Privacy Policy

This Privacy Policy explains how TeeUp House Ltd (“TeeUp House”, “we”, “us”) collects, uses, shares and protects personal data when you use the TeeUp House mobile app and website (the “Service”). We are the data controller. If you have questions, contact privacy@teeuphouse.com.

1. Data we collect

We collect the following, depending on how you use the Service:

• Account & profile — first and last name, email, gender, country and player type (amateur or professional); your club, licence number and golf federation (required for professionals, optional for amateurs) and, if you add one, your handicap. These are your own statements: we do not check them against a federation, although our team can mark a declaration as verified by hand. Optional: a profile photo, @handle, date of birth and short bio.
• Authentication — a hashed password (we never store it in plain text) and, if you sign in with Google or Apple, the account identifier, email address and — where you share it — name that the provider returns. We never receive your Google/Apple password.
• Activity — games you host or join, including whether you said you play the course as a member or a guest; attendance marks; scorecards; course reviews and photos; the ratings you give other players after a round; tournaments you enter; tee time requests (the size of your group and how many of you are members of the course); favourites and the people and organisations you follow; marketplace listings; the sales you record or are asked to confirm (the listing, its price at the time, the other member and whether the sale was confirmed); the reviews you write after a sale; and, if a pro shop or agency records that it served you, that record and any review you write about it.
• Messages, posts & stories — what you send in one-to-one chats, group chats and to organisations: text, photos, videos, voice messages and any location you choose to share. Also the posts, comments and stories you publish — a story is a photo, video or short text that people who follow you can see for 24 hours. Text you send passes through automated content filtering, and anything flagged or reported may be reviewed by moderators. If you unsend a message it disappears from the conversation, but we keep it so that a report about it can still be reviewed.
• Payments — we do not take any payment from you today. Marketplace payments happen directly between buyer and seller, outside the Service; listing is free; we take no commission. We therefore do not collect or store card or bank details of any kind. If we later charge for something (for example a listing fee or a membership), the payment would be handled by our payment processor, card details would be entered directly with them and would never be stored on or transmitted through our servers — and we would update this page before that happens.
• Location — only if you allow it. The app reads your device’s location (precise location, if you grant it) to show games, courses and tee times near you, to work out distances and to show where you are on the course map. It is sent with those requests and is not stored with your account, with two exceptions: the approximate position described in the next item, and any location you choose to share in a chat, which is stored with that message and shown to the people in the conversation. You can revoke this at any time in your device settings.
• Stored approximate location — separately from the above, and only if you switch on Use my location in notification settings, we keep your latest approximate position so we can tell you about games and wanted listings near you. It is rounded to roughly one kilometre before it is stored, it is never shown to other users, and it is not used for advertising. The switch is off unless you turn it on; turning it off deletes what was stored, and deleting your account removes it too.
• Notification areas — places you add in notification settings so we can tell you about new games there: the place name, its centre point, a radius and, if you set them, the dates the area is active. They are never shown to other users. Removing an area deletes it, and deleting your account deletes them all.
• Problem reports & feedback — if you use Report a problem in your profile, or report missing details on a course page, we keep what you wrote, which course it was about (if any), and your app version and device platform, which the app adds automatically so we can reproduce the problem. This is read by our own team only and is never used for advertising.
• Identity documents — only if you choose to apply for an ID checked badge. We collect the name printed on the document, the country that issued it, and up to 2 photos or scans of a passport, national ID card or driving licence. This is the most sensitive thing we ever hold about you and it is handled differently from every other upload — see “Identity documents” below. Nobody is required to send one: the badge is optional and not having it restricts nothing.
• Organisation accounts — if you run a golf club, pro shop or agency on TeeUp House: the business name and legal name, tax ID or company number, contact phone number and the registration documents you upload, which our team reads to verify the business, plus the names and email addresses of the people who run the account, which they can see of each other in the business panel.
• Website waitlist — if you join the waitlist on our website: your email address, whether you confirmed it, the language of the page, and the date and network (IP) address of the sign-up, which we keep as the record of your consent. We use it only to send the confirmation email and to tell you when the app launches, and every launch announcement has a one-click unsubscribe link.
• Device & technical — a push-notification token (if you enable notifications), the device type and IP address of each device you are signed in on (you can see and end these sessions in the app), and basic diagnostic and error data used to keep the Service secure and reliable.

What other people can see on your profile

Some of what you tell us is shown to other signed-in users when they open your profile. This is the complete list:

• your first and last name, your @handle and your profile photo;
• your country and gender;
• your player type (amateur or professional);
• your club and your golf federation;
• your handicap, and whether it has been verified;
• whether your identity has been checked — the badge only, never the document;
• your age in years — your date of birth itself is never shown, only the age calculated from it;
• your bio and the date you joined.

Separately from the fields above, your profile also shows activity counts — rounds played, courses, best score, course reviews written and confirmed sales — and the badges you have earned, plus what other members have said about you: ratings from players after a round together, and reviews from members you sold to or bought from, with an average only once there are enough of them. The ratings and reviews are written by others about a round or a sale you shared. All of this stays visible even when your profile is private. You can report a sale review from the review itself.

Everything else stays private. In particular, your email address, your licence number and your date of birth are never shown to other users, and your stored approximate location never is either.

If you switch your profile to private, people who are not your friends see only your name, your @handle, your photo, your player type (amateur or professional), whether your handicap has been verified, whether your identity has been checked, and the date you joined — plus the activity counts, badges, ratings and reviews described above. Every other field above is withheld — it is left out of the response itself, not merely hidden in the app.

One exception, and it is deliberate. Inside a round you have joined or asked to join, the player list shows every player’s gender, handicap and home club — including players whose profile is private. Nothing new is collected for this: these are the same three fields listed above, shown in one more place. The reason is the round itself. The host picks the format and the handicap allowance by reading the handicaps in the list, and you decide whether a round suits you by seeing who is in your flight; a masked player list would make the main screen of a round unreadable. Asking to join someone else’s round is already a deliberate opening towards that round. Everywhere else — on your profile, in search, in the feed — a private profile still shows only your name, @handle, photo, player type, the two verification badges and the date you joined.

Most of these fields are yours to change in Profile → Edit profile. A few work differently. Your @handle is changed on its own screen, and once you have chosen one yourself you can change it again only every 30 days. Your gender and country can be changed but not left empty: tee boxes on a course are listed per gender, and your country is what narrows the list of golf federations and decides which club promotions you are shown. The date you joined is a record of a past event, so it never changes. And if you are a professional, your golf federation, club and licence number cannot be cleared either — they are what the professional label rests on. To remove all of it at once, delete your account (section 6).

Identity documents

If you apply for an ID checked badge (Profile → Get verified in the app), you send us a photo or scan of a government document. Because that is far more sensitive than anything else you upload, it is treated as a separate category with its own rules:

• What we collect — up to 2 images or PDFs of a passport, national ID card or driving licence, the name printed on it, and the country that issued it. We do not ask for a document number and we do not read one out of the image into our records.
• Who can read it — only the members of our own review team whose account permissions cover user verification. It is not shown to other players, not shown to clubs, and not sent to any third party. Unlike every other file you upload, it has no public address at all: our storage refuses anonymous reads for it, and a reviewer opens it through a link that is signed at that moment and expires within minutes.
• What it is used for — one question only: does the name on the document match the name on the account. We do not use it for advertising, profiling or any kind of scoring.
• How long we keep it — the file is deleted from storage automatically after the review, whether we approve you or not. Today we hold it for 30 days after the decision, so a decline can still be challenged. That window is not settled yet — it is still under legal review, and this page always shows the one in force. Deleting your account deletes the files immediately, whatever stage the review is at.
• What survives — after the file is gone we keep the record of the application itself: when you applied, which kind of document you named, and what was decided. That is our audit trail for a decision that puts a badge on a profile, and it contains no image of your document.

2. Why we use it (legal bases)

• To provide the Service — creating your account, matching games, tee time requests, tournaments, marketplace listings, messaging (performance of our contract with you).
• Safety & moderation — content filtering, reporting, blocking and fraud prevention (our legitimate interest and legal obligations).
• Notifications, location & marketing — where these rely on permissions you grant (your consent, which you can withdraw at any time).
• Promotions — choosing which organisations’ promotions to show you, using only your country and, on the games list and the join-a-game screen, the course of the round being shown (our legitimate interest). We do not use advertising networks and we do not track you across other apps or websites.
• Legal & accounting — retaining transaction records where required by law (legal obligation).

3. Who we share it with

We do not sell your personal data, and we do not share it with advertising networks or data brokers. It reaches three groups: other members, who see what is described in “What other people can see on your profile” above and whatever you post or send them; the organisations you deal with on TeeUp House; and the service providers that run parts of the Service for us.

Golf clubs, pro shops and agencies

Organisations — golf clubs, pro shops and travel agencies — use TeeUp House too, through accounts run by their staff in our business panel. They see personal data in the normal course of dealing with you:

• Tee time requests — your name, @handle and photo, the size of your group and how many of you are members of the course. The organisation agrees the details and any payment with you directly; TeeUp House does not take the booking or the payment.
• Messages — when you write to an organisation, the people who run its account read and answer your messages. An organisation can also start a conversation with you, but only if you already have a relationship with it: a tee time request, a tournament entry, a service it recorded for you, or an earlier conversation. Following an organisation does not let it message you.
• Tournament entries — your name, player type and handicap, so the organisation can run the tournament.
• Reviews and comments — course reviews on its course pages, reviews you write about a pro shop or agency, and comments on its posts. It can reply to reviews, and it can report or remove comments on its own posts.
• Services — a pro shop or agency can record that it served you; you are asked to confirm, and only then can you review it.
• Follows — an organisation sees how many people follow it, not who they are.

Organisations can also pay us to show a promotion — in the feed, the marketplace, the list of games or tournaments, or on the screen where you ask to join a game. Promotions are always labelled. We pick which ones you see by your country only — and, on the games list and the join-a-game screen, by the course of the round shown — and the organisation learns nothing about you from it: it sees only how many times its promotion was shown and tapped.

Service providers

• Apple & Google — deliver push notifications to your device and, if you choose to use them, provide sign-in. They receive only what is needed to do that.
• Expo (650 Industries, Inc., United States) — relays push notifications from our servers to Apple and Google. It receives your device’s push token and the title and text of each notification.
• Map providers — the course map in the app is drawn by the Google Maps SDK on Android and by Apple Maps on iPhone. They load the map images for the area you are viewing, so they receive that area and your device’s network details. The Google Maps SDK also collects, under Google’s own terms, an identifier for the app installation, diagnostic and crash data, and how you interact with the map.
• Our email delivery provider — an SMTP relay that sends verification, password-reset and notification emails. It receives your email address and the content of that email.
• Our hosting provider — runs the servers and the storage on which the Service and your uploaded photos and files live.
• Sentry (Functional Software, Inc.) — receives crash and error reports from our apps and servers so we can find and fix faults. Our organisation is hosted in the EU region. See the paragraph below for what we remove before a report is sent.

Two things people often assume, which are not true here. No payment provider receives your data, because we take no payment (see section 1). And your photos and files are not held by a third-party cloud: they are stored in S3-compatible object storage that we operate ourselves on our own servers. Identity documents additionally have no public address at all, as described above. Every other file — including photos, videos and voice messages sent in a chat — is served from a long, hard-to-guess address that does not require signing in: the app shows each file only where it belongs, but anyone who is given its exact address could open it.

Crash and error reports. When something goes wrong we send a technical report to Sentry: what failed, where in the code, which page or request you were on, and the software version. We do not use any analytics, advertising or session-recording service, and we do not record your screen.

Before a report leaves your device or our servers we strip the parts that could identify you or give someone access to your account. Removed: cookies and session data, request bodies, authorisation headers, the address of the page you came from, and the values of anything in a web address — so a one-time link such as /reset-password?token=… is reported as /reset-password?token=•, keeping the name of the parameter and dropping the secret. In our web panels we also do not record what you clicked or what the page printed to the browser console, because those can carry other people's names. What remains is the error itself, the page, screen or endpoint, and the software version. Reports from our servers can also include your account id. Reports from the app do not, but they include your device model and operating-system version, an installation identifier created by the reporting tool, and the last steps the app took before the error, with web-address values removed as above. Like any service on the internet, Sentry also sees the network address a report is sent from.

You can ask us for the current list of providers, including their names and locations, at privacy@teeuphouse.com. We may also disclose data where required by law, to protect our users, or in connection with a corporate transaction, subject to appropriate safeguards.

4. International transfers

Your account data and your uploaded files are stored on servers we operate. Some of the providers listed in section 3 are based outside the UK and the European Economic Area — for example Expo in the United States, and Apple and Google, which deliver push notifications worldwide — so limited data (such as a push token and the text of a notification) may be processed outside your country. Where that happens we rely on the transfer safeguards our providers offer, such as adequacy decisions or standard contractual clauses in their data-processing terms, and we keep the amount of data sent to them to the minimum needed.

5. How long we keep it

We keep your account data for as long as your account is active. Some things go sooner on their own: a story stops being shown after 24 hours, identity documents are deleted after the review (see “Identity documents” in section 1), turning off Use my location deletes your stored position, and removing a notification area deletes it.

When you delete your account, this is what happens to it — the same list, item by item, is on our Delete your account page:

• Deleted — your sign-in methods and sessions, password-reset and verification records, push tokens and stored notifications, notification areas, the organisations you follow, your identity-check applications and their documents, your profile photo, the photos, videos and voice messages you sent in chats, and your stories.
• Anonymised — the account itself is kept as an empty shell named “Deleted User”: your email address, password and the personal details on your profile are cleared, so records that other people are part of — a round you played together, a sale, a conversation — still make sense without pointing to you.
• Stopped — your listings for sale are taken down, rounds you were hosting that had not been played yet are cancelled, any sale still waiting for an answer is withdrawn, and your tee time requests — confirmed ones included — are cancelled, so their places go back to the organisation.
• Kept, attributed to a deleted account — comments, reviews and ratings you wrote, including reviews after a sale, which stay on the other member's profile; the text of messages you sent and any locations you shared, which stay in the other people's conversations; records of rounds, scorecards, tournament entries, confirmed sales and services; posts, listings and reviews together with their photos; your connections to other members (friends, follows, favourites and blocks); and the reports and feedback you sent us.

Your posts are not deleted either: people who followed you can still see them and links to them keep working, but they no longer appear on your profile, in Discover or its search, or on hashtag and course pages. We also keep payment and transaction records for as long as the law requires, for accounting and legal compliance.

6. Your rights

Subject to your local law (including the UK GDPR, the EU GDPR and KVKK), you may have the right to access, correct, delete, export, restrict or object to the processing of your data, and to withdraw consent. You can exercise the core rights directly in the app:

• Delete your account — Profile → Account & data → Delete account. If you cannot use the app, email privacy@teeuphouse.com from the address on the account; we check that the request comes from you and delete the account within 30 days.
• See what we hold — Profile → Account & data → Show my data summary lists, in summary form, the data we hold about you. For a full copy — including your sales, the reviews you wrote, the reviews others wrote about you and your replies to them — write to privacy@teeuphouse.com from the address on your account and we will send it within one month.
• Manage permissions — notifications, location and biometric app-lock are all controllable in-app and in your device settings.

For any other request, contact privacy@teeuphouse.com. You also have the right to lodge a complaint with your data-protection authority — in the UK, the Information Commissioner’s Office (ICO).

7. Children

The Service is not directed to children under 16, and you must be at least 16 years old to have an account. Date of birth is optional: you are not asked for it when you register, but if you add one to your profile it must show that you are at least 16. We do not knowingly collect data from children below that age; if you believe a child has an account, write to privacy@teeuphouse.com and we will remove it.

8. Security

We protect your data with encryption in transit, hashed passwords, access controls, rate limiting and audit logging. No system is perfectly secure, but we work to keep your data safe and to notify you and the authorities of any breach as required by law.

9. Changes

We may update this policy. We will post the new version here with an updated date and, for material changes, notify you in the app or by email.

10. Contact

TeeUp House Ltd · company number 17287704 · 352 Essex Road, London, England, N1 3PD · privacy@teeuphouse.com