Last Updated: July 6, 2026

Privacy Policy

Sandbagger ("we", "our", or "the app") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

• Account info: name, email, avatar, handicap, payment handles (Venmo/CashApp)
• Golf data: scores, rounds played, courses, statistics
• Trip data: itineraries, lodging, flights, events, expenses
• Messages: group chat content, reactions, media shared in trips
• Phone numbers you provide when inviting friends who aren't on Sandbagger yet — used only to deliver that invite
• Location: only when you explicitly use course search or "Mark my ball" — never in the background
• Device info: push notification tokens, app version, OS version

2. How We Use Your Data

• Core functionality: scoring, leaderboards, leagues, trip management, expense splitting
• AI features: generating commentary, recaps, and awards (processed by Anthropic's Claude API)
• Push notifications: score updates, invites, flight alerts, chat messages
• Analytics: app usage patterns to improve the experience
• We never sell your personal data to third parties

3. AI-Generated Content

Sandbagger uses AI to generate trash talk, round recaps, and awards. This content is clearly labeled as "AI-generated." You can opt out of being featured in AI commentary. AI processing uses your golf stats, player bio, and group context — never sensitive personal information.

4. Data Sharing

• Trip and league members: your scores, profile, and messages are visible to other participants
• Spectator links: only leaderboard data is shared (no personal info)
• Service providers: Supabase (hosting), Anthropic (AI), FlightAware (flight tracking), RevenueCat (subscriptions)
• We do not share data with advertisers

5. Data Retention

Your data is retained as long as your account is active. Completed trip and season data is archived indefinitely for historical leaderboards and stats. You can request data export or account deletion at any time from Settings.

6. Your Rights (GDPR/CCPA)

• Access: export all your data as JSON from Settings
• Rectification: edit your profile at any time
• Erasure: request account deletion with a 30-day grace period
• Portability: data export includes all personal data in machine-readable format
• Opt-out: disable AI features, mute notifications, leave trips and leagues
• California residents: we do not sell personal information as defined by CCPA

7. Account Deletion

You can delete your account from Settings > Delete Account. You choose between anonymization (preserves historical data for other players) or full removal. A 30-day grace period allows you to cancel. After 30 days, deletion is irreversible.

8. Security

Data is encrypted in transit (TLS 1.3) and at rest. Authentication is handled by Supabase Auth. Row-level security ensures users can only access their own data and data from trips and leagues they belong to.

9. Children's Privacy

Sandbagger is not directed at children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it promptly.

10. Contact

For privacy questions or data requests, contact us at support@sandbagger.app.