Privacy Policy

Leer en Español

Effective Date: September 2, 2026  ·  Last Updated: September 2, 2026

This privacy policy describes how The Classic RSVP ("we," "us," or "our") collects, uses, and shares information about you when you use our mobile application and related services (collectively, the "Service").

1. Information We Collect

Information You Provide

• Account information: name, email address, password (stored as a secure hash), a confirmation that you are at least 13, and an optional profile photo when you register.
• Profile data: handicap index, hometown, and other optional profile fields. Date of birth is not requested during signup or initial setup. You may add or remove it later in Account Settings for age-aware tee suggestions, Junior/Senior badges, and club-distance estimates. If you leave it blank, events use their default tee, no age-based badge is shown, and club-distance estimates use only your handicap.
• Golf activity: round scores, course selections, game results, side bet outcomes, and tournament history you record through the Service.
• Communications: messages you send in in-app group chats, comments, and reactions.
• Payment information: entry fees and subscription purchases are processed by Apple (in-app purchases on iOS) or Stripe (on other platforms). We do not store full payment card numbers. We store transaction identifiers and subscription status.
• Stripe Connect information: when an organizer sets up payouts, Stripe collects identity, tax, and bank details in its hosted flow. We receive and store the connected-account identifier, onboarding/capability status, and outstanding requirements, but not the organizer's SSN or full bank account number.
• Voice input and AI caddie transcripts: when you use the AI caddie feature (via the "Hey Dimple" / "Hey Rosco" wake word or the caddie button), your speech is transcribed and sent to our AI provider (xAI) to generate a response. The full conversation transcript for each session — including your transcribed queries and the caddie's replies — is stored in our database linked to your account. This allows the caddie to reference past interactions. These transcripts are permanently deleted when you delete your account (see §4).
• AI caddie memories: the AI caddie extracts short factual notes from your conversations (e.g., your preferred club distances, course preferences) and stores them as "caddie memories" linked to your account. These memories are used to personalise future caddie responses and are permanently deleted when you delete your account or when you clear your caddie memory from the app settings.

Information Collected Automatically

• Device information: device type, operating system version, and app version.
• Usage data: screens viewed, features used, and interactions within the app.
• Location data: we do not continuously track your location. Course GPS data (hole tee and green coordinates) is used to provide yardage information in the AI caddie feature; this requires your device's location permission, which you can revoke at any time in your device settings.
• Push notification tokens: used only to deliver notifications you have opted into.
• Log data: server logs including IP address, request timestamps, and error information for debugging.

Information From Third Parties

• Apple Sign-In: if you sign in with Apple, we receive a user identifier, email address (or a private relay address), and optional display name from Apple.
• Google OAuth: if you sign in with Google, we receive a user identifier, email address, and optional profile photo from Google.
• USGA GHIN: if you link your GHIN number, we retrieve your official handicap index. We do not share your data with the USGA beyond what is required to perform that lookup.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account.
• Operate real-time scoring, leaderboards, and tournament management features.
• Calculate and display your WHS handicap index.
• Power the AI caddie (Dimple/Rosco) with context about your current round, course, and score.
• Send push notifications for round invites, score updates, and app news (you can opt out at any time).
• Process payments and manage subscriptions (Super Classic, Angel Investor).
• Improve the Service through analytics and error monitoring.
• Respond to support requests.
• Comply with legal obligations.
• Facilitate Stripe Connect onboarding, verify whether an organizer's connected account can accept charges and payouts, and reconcile Event or League payments.

3. How We Share Your Information

We do not sell your personal information.

We share information only in these circumstances:

• With other players: your display name, profile photo, handicap index, and golf scores are visible to players in events you join. Event organizers can see participant contact information for the events they manage.
• Service providers: we use third-party services to operate the app, including xAI (Grok API) — your transcribed voice queries and caddie context are sent to xAI to generate responses; Stripe Connect — Stripe processes organizer-provided identity, tax, and bank information under Stripe's privacy policy, and processes participant payment information for direct charges to an organizer's connected account; Apple for in-app purchases on iOS; and Expo/EAS for app delivery and push notifications.
• Legal requirements: we may disclose information if required by law, court order, or government request.
• Business transfers: if we are acquired or merge with another company, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.
• Direct payments: with Stripe and an Event or League organizer as needed to create, process, reconcile, refund, or address a dispute about a direct payment. Organizers receive only the participant and transaction details needed to operate their Event or League.

4. Data Retention

We retain your account data for as long as your account is active. Stripe retains information it processes under its own policies. We retain connected-account identifiers, readiness information, and transaction records only as needed for the Service and for accounting, fraud prevention, security, dispute resolution, legal obligations, and the rights of other users. You may delete your account at any time from the app settings, which removes your personal information from our systems within 30 days, except where retention is required by law (e.g., payment records).

Golf round data that has been shared with other players (e.g., posted scores on group leaderboards) may remain visible in historical context after account deletion.

5. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your profile.
• Delete your account and associated data.
• Export your data in a portable format.
• Opt out of push notifications in your device settings or in-app notification preferences.
• Revoke location permission in your device settings at any time.

To exercise these rights, contact us at privacy@theclassicrsvp.com.

California residents may have additional rights under the CCPA. Virginia, Colorado, and Connecticut residents may have additional rights under their respective state privacy laws. Contact us to make a request.

6. Children's Privacy

The Service is not directed to children under the age of 13. New users must self-attest that they are at least 13 before creating or completing an account; we do not require an exact birthdate for that confirmation. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at privacy@theclassicrsvp.com and we will delete it.

7. Security

We use industry-standard security measures, including HTTPS encryption in transit and encryption at rest for sensitive database fields. Passwords are hashed using bcrypt and never stored in plain text. We implement JWT-based authentication with short expiry windows.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Third-Party Links

The Service may contain links to third-party websites (e.g., course websites, Stripe billing portal). We are not responsible for the privacy practices of those sites.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting a notice in the app or by email. The "Last Updated" date at the top of this page reflects the most recent revision.