Privacy Policy
Effective date: September 13, 2026
1. Who we are
Par’d Up is operated by Gutopia Inc (“Par’d Up,” “we,” “us,” or “our”). This policy covers the Par’d Up mobile app and the pardup.com website (together, the “Service”), a golf partner matching service now live in San Diego County, California. For privacy questions or requests, including anything under section 9, email pardupgolf@gmail.com.
2. What we collect
Account data
- Email address and password (stored as a salted hash by our authentication provider), or the identifier Apple provides if you use Sign in with Apple.
- Date of birth, used to confirm you are old enough to use the Service and to set your age group (13–15, 16–17, or 18+). Signups under 13 are rejected and not kept as accounts.
- Phone number, if you add and verify one.
- Account status, role, verification state, and when you accepted our Terms and this policy.
Profile data
- Display name, optional username, bio, and profile photos.
- Golf details: handicap or average score, years playing, play styles, pace, walking or riding, availability, region, city, home course, and preferred courses.
Content you create
- Posts (including photos and course tags), comments, likes, and stories. Stories disappear from view after 24 hours.
- Rounds you post on the game board, and your requests to join other rounds.
- Messages, message requests, and group chat messages.
- Connection requests, connections, blocks, reports you file, and requests to add a course.
The app only accesses photos you pick or take yourself, and only saves a story photo to your library when you choose to.
Location
- If you allow location access, the app uses your device’s location to sort golf courses and open rounds by distance. Courses are sorted on your device. For rounds, your coordinates are sent with that request so our servers can find nearby rounds; they are not saved to your account and are never shown to other users.
- Location access is optional. If you decline or turn it off in iOS Settings, the app uses the region on your profile instead.
Safety and moderation data
- Automated moderation results (category, severity, and action taken) for messages, posts, comments, stories, profiles, and rounds. These checks run on our own systems; your content is not sent to a third-party moderation service.
- Reports, warnings, suspensions, and other enforcement records.
Device and technical data
- Push notification tokens and device platform, so we can send the notifications you have turned on, plus your in-app notification history.
- Technical logs kept by our hosting providers (such as IP address, device or browser type, and timestamps), used for security, abuse prevention, and debugging.
Advertising data
- When a sponsored card is shown to you or tapped, we record the campaign, ad, placement, time, and your user ID so we can count views and taps.
Website forms
- What you send through forms on pardup.com (waitlist, course interest, contact, and privacy requests), such as your name, email address, and message. Cloudflare Turnstile checks form submissions for automated abuse.
We do not use third-party analytics, advertising, or tracking SDKs, and we do not track you across other companies’ apps or websites.
3. How we use data
- To match golfers by region, course, skill, availability, and play style.
- To run posts, stories, messaging, the game board, connections, and notifications.
- To sort courses and rounds by distance when you allow location access.
- To verify accounts and enforce age requirements, including Youth Mode for teens.
- To run safety moderation, investigate reports, and enforce our Terms and Community Guidelines.
- To show sponsored cards and count their views and taps.
- To keep the Service secure, prevent abuse, comply with law, and contact you about your account (for example, sign-in codes and replies to your requests).
4. How we share data
- Other users: your profile as you set it up, and the posts, comments, stories, rounds, and messages you share. Never your email address, phone number, date of birth, or location.
- Service providers that process data on our behalf and under contract: Supabase (database, authentication, file storage, and server functions), Cloudflare (website hosting and form protection), Resend (account email delivery), and Apple and Expo (Sign in with Apple and push notification delivery).
- Advertisers: only total counts of views and taps. Advertisers never receive your personal information.
- Legal and safety: when required by law or legal process, to protect the safety of any person (including reporting suspected child exploitation to the authorities), or as part of a merger, acquisition, or sale of assets, subject to this policy.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. Children and teens
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that an account belongs to someone under 13, we delete it.
Accounts aged 13–17 are placed in Youth Mode automatically. To protect them we apply stricter moderation to their conversations, hide their profiles from adults, turn off message requests from golfers they have not connected with, and never show their exact age or location. A parent or guardian email may be stored if the teen adds one. This processing is for safety and is never used for advertising. See the Youth Safety Policy.
We do not sell or share the personal information of any user, including users under 16, and would not do so without the opt-in consent required by law.
6. Data retention
- Account, profile, and content: kept while your account is active. Posts, comments, stories, messages, and rounds you delete are hidden from other users immediately.
- Stories disappear after 24 hours and are then removed by a scheduled cleanup.
- When you delete your account, we immediately remove your profile, photos, posts, comments, likes, stories, rounds, connections, requests, blocks, notifications, push tokens, and settings; replace the text of messages you sent with a deletion notice; remove your email address, phone number, and date of birth from our records; and unlink your user ID from ad view and tap records.
- Reports filed by or about you, moderation and enforcement records, and records of privacy requests are kept after deletion where reasonably necessary for safety, fraud prevention, and legal compliance.
- Website form submissions: kept while needed to respond to you or to send the updates you asked for, and deleted on request.
- Backups held by our providers expire on their regular schedule.
7. Security
We use industry-standard safeguards: encryption in transit, row-level security on our database, role-based access and audit logging for administrative tools, and service credentials that are never exposed to the app or website. No system is perfectly secure; we will notify affected users and regulators of a breach as required by law.
8. Where data is processed
Par’d Up is operated from the United States, and your information is stored and processed in the United States and wherever our service providers operate.
9. Your rights and choices
Depending on where you live (including California), you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate personal information. You can edit your profile in the app at any time.
- Delete your account and personal information. In the app, go to Profile, then Settings, then Delete account; it takes effect immediately. You can also use Delete My Data.
- Opt out of sale or sharing of personal information (see Do Not Sell or Share). We do not sell or share, but the request channel is always available.
- Limit use of sensitive personal information. We use date of birth only for age checks and Youth Mode.
- Not be discriminated against for exercising any of these rights.
You can also turn off location access, photo access, and notifications at any time in iOS Settings. Submit other requests through the forms linked above or by emailing pardupgolf@gmail.com. We verify requests using the email address on the request and respond within the time required by law (generally 45 days, extendable where permitted). Authorized agents may submit requests where the law allows.
10. Sensitive data limits
We do not request or intentionally collect government identifiers, health information, or biometric data. Date of birth is never shown to other users. Device location is used only as described in section 2 and is not stored.
11. Changes to this policy
We will post updates on this page and change the effective date above. For material changes, we will notify you in the app or by email before they take effect.
12. Contact
Gutopia Inc, operator of Par’d Up. Email pardupgolf@gmail.com or use our contact form.