Privacy Policy
Effective date: October 19, 2026 Last updated: November 5, 2026
Voyagolf is a golf logbook. You record the rounds you play, see the courses you've played on a map, rate them, and share tee times with friends.
This policy explains what we collect, why, and what you can do about it. It is written to be read, not to be skimmed past.
The short version
- We collect what you type into the app — your rounds, scores, ratings, notes and friends — because that is the product.
- We sign you in with Apple. We never see your Apple password, and we only get your name and email if you choose to share them.
- We do not store your location. The app reads where you are to sort nearby courses and nothing writes it down.
- We use no advertising networks, no analytics SDKs, and no trackers. There are no third-party SDKs in the app at all.
- Scanning a scorecard sends that one photograph to Anthropic's Claude to read the numbers off it. We keep no copy, and it is not used to train their models. Photos you attach to a round, and your profile photo, are stored — that is what they are for.
- We do not sell your data. There is no mechanism by which we could.
- You can delete your account, and everything in it, from inside the app.
Who we are
Voyagolf is operated by Starboard Intelligence LLC ("we", "us").
- Email: contact@voya.golf
- Post: a postal address is available on request by email.
For anyone in the EEA or UK, Starboard Intelligence LLC is the data controller for the information described below.
What we collect
Information you give us
Your account. When you sign in with Apple we receive a unique identifier for you, and — only if you choose to share them — your name and email address.
We ask for your email so we can reach you about your own account — a security notice, a reply to a support message, or a receipt. We do not send marketing email, and we never sell, rent, or share your address with anyone. Sharing it is optional and the app works fully without it.
Three details worth knowing:
- Apple offers your name and email only the first time you authorise Voyagolf. We store them then, because Apple will not provide them again — and because there is no way to ask a second time.
- If you use Apple's Hide My Email, we receive a relay address and never your real one. Everything works the same, and we treat the relay address exactly as we would a real one.
- If you decline to share it, we have no address for you at all. Nothing in the app stops working; we simply have no way to contact you about your account.
Your golf. Whatever you record:
| What | Examples |
|---|---|
| Rounds | Course, date, 9 or 18 holes, score, par, notes |
| Playing partners | Friends you tag, and names you type for guests |
| Ratings | Five category scores, written notes, and the green fee you paid |
| Bucket list | Courses you want to play, with priority and notes |
| Custom courses | Courses you add by dropping a pin, with the name you give them |
| Tee times | Invitations you send or accept, and any message attached |
| Round photos | Pictures you attach to a round |
| Your profile photo | The avatar shown beside your name |
Your social connections. Friend requests you send and accept, and the friends list that results.
Information we collect automatically
Nothing beyond what the app needs to function. Specifically:
- No advertising identifier.
- No analytics events, screen views, or session recording.
- No third-party SDKs of any kind — the app uses only Apple's own frameworks.
Apple may provide us with aggregate, anonymised statistics about downloads and crashes through App Store Connect. We cannot identify you from those, and we cannot turn them off.
Information about other people
If you record a guest's name as a playing partner — "Dad", or a friend who doesn't use Voyagolf — you are giving us information about someone else. We store it as part of your round, use it only to show you who you played with and to work out who you play with most, and never contact them.
Please only enter names you are comfortable recording. If someone asks us to remove their name from another person's rounds, write to us at contact@voya.golf and we will.
Permissions the app asks for
You can refuse any of these and still use the app. Each one degrades a specific feature and nothing else.
Location — "While Using the App"
Used for: sorting courses by how near they are, showing distances on course cards, centring the map where you are, and — for Pro subscribers — working out which nearby courses to suggest in "Picked for you".
It never reaches our servers, and it is never attached to a round. Rounds record which course you played, which you chose, not where you were standing. Nobody else using Voyagolf can see where you are.
Two things do happen to it that "we never store it" would gloss over, so they are written plainly instead:
- Apple is asked about it. Finding courses near you means sending your coordinate to Apple Maps, which is governed by Apple's privacy policy rather than this one. That has always been how the "near you" carousel works.
- An approximate copy is kept on your device. "Picked for you" caches its suggestions so it does not re-ask on every visit, and the cache is filed under your position rounded to about 10 km. That file is on your phone, it is deleted when you sign out, and it is never uploaded.
Refuse location and the "near you" carousel and "Picked for you" both disappear. Everything else works.
Notifications
Used for: one reminder, five hours after a tee time you are going to, asking whether you want to log the round.
It is scheduled on your phone, by your phone. Nothing is sent to our servers to make it happen and there is no push token: your device already knows the tee time, and five hours later it shows the reminder. We cannot see whether it fired, and we cannot send you anything else through it.
Refuse notifications and the reminder simply never appears. The same prompt still waits for you inside the app.
Calendar — write only
Used for: adding an accepted tee time to your calendar.
We request write-only access, which means the app is technically incapable of reading your existing events. We cannot see your calendar. We can only add to it, and only when you ask.
Refuse it and you add tee times to your calendar yourself.
Camera and photos
Three separate things use photographs, and they are treated differently. The difference matters, so they are not described together.
Scanning a scorecard — sent away, kept by nobody.
Used for: reading the holes off a photograph of your card so you do not type eighteen numbers.
The photograph is sent to Anthropic's Claude API for recognition. It is not stored by us: it is held in memory for the length of one request, read, and dropped. Nothing is written to our database or to our storage, and no copy reaches your device's photo library unless you put it there.
What Anthropic then does with it is theirs to govern, not ours to promise — see "Who we share it with" below.
Refuse camera and photo access and you enter holes by hand, which is what the app did before scanning existed.
Photos you attach to a round — stored, because that is the point.
Used for: the pictures you add to a round and see on its screen, and the background of a round share card if you pick one.
These are stored. They go to our round-photos storage bucket and
stay until you remove them. The bucket is readable by anyone holding
the URL — the path contains your user id and the round id, so it is
unguessable, but it is not secret. Nothing private should be
photographed into a round on that basis.
Delete a photo in the app and both the record and the file go.
Your profile photo — stored, and visible to other golfers.
Used for: the avatar shown next to your name.
Stored in our avatars bucket on the same terms, and deliberately
readable by anyone: it appears beside your name to golfers who are not
your friends yet, which is what a profile photo is for. Replacing it
uploads a new file and deletes the old one.
Why we use it, and on what basis
For anyone in the EEA or UK, the GDPR requires us to name a lawful basis.
| What we do | Why | Lawful basis |
|---|---|---|
| Keep your account and sign you in | You cannot have a logbook without one | Performance of a contract |
| Store your rounds, ratings and bucket list | It is the product | Performance of a contract |
| Show your profile to friends you have added | You asked us to, by adding them | Performance of a contract |
| Send and deliver tee-time invitations | You asked us to | Performance of a contract |
| Keep the service working and secure | Reliability and abuse prevention | Legitimate interests |
| Answer your emails | You wrote to us | Legitimate interests |
We do not rely on consent for anything except the device permissions above, which you grant or refuse through iOS and can change at any time in Settings.
What other people can see
This is the part most worth understanding.
Your rounds, scores, ratings, notes and round photos are shown only to you. Friends you add do not see them, and the app shows no other golfer's rating and no average score for a course. A friend you tag as a playing partner is named in your round, but the round appears only in your app.
Custom courses you add by dropping a pin are visible to you, and to anyone you invite to play there or who logs a round there. They are not added to the public course catalogue.
Your profile — your display name and a generated username — is visible to people you are friends with, and to anyone who opens a friend link you share.
A link you share is readable by whoever holds it, including on the open web. This is worth stating exactly, because the link is the only thing protecting what is behind it — that is what makes it shareable at all.
When someone opens a Voyagolf link on voya.golf rather than in the app, the page shows them:
| Link | What the page shows |
|---|---|
A tee time (voya.golf/i/…) |
The course, its town, the date and time, and your first name |
A friend link (voya.golf/f/…) |
Your first name only |
Never your surname, your username, your email, your location, or who else is playing. A tee-time link forwarded to a stranger tells them a round is happening at a named course at a named hour and who invited them — which is what an invitation is — and nothing about the people on it.
Tee-time links expire at the tee time. Friend links do not expire, so treat one as public once you have posted it anywhere.
Round share cards, bag tag images and season recaps you export are yours to share. A round share card can carry your score, your rating and a photo from the round, and you choose what goes on it. Once you post one somewhere, that is out of our hands.
Who we share it with
We do not sell your personal information, and we do not share it for advertising. We never have and the app contains no means to.
We share it in five situations:
1. With other Voyagolf users, as described above: your profile to friends, and tee-time details to the people you invite.
2. With Apple. Signing in uses Apple's service. Searching for a course, or loading a map or Look Around image, sends a query to Apple Maps. Apple handles that data under Apple's privacy policy, not ours. We do not receive your Apple ID credentials at any point.
One more Apple service, added when the tee-time forecast shipped: when you open a tee time that is still to come, the golf course's coordinate is sent to Apple's WeatherKit to fetch the forecast for that place and hour. Your own location is not sent, and neither is anything about you — the request says where the course is, not where you are, and would be identical for any golfer looking at the same tee time.
3. With our hosting provider. Your account and golf records are stored on
servers operated by Supabase in the eastern United States (AWS
us-east-1, Northern Virginia), acting on our instructions
as a processor and not permitted to use them for anything else.
Two smaller processors, named because "hosting provider" would not cover them:
- Vercel serves voya.golf, the website. It handles ordinary web request data — your IP address and browser — and holds none of your golf.
- Google (Gmail) carries messages sent through the contact form on that site, which is email and goes where email goes. Nothing from inside the app passes through it.
4. With Anthropic, in two places. Both go to the Claude API and nowhere else at Anthropic.
- When you scan a scorecard, the photograph is sent to be read.
- When a Pro subscriber opens Search, two lists are sent so that "Picked for you" can choose between them: the names and towns of golf courses near you, and the names and towns of the courses you have played, with how many rounds you logged at each. No score, no date, no playing partner, no identifier of any kind — the request carries no way to tell Anthropic whose log it is.
Your friends and your profile never go to Anthropic at all, and neither does anything belonging to a golfer who is not a Pro subscriber.
We keep no copy of it. What Anthropic does with it is governed by their commercial terms and privacy policy.
Your scorecard photographs and your playing history are not used to train Anthropic's models. Anthropic's commercial terms say they do not train on what customers send to the API. They do hold it briefly so they can enforce their own usage policies, which is a safety measure rather than a training one.
This changed in November 2026. Until then both of these went to Google's Gemini API instead, and this section said so. The commitment described above was previously a property of the paid Google tier; it is now a term of Anthropic's that applies regardless of plan. Nothing about what is sent changed — the same photograph, the same two lists — only who reads it.
5. If the law requires it, or to protect someone's safety or our rights. If we receive a legal demand for your data we will tell you unless we are prohibited from doing so.
If Voyagolf is ever sold or merged, your data may transfer as part of that. We will tell you before it happens and you will be able to delete your account first.
Where your data is stored
Your account and golf records are stored on servers in the eastern United States — Supabase's East US region, which runs on AWS in Northern Virginia — and cached on your device so the app works without a connection.
Your Apple sign-in details — the identifier, and the name you shared — are also kept in your device's Keychain, which is encrypted by iOS. That is what keeps you signed in between launches, and what lets your name survive a reinstall. Apple only ever tells us your name once, so if we lost it we could not ask again.
If you are outside the United States, your data is transferred there. That includes everyone in the EEA and the UK. For those transfers we rely on the European Commission's Standard Contractual Clauses, and on the UK International Data Transfer Addendum for the UK.
How long we keep it
| What | Kept |
|---|---|
| Your account and everything in it | Until you delete your account |
| Deleted rounds | Removed immediately; may persist in encrypted backups for up to 30 days |
| Photos you attach to a round | Until you remove the photo or delete the round |
| Your profile photo | Until you replace it or delete your account; the previous one is deleted when you replace it |
| A scorecard you scanned | Not kept. Read once and discarded — see "Who we share it with" |
| Your name in someone else's round, where you were tagged | Until they delete that round |
| Support emails | Up to two years |
Deleting your account deletes your rounds, ratings, bucket list, custom courses and friendships. One thing survives: rounds other people logged that named you as a playing partner. Those are their records, not yours. Ask us and we will remove your name from them.
Your rights
Wherever you live, you can:
- See your data — most of it is already visible in the app; write to us for a machine-readable copy.
- Correct it — edit any round, rating or note in the app.
- Delete it — Account → Delete Account, in the app. No email required, no waiting period, no retention offer.
- Withdraw device permissions — iOS Settings, any time.
If you are in the EEA or UK
You additionally have the right to object to processing based on legitimate interests, to restrict processing, to data portability, and to complain to your national data protection authority. You do not have to complain to us first, though we would rather you did so we can fix it.
If you are in California
We do not sell or share personal information as the CCPA defines those terms, so there is nothing to opt out of. You have the right to know, delete, correct, and not be discriminated against for exercising any of them. We do not offer financial incentives for your data.
If you are in Colorado, Connecticut, Virginia, or a state with comparable law
The same rights apply. We do not process personal data for targeted advertising, sale, or profiling that produces legal effects.
To exercise any right, write to contact@voya.golf. We will respond within 30 days, and will verify your identity through the email address on your account before acting on a request about it.
Security
Data in transit is encrypted with TLS. Data at rest on our servers is encrypted by Supabase. Your sign-in credentials are held in the iOS Keychain. Access to production data is limited to those who need it.
We cannot promise perfect security, and anyone who does is lying. If we discover a breach affecting your data we will tell you and the relevant regulator within the time the law requires.
Children
Voyagolf is not for children under 13, and we do not knowingly collect their information. In the EEA and UK, where the age of digital consent is higher than 13 in your country, that higher age applies.
If you believe a child has created an account, write to contact@voya.golf and we will delete it.
Changes
We will update this policy when the app changes. If a change materially affects what we collect or who sees it, we will tell you in the app before it takes effect — not by quietly editing this page.
The effective date at the top always reflects the current version.
Contact
Starboard Intelligence LLC
- Email: contact@voya.golf
- Post: a postal address is available on request by email.