Tavara Privacy Policy

1. Introduction

Tavara Golf ("Tavara," "we," "our," or "us") makes a golf app that connects golfers, organizes rounds and tournaments, and keeps score. This Privacy Policy explains what we collect, how we use and share it, how long we keep it, and the choices you have when you use the Tavara mobile app, the tavaragolf.com website and the tournament manager portal (together, the "Service"). By using the Service you agree to this policy; if you do not agree, please do not use it.

2. Information we collect

Account information

To create an account we collect your first and last name, a username, your email address, a mobile phone number (verified with a one-time SMS code), your date of birth (to confirm you are 18 or older), and, for email sign-up, a password. If you sign in with Apple or Google, we receive the name and email address that provider shares with us and you complete the remaining fields in the app. We also store a one-way hash of your phone number so that friends who have your number in their contacts can find you.

Profile information

Your profile includes your home course and handicap (required unless you link a GHIN account), and optionally a profile photo, a short bio, a free-text location you type yourself, player type, availability, company and role. Your profile is visible to other Tavara users as described in Section 4.

GHIN data

Where the optional GHIN linking feature is available and you choose to link, we store your GHIN number and GHIN password encrypted on our servers and use them to sign in to GHIN on your behalf, to read your handicap and to post the scores you ask us to post. We ask for your explicit consent before linking. Unlinking deletes the stored credentials. GHIN® is a registered trademark of the United States Golf Association; Tavara is not affiliated with or endorsed by the USGA.

Content you create

We store the posts, photos, videos, comments, reactions, scores, scorecards, round statistics, tournament results, group and tournament details, and live-wall media you create in the Service. Recap and highlight videos generated for a tournament combine media from you and other participants with music owned by Tavara.

Bluetooth

With your permission — a consent screen in the app followed by your device's Bluetooth prompt — the app uses Bluetooth Low Energy to let nearby Tavara users discover each other on the course. Your phone broadcasts a random token that only our servers can match to your account; no name, location or other personal data is sent over Bluetooth. Other users within Bluetooth range who are also broadcasting can see your name, photo, handicap and username. You can stop broadcasting at any time.

Contacts

With your permission, the app can check which of your contacts already use Tavara. Your contact list stays on your device: phone numbers are read into memory, converted to one-way SHA-256 hashes on your device, and only those hashes are sent to us to look for matching members. We never receive names or raw numbers, and we do not store the hashes we receive — they are compared and discarded. This is optional and you can decline or revoke contacts access in your device settings.

Camera, microphone and photos

With your permission, the app uses your camera and microphone to capture photos and videos (including audio) for posts, group galleries and tournament live walls, and to scan tournament QR codes, and reads the photos and videos you choose from your library. Media is accessed only when you take an action; the app never scans your library in the background. We remove location metadata (EXIF GPS) from photos when they are uploaded, and media you post is stored in our cloud storage.

Calendar

With your permission, the app adds the games and tournaments you ask it to add to your device calendar and removes events it created if plans change. It writes only those events and does not read or upload the rest of your calendar.

Location

With your permission ("While Using the App"), the app uses your location for three things: finding golf courses near you, showing golfers nearby, and the GPS hole map that shows your live distance to the green and hazards. While the hole map is open during a round, the app keeps receiving your location — including when your phone is locked or the app is in the background — so distances stay accurate as you walk. Your device shows its standard location indicator the whole time, and it stops when you close the map. We do not track your location at any other time.

Your coordinates are used on your device to calculate distances and are sent to our servers only to look up courses near you; we do not store your coordinates or build a history of where you have been. To provide these features your coordinates are also sent to: Mapbox (the map area you view, plus Mapbox's usage telemetry), OpenStreetMap's Nominatim service (to turn your position into a city and postal code), and Open-Meteo (rounded coordinates, for weather at the course). Place names you type when setting your profile location are sent to Komoot's Photon service for suggestions. The location on your profile is text you enter yourself, not a reading from your device.

Usage and diagnostic data

We record which screens you open and which features you use, together with your account ID, a session identifier, your device type and the app version. We keep screen views for 90 days and feature events for 180 days and use them only to understand which parts of the app are used and to fix problems — never for advertising, and we do not share them. We also collect crash and error diagnostics through Sentry, in production builds only: the error, the request that failed, your account ID, IP address, and device and app details. Error reports are scrubbed of authentication headers and do not capture the content of your posts or scores.

Device and technical data

We receive your push notification token (if you enable notifications), IP address, device model and operating system, and app version.

Information from others

A tournament organizer may enter your email address (and optionally your name) to invite you; we store it with the invitation's delivery status. Another user may report content or a profile, and we keep the report. If someone has entered your details and you would rather not be contacted, email us and we will remove them.

3. How we use your information

• Provide and maintain the Service: your feed, connections, groups, rounds, scorecards, tournaments, leaderboards, live walls and recap videos
• Verify your phone number and age, secure your account, and prevent fraud and abuse (including rate limiting)
• Show your profile to other users as described in Section 4, and help you find people you know through hashed contact matching and Bluetooth discovery
• Show live distances on the hole map, courses near you, and weather at the course
• Send notifications about activity that involves you
• Add games and tournaments to your calendar when you ask
• Sync your GHIN handicap and post scores, if you link your account
• Understand how the app is used, fix errors, and improve performance
• Review reports, enforce our Terms, respond to legal requests, and protect users and the public

4. How we share your information

We do not sell your personal information and do not share it for advertising. We share it only as follows:

• With other users. Your name, username, photo, bio, handicap, home course and player type are visible to other signed-in users who find your profile, connect with you, share a group or tournament with you, or discover you nearby. Your posts, scores and tournament results are visible to the audiences those features are designed for; a public tournament's leaderboard is visible to anyone who can view the tournament. Recap videos may include your media and may be downloaded and shared by participants and organizers.
• Live activity. While you are playing a round, your teammates can see on your profile that the round is in progress — the course name, how many holes you have played and your score so far — and can open a read-only view of your scorecard and the round's standings. Wagering and Tavara Bucks information is never included, and only people you are connected with can see any of it. Whoever created the round controls this, for everyone playing in it: they choose it when they set the game up and can change it at any time from the game's settings. If they turn it off, the round is not visible to anyone; if they leave it on, the round is visible to your teammates even if you have turned off the tournament setting below. If you create the round, that choice is yours. Public tournaments follow the account-level setting under Settings › Privacy › Show me in tournament activity; if you enter a public tournament, your standing also appears on its leaderboard, which that setting does not change.
• Service providers that process data on our behalf under contracts that limit their use of it — listed in Section 9.
• Safety and legal. We may disclose information to comply with law or a valid legal request, to enforce our Terms, to investigate fraud or abuse, or to protect the rights, property or safety of Tavara, our users or the public.
• Business transfers. If Tavara is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

5. How long we keep information

6. Security

Your data is stored with Supabase, which provides encrypted storage, authentication and row-level access controls, and our servers enforce who can see what. GHIN credentials are encrypted at rest. All traffic uses HTTPS. No system is perfectly secure; if we learn of a breach that affects your personal information, we will notify you and the relevant authorities as the law requires.

One thing worth being clear about: photos, videos and recap videos are served from public media links so they load quickly across the Service. Anyone who has the direct link to a media file can open it, even without signing in. We do not publish those links, but treat anything you upload as shareable rather than secret.

7. Your rights and choices

• Access and correct. You can view and edit your profile in the app. To receive a copy of the personal information we hold about you, email info@tavaragolf.com; we respond within 45 days.
• Delete. Delete your account in the app (Settings → Danger Zone → Delete Account) — it is immediate — or from https://tavaragolf.com/delete-account, or email us and we will delete it within 30 days.
• Report and block. Report posts, comments, profiles and tournament wall posts from their menus, and block users from their profile or post menu. Blocking hides their content, removes each of you from the other's search results, nearby lists and connection requests, and stops invitations between you.
• Who can watch your rounds. Every game has a "Let teammates watch" setting chosen by whoever creates it; public tournament visibility is under Settings › Privacy.
• Bluetooth, contacts, calendar, camera, microphone, photos, location, notifications. Decline or revoke any of these in your device settings at any time; the features that rely on them stop working and the rest of the app continues to function. Bluetooth broadcasting can also be stopped from the Broadcast screen.
• GHIN. Unlink at any time from Settings; the stored credentials are deleted.
• Marketing. We do not send marketing push notifications or texts. If we ever offer them, they will be opt-in with a way to opt out.

California and other U.S. state residents. Depending on where you live you may have the right to know what personal information we collect and how we use and share it, to access it in a portable format, to correct or delete it, and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information (such as precise location or account credentials) for anything other than providing the Service. Because we do not track you across other companies' sites or apps, we do not respond to browser "Do Not Track" signals. To exercise a right, email info@tavaragolf.com; we will verify the request using your account email. You may use an authorized agent if you give them written permission.

Outside the United States. The Service is operated from the United States and your information is processed and stored there. If you use the Service from elsewhere, you understand that your information is transferred to the United States, where privacy laws may differ from those of your country.

8. Age requirement

The Service is for adults. You must be at least 18 years old to create an account, and we do not knowingly collect personal information from anyone younger. If we learn that an account belongs to someone under 18, we delete it. Contact us if you believe a minor has created an account.

9. Service providers and third parties

• Supabase — authentication, database, file storage and real-time updates
• Railway — hosting for our application servers
• Upstash — caching and rate limiting; briefly holds your account identifier, cached feed content and IP address to detect abuse
• Twilio (through Supabase Auth) — delivers the one-time SMS code that verifies your phone number
• Apple Sign In / Google Sign-In — authentication, only if you choose one of these
• Apple Push Notification service / Firebase Cloud Messaging — deliver push notifications, if you enable them
• Shotstack — renders tournament recap videos; the media in a recap is fetched for rendering and the finished video is copied into our storage
• Mapbox — maps and satellite imagery for the hole map; receives the map area you view and usage telemetry
• OpenStreetMap Nominatim — turns your coordinates into a city and postal code
• Komoot Photon — place-name suggestions for the location you type in your profile
• Open-Meteo — weather at the course, from rounded coordinates
• GIPHY — GIF search; your search terms are forwarded through our servers, your identity is not
• Sentry — error monitoring and crash reporting, in production builds
• golfapi.io — golf course, hole and tee data
• GHIN / USGA — handicap data and score posting, only if you link your account
• Sports-score sources — live scores shown in the app come from third-party feeds; no personal data is sent to them

Each provider operates under its own privacy policy, and we encourage you to review them.

10. Our website and manager portal

We also operate tavaragolf.com — the public website where you can join the waitlist — and a portal where golf course managers run tournaments and submit content. This section covers what the website collects, in addition to everything above.

Joining the waitlist

If you join the waitlist, we collect your first and last name, email address, what you're interested in, and your home course. We store these in a private spreadsheet that only our team can access, and use them to manage the waitlist and contact you about Tavara. As you type your home course, the text you have typed is sent to our servers to suggest matching courses. The signup form is protected by Google reCAPTCHA, which analyzes your device and interactions to tell people apart from bots.

Cookies

The website does not use advertising or analytics cookies. The only cookie we set is a session cookie when a manager or administrator signs in to the portal — it cannot be read by scripts, is only sent over secure connections in production, and expires 30 days after your last visit. Signed-in sessions are stored server-side in our database.

Website analytics

We use Replit's website analytics to understand aggregate page traffic and whether important actions — such as joining the waitlist, signing in, submitting a request, creating a tournament, sending invitations, preparing tee groups, printing tournament materials, or requesting account deletion — are completed. These events use broad details such as area of interest, request type, sign-in method, tournament format, or a range for the number of invitations sent. We do not include names, email addresses, tournament IDs, tournament names, or other free-form content in analytics events, and the analytics do not use cookies.

Error monitoring

Website supplement (supersedes the app-authored tracing/replay statement): Like the app, the website uses Sentry to catch errors. Website reports contain only sanitized error diagnostics: allowlisted native error categories, same-origin build asset filenames, numeric stack line and column locations, and source-map debug IDs for mapping. Raw error messages, function names, request data, user data, arbitrary contexts, and breadcrumbs are dropped. Tracing transactions, replay sessions, logs, feedback, and attachments are disabled or blocked before transport.

Manager portal accounts

Golf course manager accounts are created by our team, not by public signup. For each manager we store a name, email address, phone number, and golf course. Managers choose their own password through a setup link that expires after 24 hours; passwords are stored only as bcrypt hashes, never in plain text, and password-reset links expire after one hour. We send account emails — setup links, password resets, deactivation notices, and a short-lived confirmation code if you link your portal account to your Tavara app account — through Resend, our email provider.

Content and requests from managers

Managers can submit promotion requests — a deal or event title, an optional still image and description, and the supported destination details (an HTTPS link, contact information, or an eligible tournament) — plus special requests (a subject and message). Promotion images are uploaded to our cloud storage and, like media in the app, are served from a public link — treat them as shareable. Promotion requests are stored in our database so our team can review them, and a copy is emailed to us. Special requests are not stored in our database; they are delivered to us by email, along with your name, course, and email address so we can reply. Tournaments created in the portal — including any branding such as a company name, logo, or colors — are stored in the same tournament system the app uses.

Tournament invitations

When a manager invites players to a tournament, they enter each player's email address and, optionally, a name. We store those details along with the invitation's delivery status so we can send the invite email, track bounces, and connect the invitation to the app. If someone entered your details and you would rather not be contacted, email us and we will remove them.

Website service providers

In addition to the services listed in Section 9, the website uses: Google Sheets (waitlist storage), Google reCAPTCHA (bot protection on the signup form), Google Fonts (typefaces are loaded from Google's servers), Resend (transactional email, including delivery and bounce status), Sentry (error monitoring), and Replit (website hosting and aggregate website analytics). To protect the site from abuse, we also apply rate limits based on your IP address, tracked briefly in memory.

To update or remove your waitlist entry, manager account, or an invitation containing your details, email us at info@tavaragolf.com.

11. Changes to this policy

We may update this policy from time to time. If we make a significant change, we will notify you in the app or by email before it takes effect. The "Last updated" date shows the current version, and continued use of the Service after a change takes effect means you accept it.

12. Contact us

Questions or requests about this policy or your data: info@tavaragolf.com
Tavara Golf · https://tavaragolf.com/support