Privacy Policy

1. What we collect

When you create an account we collect your name, email address, and the password you choose (stored as a salted hash — we never see it in plaintext). If you sign up or sign in with Google, we receive your name and email address from your Google profile instead of a password. If you provide a handicap index or a profile photo, we store those too. We do not collect payment information.

When you use the app we store the data you enter: league details, event schedules, RSVPs, tee-time assignments, scores, photos you post to a round, and any wagers you place in a league's Markets (see section 4). We also log standard server-side request metadata (IP address, timestamp, HTTP method and path, response code) for security and debugging.

League organizers can add guests— players who don't have an account. For guests we store only the name the organizer or the guest provides, and their scores. If you join an event as a guest from a league's public page, we also store a random recognition token in your browser so we can greet you by name next time (see section 6).

2. How we use it

• To operate the service — showing you your leagues, events, scores, tee times, and markets.
• To send transactional emails you explicitly trigger (invites, password resets, RSVP confirmations).
• To send push notifications you opt into for live scoring updates.
• To power optional AI features: if your league turns on Bot Coverage, player names and live scoring data are sent to Google's Gemini models to generate commentary and post-round recaps; if you scan a paper scorecard, the photo you upload is sent to the same models to read the scores off it.
• To debug errors and maintain the reliability of the platform.

We do not use your data to serve advertising, and we do not sell it.

3. Who can see your data

Other members of a league you belong to can see your name, handicap index, RSVP status, tee-time assignment, scores, photos you post, and your betting activity in that league (wagers, winnings, settle-up balances, and season betting rankings). League commissioners and admins can additionally manage your membership.

Public league pages.Every league has a public page an organizer can share — and may run a public clubhouse TV display. Anyone with the link can see the league's event schedule and, for events in that league: player names, leaderboards, scores, posted photos, and market lines (market titles and pot totals — not who placed individual bets). If you don't want to appear on a league's public page, talk to your league's organizer or leave the league.

We use third-party infrastructure providers (cloud hosting, database and file storage, email delivery) that process data on our behalf under data processing agreements. As described in section 2, some data is processed by Google when you use Google sign-in or when your league uses AI features. When an event page shows a weather forecast, your browser requests it directly from Open-Meteo, which sees your IP address and the course's coordinates but nothing about you or your league. We do not share data with any other third parties.

4. Markets and betting data

The app includes Markets — friendly betting pools on league rounds, denominated in dollars. Fore Your League is a scorekeeper for these pools: we record the wagers you choose to place, grade them from the scoring data the app already collects, and produce a settle-up summary showing who owes whom. We never hold, transfer, or process money. No payment details are collected, no funds pass through the platform, and any exchange of money happens directly between league members, offline, at their own discretion. Your wagers, results, and running balance are visible to the other members of that league, as described in section 3.

5. Data retention

Your account and all associated data is retained for as long as your account is active. If you deactivate your account, your profile is marked inactive and you will no longer receive communications. If you would like your data deleted entirely, email us at hello@foreyourleague.com and we will delete it within 30 days.

6. Cookies and local storage

We use browser localStorageto store your authentication token so you stay signed in between sessions. If you join an event as a guest, we store a random recognition token the same way so the league's public page can recognize you on a return visit — it identifies your guest record to us and nothing else, and you can clear it any time by clearing your browser data or tapping “Not you?” on the welcome-back screen. We do not use third-party tracking cookies or analytics scripts.

7. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Authentication tokens are short-lived JWTs. We take reasonable precautions, but no system is perfectly secure — please use a strong, unique password.

8. Children

Fore Your League is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. The Markets feature involves wagering real money between league members and is intended for adults.

9. Changes to this policy

If we make material changes we will update the effective date above and, where appropriate, notify active users by email.

10. Contact

Questions? Email us at hello@foreyourleague.com.