Twopar is a golf scoring app built for tracking rounds and side-game payouts among friends. It is not a data business. This policy explains exactly what we collect, why, where it goes, and what you can do about it.
Information we collect
- Account information. When you sign in with Apple or Google, we receive your provider user ID and — if you choose to share it — your name and email address. This is used to create your Twopar account and identify you to other players in your group.
- Device push token. If you allow push notifications, we store a push token so we can send you game, season, and payout updates. On iOS this is an Apple Push Notification service (APNs) token; on Android it is a Firebase Cloud Messaging (FCM) registration token.
- Subscription receipt data. If you purchase a Twopar Pro subscription, we receive a receipt or purchase token from the relevant store (Apple's StoreKit on iOS, Google Play Billing on Android) and verify it server-to-server to determine your entitlement and expiry. We do not receive your payment instrument or billing address — those stay with Apple or Google.
- Game content. Scores, hole-by-hole strokes, handicaps, player names, course names, and the game settings you configure.
- Scorecard images (optional). If you use the scorecard scanner, the photo you take is uploaded to our backend and to a third-party AI provider (OpenRouter / Anthropic) solely to extract text and digits from the card. Images are not retained after processing.
In plain English
We collect what we need to run the scorecard, send push notifications, and verify your subscription. Nothing else. If we add anything new, we'll update this document and tell you in the app.
How we use your information
- To operate the core scoring, season, and payout features.
- To deliver push notifications about game events — game created, game ended, payouts due, season close.
- To share your name and scores with other players in the same game or season you've joined.
- To process scorecard images you submit to the OCR feature.
What we don't do
- We do not sell your personal information.
- We do not track you across other apps or websites.
- We do not use your data for advertising. Twopar shows no ads.
- We do not share your data with third parties except (a) Apple and Google for authentication, push notification delivery, and subscription billing on their respective platforms, (b) our backend provider (Supabase), and (c) the OCR provider when you explicitly use the scorecard scanner.
Data storage
Account data and game data are stored in our Supabase-hosted PostgreSQL database, in a U.S. region. Data is encrypted at rest and in transit. Data is retained while your account is active. If you delete your account, your data is deleted.
Your choices
- Push notifications. Disable anytime in iOS Settings → Notifications → Twopar, or Android Settings → Apps → Twopar → Notifications.
- Account deletion. Inside the app: Profile → Delete Account. Or email kenhaberle@gmail.com. We will delete your account and all associated data within 30 days.
- Scorecard photos. Using the scanner is optional. You can always enter scores manually instead.
- Data export. Email us and we'll send you a JSON export of everything we have on you within 30 days.
Children's privacy
Twopar is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The "Last updated" date above will reflect the most recent changes. For material changes, we'll notify you inside the app before they take effect.
Contact
Questions about this policy? Email kenhaberle@gmail.com. We're usually back within two business days.