Privacy Policy

Last updated 16 September 2026

What we collect

When you sign up and build a profile:

• Your email address. We don't ask for a password — you sign in through a link we email you.
• Your date of birth — used only to check you're 18 or older. It is never shown to anyone.
• Your display name, bio and photos.
• Your handicap or the range you typically score in, how competitive you are, whether you walk or ride, and when you can play.
• Your home course and how far you'll travel.
• An approximate location — see below.

As you use the app:

• Who you've liked or passed on, and who you've matched with.
• Messages you send, in matches and in round group chats.
• Rounds you post or join.
• Anyone you block, and any reports you file.

Your location

We ask for your location so we can show you golfers and courses nearby. You can give it either from your browser or by entering a postal code — your choice, and you can change it whenever you like.

We deliberately store it imprecisely. Before saving, we round your coordinates to roughly a one-kilometre grid, so your exact position is never in our database at all — not even if our database were breached.

Other golfers are never shown your location. They see a rounded distance — "5 km away" — and nothing more precise. We do not share location with anyone else.

Your photos

Photos are stored privately. They are served through links that expire, rather than public web addresses, so a photo can't be passed around or stay reachable after you remove it.

Your browser shrinks and re-encodes each photo before it's uploaded, which strips the metadata phones attach to pictures. That matters because phone photos routinely carry the GPS coordinates of where they were taken.

Who can see what

• Your profile, photos, first name, approximate distance, skill and availability are visible to other golfers in your area who match your filters.
• Your messages are visible only to the people in that conversation.
• Your date of birth, email address, exact location and who you've liked or passed on are never shown to other users.
• Moderators can see reported content and messages when reviewing a report.
• The person who runs Mulligan Club can look up any account and see its profile, photos, email address and account status. This is for support and safety — working out why sign-in or matching isn't working for you, and acting on reports. Every one of those views is recorded in an audit log.
• That does not include your private messages. A message can only be read by a moderator if someone has reported it.
• It does not include your exact location either. Moderation tools show only whether you have set a location and the town label you chose — never your coordinates.

Who else is involved

• Supabase — hosts our database, sign-in and photo storage.
• Resend — delivers the emails that sign you in. They receive your email address.
• Vercel — hosts the app itself.
• OpenStreetMap and Zippopotam — used to turn a postal code into an approximate location. We send them a postal code, never your identity.
• Apple, Google or Mozilla — only if you switch on notifications. Your browser registers with whichever of them runs it, and we send alerts through that registration. Turning notifications off removes it.

We do not sell your data, and we do not share it for advertising.

Where your data is stored

Your information is stored on servers in the United States — specifically Northern Virginia, where our database provider hosts it. That includes your profile, your photos, your messages and your approximate location.

Canadian privacy law allows this, and we're telling you because it also requires that we do. It does mean your information is subject to the laws of the United States while it is there, including requests from US courts and government agencies. Those authorities could in principle compel access to it without our being able to tell you.

We protect it the same way wherever it sits: photos are private and served through expiring links, your coordinates are never stored precisely, and your messages are visible only to the people in the conversation.

How long we keep it

We keep your information while your account exists. When you delete your account, we delete your profile, photos, matches, messages and rounds, and we remove your photo files from storage rather than merely hiding them.

Reports and the messages they concern may be kept longer where needed to keep people safe or to meet a legal obligation.

Your choices

• You can see and change everything on your profile at any time.
• You can change or re-enter your location whenever you like.
• You can block anyone, and unblock them later.
• You can delete your account permanently from Settings.
• You can ask us for a copy of your information, or ask us to correct it.

Children

Mulligan Club is for adults. We do not knowingly collect information from anyone under 18. If you believe a child is using Mulligan Club, please report the account.

Changes

If we change this policy in a way that matters, we'll tell you before it takes effect.

Getting in touch

Questions about this policy, a request for a copy of your information, a correction, or a complaint can go to privacy@mulliganclub.ca.

If you're not satisfied with how we handle it, you can raise it with the Office of the Privacy Commissioner of Canada.