Privacy Policy

The "data controller" responsible for your information is Calum Lawrence(United Kingdom). You can reach us at calum.d.lawrence@gmail.com for any privacy questions or to exercise your rights below.

We collect the following categories of personal data, and only what's necessary to provide the App:

Account information

• Email address — to identify your account and let you sign in.
• Password — stored as a cryptographic hash; we never see or store your actual password.
• Display name — what's shown on your profile inside the app.

Profile information you provide

• Optional details: handicap, home club, age range, location preferences.
• Profile photo (avatar) if you upload one.

Golf data you log

• Rounds you record (course, date, score, weather notes, your own notes).
• Photos of scorecards you choose to scan.
• Courses you mark as played, on your "My List," or as your home club.

Technical information

• An Apple-issued user identifier (Cognito Subject ID) so we can associate your data with your account.
• Basic device information (iOS version, device model) included automatically in network requests.
• Crash reports, if you opt into diagnostic data sharing in iOS Settings. These contain no personal information.

For absolute clarity:

• We do not collect your precise location, GPS data, or movement history. The app only uses location if you explicitly grant access for a feature like "nearest course," and even then it's used in-memory and never stored on our servers.
• We do not access your contacts, calendar, microphone, or other photos beyond what you explicitly select.
• We do not track you across other apps or websites.
• We do not see, collect, or store your payment-card details. All subscription payments are processed by Apple — see section 12 for the limited subscription information we do receive.
• We do not use third-party advertising SDKs.
• We do not use analytics services that track individual user behaviour across apps.

We use your data only for these purposes:

• To authenticate you when you sign in.
• To store and display the rounds, scorecards, and other content you create.
• To display your stats (best score, average, total rounds, etc.).
• To respond to support requests when you contact us.
• To improve the App through crash reports and aggregated, anonymous usage signals.

We retain your account data for as long as your account exists. When you delete your account (see section 8), we permanently delete your account record, all rounds, all uploaded photos, and all derived data within 30 days.

Aggregated and anonymised data that cannot be linked to you (e.g. "X total rounds were logged this month across all users") may be retained indefinitely.

We do not sell your data. We do not share it with advertisers or marketers. We use the following service providers strictly to operate the App:

• Amazon Web Services (AWS) — hosts our servers, databases, and uploaded photos. AWS processes data on our behalf under a Data Processing Agreement. Data is stored in the eu-west-2 (London) region.
• Apple Inc. — distributes the App via the App Store and handles authentication services if you sign in with Apple in the future.

We may disclose your information if required by law (e.g. a court order), but we'll push back on overbroad requests and inform you where legally possible.

Your data is stored in the United Kingdom (AWS eu-west-2). If you use the App from outside the UK, your data is transferred to and processed in the UK. We rely on standard contractual clauses and the UK's adequacy decisions to safeguard international transfers where they apply.

Under UK and EU data protection law (UK GDPR / EU GDPR), you have these rights:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix any inaccurate information.
• Deletion: ask us to permanently delete your account and all associated data. This is available directly inside the App via Profile → Delete account, or by emailing us at calum.d.lawrence@gmail.com.
• Portability: request your data in a machine-readable format.
• Objection: object to specific uses of your data.
• Complaint: lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

To exercise any of these rights, email calum.d.lawrence@gmail.com. We'll respond within 30 days.

We take the following measures to protect your data:

• All connections between the App and our servers use TLS (HTTPS) encryption.
• Passwords are stored as bcrypt hashes — we never see your actual password.
• Authentication is handled by Amazon Cognito with industry-standard token rotation.
• Uploaded photos are stored in private S3 buckets with signed-URL access.
• Our infrastructure is in AWS eu-west-2 (London) with encryption at rest enabled.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at calum.d.lawrence@gmail.com.

Fore the Record is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their information, please contact us so we can delete it.

Fore the Record is offered as an auto-renewable subscription with a 30-day free trial. Payment is handled entirely by Apple through the App Store. We never see or store your payment-card details, your billing address as held by Apple, or your Apple ID password.

From your subscription we do receive, and store against your account, the following limited information:

• Which plan you are on (e.g. Premium Monthly or Premium Annual).
• Whether your subscription is in a trial, active, expired, or in a grace period.
• The expiry date of your current period, so the App knows when to re-check entitlement.
• A transaction identifier issued by Apple, used solely to verify your subscription status and to support customer-service queries about your account.

We use this information only to deliver the App to you, to keep your access in sync with your subscription state, and (if you contact us) to help resolve any subscription issue. We do not use it for advertising and we do not share it with third parties beyond AWS, which hosts our servers as described in section 6.

The full terms of the subscription — including price, free trial, auto-renewal, and how to cancel — are set out in our Terms of Use. Apple's own privacy practices are described in their privacy policy at apple.com/legal/privacy.

We may update this policy occasionally. When we make material changes, we'll notify you in the App or by email at least 14 days before the new policy takes effect. The current version is always available at https://foretherecord.app/privacy, with the "Last updated" date at the top of this page.

For any question about this policy, your data, or to exercise your rights:

• Email: calum.d.lawrence@gmail.com