Table of Contents
1. Information We Collect
Account Information
When you create an account: your name, email address, your date of birth (used to confirm you are at least 13 and to treat 13-to-17-year-olds as minors), and a password (managed through Firebase Authentication — we never see your raw password). If you sign in with Google or Apple, we receive your name and email from that provider and then ask for your date of birth. You can also try the app as a guest without an account; a guest is asked for a date of birth too. Optional: a profile photo.
Golf Round Data
When you score a round: hole-by-hole scores, putts, fairways hit, greens in regulation, course name, tee box, date played, round format (stroke play, Stableford, match play, scramble, skins, Nassau, and others), and handicap differentials calculated from your scores.
League and Event Data
If you participate in or manage a league: league settings, event schedules, pairings, player lists, standings, treasury records (dollar amounts only — no financial account information), and messages sent through the in-app league chat.
Location Data (GPS)
If you enable GPS distances during a round, the app uses your device location to calculate distances to the green while you have the round open. We do not track your location in the background.
Course improvement data. With GPS enabled, the app also records an anonymous tee and green proximity coordinate at two moments per hole — once near the tee and once when you enter your score. No name, email, account ID, or round ID is attached to it. It is combined with readings from other players to improve GPS accuracy for courses that are not fully mapped. Turning off location permission in your device settings stops all GPS data collection immediately.
Payment Information
If you subscribe to a paid plan in the app, the purchase is processed by Apple (App Store) or Google (Google Play), and we store the subscription status and the store token needed to verify it. League dues paid by card are processed by Stripe and go to your league manager’s own Stripe account; we keep the ledger and never hold league money. We do not store your credit card number, expiration date, or security code.
Device and App Data
Device type, operating system version, app version, push notification token, crash reports, and general usage patterns (which features you use, not what you enter). This is standard operational data used to keep the app working.
2. How We Use Your Information
We use your information to:
- Run the app and provide the features you signed up for
- Calculate your handicap index (WHS-style, labelled Unofficial in the app) and display your stats
- Generate AI coaching insights from your round data, only if you allow it (see section 3)
- Send push notifications for league events, chat messages, and app updates
- Process subscriptions and manage your account plan
- Respond to support requests
- Improve GPS course accuracy using anonymous aggregate location data
- Detect fraud, abuse, and Terms of Service violations
- Meet legal obligations when required
We do not sell your data. We do not share your data with advertisers.
3. Artificial Intelligence Features
Xordinari Golf offers AI features including the AI Caddie (Murphy), the post-round debrief and league recaps, powered by Anthropic’s Claude API.
The app asks first. The first time you use the app it asks whether Murphy may read your rounds. Nothing is sent to our AI provider unless you tap Allow, and our servers refuse any AI request built from your rounds until you have. You can change your choice at any time in App Settings under “AI caddie suggestions”.
Once you allow it, Murphy reads your rounds automatically: when you open the screens that show your game (home, your profile, round history, handicap, putting, strokes gained, season summary, goals, hole-by-hole and the start of a round), while you play, and when you finish a round, the app sends the scores and statistics of your own rounds to our AI provider to produce Murphy’s feedback. Which of these you see depends on your plan. Each Monday our server does the same to write Murphy’s weekly read if you have played at least three rounds in the last 30 days. Opening Stats sends nothing; Stats sends your statistics only when you tap Analyze My Game.
What is sent. Aggregate stats and structured data, such as scoring averages and greens-in-regulation percentages. Your name is included only in league and trip recaps, which go to the other members of that league or trip, and in a league post a manager asks the AI to draft about a league night; the coaching Murphy gives you about your own game does not include it. Your email address and payment information are never sent.
If you turn it off. The app produces no AI feedback for you and sends no round data to the provider, and our servers refuse any AI request built from your rounds, including one from an older version of the app. League and trip tools leave your scores and handicap out of what they send. A league’s weekly recap can still name you with your season points. Your rounds stay yours either way.
Guidance only. AI coaching insights are informational. They are not a substitute for instruction from a qualified golf professional.
Anthropic handles what it receives under its own privacy policy: anthropic.com/legal/privacy.
4. Who We Share Data With
We use these service providers to run the app:
- Google Firebase — authentication, database, cloud functions and push notifications; your app data, managed on Google infrastructure
- Apple and Google — in-app subscriptions and their receipts
- Stripe — card payment of league dues and website subscriptions; your email address and payment status (card details go to Stripe directly, never to us)
- Anthropic — generating AI features, only if you allow it; round statistics and structured data as described in section 3
- Expo (EAS) — app updates; device information and app version
- Sentry — crash reporting; device information, app version and crash reports
- Resend — transactional email; your email address and the content of emails we send you
League managers see the league records of their league’s members, such as scores, standings and dues records. We do not share with advertisers, data brokers, or any third party for marketing purposes.
5. What We Never Do
- Sell your data
- Share your data with sponsors without your explicit consent
- Use your data to serve you ads
- Make your round history public without your permission
6. Data Retention
Your data is kept for as long as your account is active. If you delete your account:
- Your profile, round history and personal stats are deleted when you confirm the request in the app (the deletion runs immediately); email requests are handled within 30 days
- League records (scores, standings) and dues records may be kept in anonymized form as part of league history visible to your league manager
- Backup copies expire from our backup storage within 180 days of account deletion
7. Your Rights
You can:
- Get a copy of your data — tap Request Data Export in Privacy Settings in the app; we email a copy of what we hold about you, as a JSON file, to your account’s email address. You can also ask by email
- Correct your data — fix inaccurate information in your profile
- Delete your account — from Delete Account on your Profile or in Privacy Settings; the deletion runs immediately
- Turn off AI features — App Settings, then AI caddie suggestions off
- Revoke location permission — through your device settings at any time; other features keep working
To exercise any of these rights, email support@xordinari.com with “Data Request” in the subject line. We respond within 30 days.
California residents. You have the right to know what personal information we collect and how it is used, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To make a request, email support@xordinari.com.
9. Children
Xordinari Golf is not directed at children under 13. We ask for your date of birth when you create an account and refuse accounts under 13; if someone under 13 signs in through Google, Apple or as a guest before the date of birth is asked, the sign-in record is deleted before any profile is created. Users aged 13 to 17 are marked as minors and kept out of public discovery and public feeds. We do not knowingly collect information from children under 13. If you believe we have, contact us at support@xordinari.com and we will delete it.
10. Security
All data is encrypted in transit (TLS) and at rest through Firebase’s encryption. API keys and sensitive configuration are stored server-side only, never in the app. Subscription and billing fields can only be changed by our server-side functions, not by app code. Admin access requires verified platform-admin credentials.
No transmission over the internet is completely secure. We take reasonable precautions. If you discover a security issue, email support@xordinari.com right away.
11. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise any of your data rights, contact us:
Xordinari, Inc.
30 N Gould St Ste N
Sheridan, Wyoming 82801
Email: support@xordinari.com
Website: xordinari.com
Changes to This Policy
We will tell you about material changes through the app and by updating the date at the top of this page. Continued use after a change takes effect means you accept the revised policy.