Who we are

AllTee is a live golf scores app — leaderboards, schedules, players, news and notifications across multiple tours, in one place.

The data controller responsible for your information is Joshua Loos, an individual based in the Netherlands. You can reach us about privacy, or any request about your data, at hello@alltee.app.

What we collect

Account details — only if you create an account: your email address, a password (held by our authentication provider in hashed form, not as plain text), and the name you give us.

Your choices in the app: the players you follow, the tournaments you favourite, and your notification preferences. When you are signed in these are saved to your account so they follow you between devices; when you are not, they stay on your device.

Messages you send us: the content of any feedback or support message, and the email address you include so we can reply.

Bug reports you send from inside the app: your note, plus a snapshot of what the app was showing at that moment (such as the screen you were on and the tournament on it), recent technical logs from the app, and a screenshot if you choose to attach one.

An installation identifier is included with a bug report: a random value we generate and keep in the app's own storage on your device, so that reports from the same installation can be grouped. It is not derived from you or from your hardware, and it is not used for advertising or for tracking you across other apps or websites today — if that ever changes, we will update this policy first.

Anonymous usage counts: we keep simple aggregate tallies of how the app is used — for example how many times the app is opened, a leaderboard is viewed, or a feature is tapped. These are counters, not records about you: no per-user rows, no profiles, and no device or cross-site identifiers. The list of things counted is a short, fixed list in our code, so it cannot quietly grow.

Notification registration — only if you turn on notifications: a push token issued by Expo for your device, your device's timezone, and the app version you are running. These are stored against your account so we know where to send an alert and can tell which build a device has. The token identifies a device, not a person, and it is deleted when the device unregisters or the notification service tells us it is no longer valid.

Live Activities (iPhone) — only if you allow them: so a Live Activity can follow a player while the app is closed, we store the Live Activity tokens Apple issues for your device against your account, and send them to Apple — with the followed players' names, the event, their positions and scores — when that Live Activity is started, updated or ended. They identify a device, not a person, and are deleted within a day of the Live Activity ending, when you sign out, or when Apple tells us they are no longer valid.

Widgets (iPhone): the home-screen and lock-screen widgets show a short summary of the players you follow — name, position, score, tee time — that the app keeps in storage shared only between the app and its widgets on your device. To keep those scores current without you opening the app, a widget asks our server for the latest scores of the players you follow. When you are signed in, the app links this installation to your account with a random key we create (stored against your account together with the installation identifier) and the widget sends that key; the link is removed when you sign out or delete your account. When you are not signed in, the widget sends the names of the players you follow instead; we use them to answer that request and do not store them. If you add an AllTee widget, the app registers a refresh token with our server so the widget can be updated; the token is removed when the widget is removed or the account deleted.

Purchases (AllTee Plus, iPhone) — only if you buy or restore a plan: Apple takes the payment, and we never see your card or your Apple account details. RevenueCat, our in-app purchase provider, receives from the app the purchase details Apple's store reports (which plan, its price, currency and store country, the transaction identifiers and dates), an app user id (your AllTee account id when you are signed in; a random id RevenueCat creates when you are not), and the technical details its software sends with every request: the app and operating-system version, your device model, your language settings, and an identifier Apple gives this app on this device (not the advertising identifier). Like any web request, it also carries your IP address. We never send RevenueCat your name or email address. We keep a record of your plan and its dates against your account, so Plus works on every device you sign in to.

Crash and error reports: when something goes wrong we send a technical report — the error, where it happened in the code, the app version, your device or browser type and operating-system version, and the last few steps in the app before it happened (such as the screens opened and recent technical log lines) — to our error-reporting provider so we can fix it. This is configured not to attach personal details such as your name or email address.

What we do not do today

We do not track you across other apps or websites, and we do not use advertising identifiers or advertising or analytics SDKs from third parties.

We do not collect your precise location or your contacts.

We do not sell your personal data, and we do not share it with advertisers.

This describes how AllTee works today. AllTee may display sponsored or partner content. If a future feature involves personal data, or uses third-party advertising services, we will update this policy before that feature ships and obtain your consent where the law requires it.

Sponsored and partner content

AllTee may show a single, clearly labelled "Partner" card — a sponsor we configure ourselves, in a fixed slot that does not interrupt scores or content. It is not served by an ad network, and it is not targeted based on your behaviour.

For a partner we keep the same kind of anonymous aggregate counts described above — how often the card was shown or tapped in total — with nothing recorded about who saw it. When no partner is configured, the slot does not appear.

Where your data is stored and who processes it

Supabase provides our authentication and database: your account, follows, favourites, notification preferences, push registration, widget links, messages and the anonymous counters are stored there. Our Supabase project is hosted in the EU (region eu-west-1, Ireland).

Expo (EAS Hosting) hosts the web version of the app.

Sentry receives the crash and error reports described above.

RevenueCat processes in-app purchases on our behalf: it receives the purchase details described above from the app and from Apple, keeps your purchase history so a plan can be restored, and tells our server when a plan starts, renews or ends. RevenueCat is a company based in the United States.

Expo's push service delivers the notifications you have turned on. The push token we store is issued by Expo for your device and is sent to Expo when an alert is delivered.

Apple Push Notification service delivers Live Activity updates (iPhone). The Live Activity token we store is issued by Apple for your device and is sent to Apple when a Live Activity is started, updated or ended, together with what the Live Activity shows: the followed players' names, the event, their positions and their scores.

Golf data providers supply scores, schedules, course and weather information. We fetch data from them; we do not send them your personal data.

Course maps use OpenStreetMap. When you open a course map your device requests map images directly from OpenStreetMap, which will see your IP address as part of that normal web request.

Resend delivers the emails that tell us a bug report, feedback or support message has arrived. Each email contains that message — for a bug report, its note and app snapshot as described above; for feedback, your message and the name and email address you included — and is sent to us, not to you.

Open-Meteo supplies the weather shown for a tournament, and Wikipedia supplies short facts about a course. Your device requests these directly, asking only about the venue or course, so each service will see your IP address as part of that normal web request. We do not send them your personal data.

On the web version, the app's typeface is loaded from Google Fonts, so Google will see your IP address when the page loads. The iOS app carries its own fonts and does not make this request.

Legal bases (GDPR)

Performing our contract with you — running your account, syncing your follows and favourites, and providing the plan you bought.

Our legitimate interests in keeping the app working, secure and worth using — this covers the crash reports and the anonymous aggregate counts.

Your consent, where consent is what the law requires. Because the usage counts are aggregate and carry no identifiers, and the app does not currently run advertising or cross-site tracking, we do not show a cookie or consent banner today. If that changes, we will ask you first.

How long we keep it

We keep your account information for as long as your account exists. Anonymous counters contain nothing about you and are kept as aggregate totals.

Purchase records (your plan and its dates) are kept while your plan runs and afterwards only as long as needed to restore or verify it; deleting your account deletes our record. RevenueCat keeps purchase history under its own retention terms as our processor.

Feedback and support messages are deleted 7 days after you send them. Bug reports, including any screenshot, are deleted 7 days after we close them; a report we are still working on is kept until it is closed.

Your rights

Under the GDPR you can ask us for access to your personal data, correct it, delete it, receive a copy, or object to or restrict certain processing — and withdraw consent where processing relies on it.

To exercise any of these, email hello@alltee.app.

You also have the right to complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

Deleting your account

You can delete your account at any time from Profile → Delete account. This removes your account and the personal data attached to it — your profile, follows, favourites and preferences. You can also email us at hello@alltee.app and we will do it for you.

Anonymous aggregate counters contain nothing that identifies you, so they are unaffected by deletion.

Children

AllTee is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will remove it.

Changes to this policy

We will update this policy as AllTee evolves, and we will change the date shown at the top when we do. Where a change materially affects how your personal data is handled, we will highlight it in the app and, where the law requires it, ask for your consent before the change takes effect.

Contact

Questions about privacy or your data? Email hello@alltee.app.

Terms of use · Support · hello@alltee.app

AllTee · live golf scores