3 Location data

If you grant location permission, the App requests your device location one time, on demand, when you tap “Find course near me.” Location is used only to compute distance to nearby golf courses on your device; it is not continuously tracked, not stored on our servers, and not shared with third parties. You can deny or revoke this permission in your device settings; you can also enter a course manually instead.

2.4 Camera and photo library

If you choose to scan a paper scorecard, the App will ask for camera or photo library access. The selected image is resized on your device, uploaded to our private storage bucket, and processed by an optical-character-recognition service (see Section 4) to extract scores. Scorecard images are retained on our storage to support troubleshooting and re-processing; you may request deletion at any time (Section 7).

2.5 Round and gameplay data

• The courses, tees, and dates of rounds you record.
• Per-hole scores and (optionally) putts for you and your playing partners.
• Game configurations and results — e.g., Nassau, Match Play, Banker, Wolf, Junk Bets — including the calculated amounts owed between players.
• Settlement state (which player has marked an amount as paid).
• Spectator share tokens. If you choose to share a live round, the App generates a unique link (e.g., https://greenbet.triagedigital.com/watch/<token>). Anyone with the link can read the round’s scores in real time and see who is currently scoring. They cannot edit scores or take over scoring without an explicit handoff from the active scorekeeper. You can stop sharing by ending the round; tokens for completed rounds no longer expose live data.

2.6 Local on-device data

To keep you from losing scores if the app crashes or is force-closed mid-round, the App periodically saves a snapshot of the current round (scores, putts, and game-action selections) to local storage on your device. This data never leaves your device until you tap the button that submits a hole or finishes the round. Uninstalling the App removes it.

2.7 Subscription information

In-app subscriptions (if any) are processed by Apple (App Store) or Google (Play) and managed through RevenueCat. We receive your subscription status (active / inactive / tier) and an anonymized purchase identifier; we do not receive your credit card number, billing address, or other payment details.

2.8 Push notification token

If you grant notification permission, we may receive an Expo push token associated with your device so we can deliver round-related notifications (e.g., a settlement reminder). Push notifications can be disabled in your device settings.

2.9 Information we do not collect

• We do not run third-party analytics, advertising, or behavioral-tracking SDKs.
• We do not access your contacts, microphone, calendar, or health data.
• We do not collect your precise location in the background.
• We do not sell personal information.

3. How we use information

• To create and authenticate your account.
• To save and display your rounds, scores, game results, and settlement state.
• To let other players you share a round with see the round and find you by name or player code.
• To detect nearby courses when you ask us to.
• To extract scores from a scorecard image when you ask us to.
• To deliver in-app purchase entitlements through RevenueCat.
• To send round-related push notifications you have opted into.
• To diagnose bugs and improve the App.

4. Service providers we share data with

We share the minimum information necessary with the following providers, each of which acts on our behalf:

• Supabase, Inc. — database, authentication, file storage, and serverless functions. Hosts your account, profile, rounds, and uploaded scorecard images.
• RevenueCat, Inc. — subscription management. Receives your account ID and subscription events.
• Anthropic, PBC (“Claude”) — optical character recognition for scorecard images you submit. Images are sent only when you initiate a scorecard scan.
• Apple, Inc. and Google LLC — in-app purchase processing and push-notification delivery; subject to their own privacy policies.
• Expo (650 Industries, Inc.) — push-notification delivery infrastructure for tokens issued through the Expo push service.

We do not share data with advertisers or data brokers. We may disclose information if required by law (e.g., a subpoena) or to protect the rights, safety, or property of GreenBet, our users, or the public.

5. Where data is stored

Data is stored on cloud infrastructure operated by our service providers, which may be located in the United States or other countries. By using the App you consent to your data being processed in those locations.

6. Security

Connections between the App and our servers use TLS encryption. Database access is restricted by row-level security policies. No system is perfectly secure; you are responsible for keeping your password and device safe.

7. Your choices and rights

• Access or correction: you can update most profile fields in the App’s profile screen.
• Permissions: location, camera, photos, and notifications can be granted or revoked at any time in your device settings.
• Account deletion: to delete your account and associated rounds, scorecard images, and profile data, email us at the address in Section 11. We will process verified deletion requests within 30 days. (An in-app deletion flow is planned for an upcoming release.)
• Marketing email: we do not currently send marketing email. If we add it, it will be opt-in.

Depending on where you live, you may have additional rights under the GDPR, UK GDPR, CCPA/CPRA, or other laws (e.g., the right to data portability or to object to processing). To exercise any such right, contact us using the address in Section 11.

8. Data retention

We keep your account and round data while your account is active. Scorecard images uploaded for OCR are retained to support reprocessing and troubleshooting. When you delete your account, we delete or anonymize associated personal information within 30 days, except where retention is required by law.

9. Children

GreenBet is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated in the App or by email when feasible.

11. Contact

Questions, requests, or complaints about this policy or your data can be sent to:

GreenBet Privacy
Email: privacy@triagedigital.com

We aim to acknowledge requests within 5 business days and to substantively respond within 30 days.