Privacy Policy for Minigolf Score Tracker
Last Updated: September 6, 2026
Version: 1.6
Introduction
Minigolf Score Tracker (“we,” “our,” or “the app”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application.
Data Collection and Usage
1. Account Information (Optional)
- When you sign in with Apple ID:
- Apple User ID (anonymized identifier)
- Name (optional, provided by Apple)
- We do not ask Apple for your email address. Earlier versions of the app did. Any address one of them stored is deleted from your device the next time you open the app.
- Purpose: To create and maintain your account
- Storage: Your account is stored locally on your device. When you sign in, the identity token Apple issues is sent to our servers; we verify it and keep the account identifier it contains, along with a hashed record of the resulting session. When you are signed in, your name also syncs to those servers so the same player is recognized across your devices.
2. Game Data
- Course names and details
- Player names (entered by you)
- Scores and game history
- Game dates and times
- Purpose: To provide core scoring functionality and track your minigolf history
- Storage: Stored locally on your device using Apple’s SwiftData framework. When you sign in with Apple, your rounds, scores, player names and course details also sync to servers we operate, so they reach your other signed-in devices. They are encrypted on your device before they are sent, with a key we never receive — so we cannot read them.
3. Location Information (Optional)
- Your location (when you use the “Find Courses” feature)
- Purpose: To help you discover nearby minigolf courses
- Permission: We only access your location with your explicit permission
- What we send: Your location is rounded to about a kilometre before it leaves your device. The exact position stays here and is used only to work out how far away each course is and to sort the list. See “Third-Party Services” below for how Google handles what it receives.
- Storage: We do not store or retain your location.
- Control: You can deny or revoke location access at any time in iOS Settings
4. Usage Analytics
- Anonymous usage data collected through Apple’s built-in analytics (MetricKit and OSLog)
- App performance metrics (crash data, performance metrics)
- Purpose: To improve app stability and user experience
- Privacy: All analytics respect your iOS privacy settings and do not identify you personally
- Control: Can be disabled via iOS Settings → Privacy & Security → Analytics & Improvements
- We do not collect any personally identifiable information beyond what you enter in the app and what Apple provides through Sign in with Apple
- We do not track your browsing history or activities outside the app
- We do not collect device identifiers for advertising purposes
- We do not use cookies or similar tracking technologies
- We do not collect sensitive personal information (health data, financial data, etc.)
Third-Party Services
Google Places API
We use Google Places API to help you discover nearby minigolf courses.
- Data Shared: Your location rounded to about a kilometre, and any course name you type into the search (only when you use the “Find Courses” feature). Google is sent the rounded coordinate to centre the search on; it never receives your exact position
- Purpose: To search for minigolf venues near you
- Google’s Privacy Policy: https://policies.google.com/privacy
- Retention: We do not retain what is sent. Google receives the request and handles it under their own policy, which we do not control.
- Data Storage: Search results are cached temporarily on your device for performance
- No Account Required: Google does not receive any account or personal information from our app
Sign in with Apple
When you choose to sign in with Apple:
- Data Shared: Minimal - only what you authorize Apple to share
- No Email Requested: We do not ask for your email address, so Apple does not offer to share one — there is nothing for its private relay to hide
- Apple’s Privacy Policy: https://www.apple.com/legal/privacy/
- No Tracking: We cannot track you across other apps or websites
Data Storage and Security
Where Your Data Lives
- Your rounds, scores, players and courses are stored on your device. When you sign in with Apple, they also sync to servers we operate so your other signed-in devices can see them.
- If you sign in with Apple, we create an account on servers we operate. That account holds an
identifier Apple gives us for you, and a hashed record of your sign-in sessions.
- Syncing also sends your account details — your name and your chosen avatar — to the same servers, alongside your rounds, scores, player names and course details, so a round can show who played it on every device. Your email address is not among them. Google’s cached ratings, photos, opening hours, phone numbers and categories never leave your device, and neither do photos you add.
- All of that is encrypted before it leaves your device, with a key stored in your iCloud Keychain. Apple moves that key between your own devices; it never reaches us. What our servers hold is a block of bytes we cannot open.
- What we can still see is not nothing, and we would rather say so: that an account exists, how many rows of each kind it holds, and when each last changed. We can also see the identifier Apple gives us for you, because that is what tells your rows apart from someone else’s.
- If you turn iCloud Keychain off, the key cannot reach your other devices. This app keeps syncing and keeps encrypting — but a second device will not be able to read what the first one sent, and will tell you so rather than showing you an empty history.
- Your device keeps a sign-in token for that account in the iOS Keychain.
- Data on your device is protected by iOS device security (passcode, Face ID, Touch ID).
What Leaves Your Device
- Google Places API for course discovery, when you use “Find Courses” — see above.
- Apple’s authentication service, when you sign in with Apple.
- When you sign in, your device sends the sign-in token Apple issues to our servers. We check that it is genuine and keep the account identifier it contains, along with a hashed record of the resulting session.
- When you are signed in, your rounds, scores, player names, account details and course details sync to our servers, so your other signed-in devices can see them — encrypted, with a key we never receive. Your email address does not. Google’s cached ratings, photos, opening hours, phone numbers and categories never leave your device, and neither do photos you add.
We do not sell your data, and we do not use it for advertising.
Data Security
- Data is secured using Apple’s SwiftData framework with built-in encryption
- Device-level security protects your data (iOS Keychain for sensitive credentials)
- Data transmitted to our servers uses HTTPS encryption and authentication tokens are held in the iOS Keychain
Your Rights and Controls
Access and Control
You have complete control over your data:
- View Your Data: All data is accessible within the app (Profile, Game History)
- Export Your Data: Share game results as images or text
- Delete Specific Data: Delete individual games or courses
- Delete All Data: Use “Reset Play History” in Settings to remove all game data
Account Deletion
If you signed in with Apple ID:
- Open the app and go to Settings
- Tap “Delete Account”
- Confirm deletion
- Your account is deleted from our servers, along with every round, score, player and course you
synced to them, and all associated data is permanently deleted from your device
Important: Account deletion is immediate and cannot be undone. Make sure to export any data you want to keep before deleting your account.
Revoking Permissions
You can revoke permissions at any time:
- Location Access: iOS Settings → Minigolf Score Tracker → Location → Never
- Analytics: iOS Settings → Privacy & Security → Analytics & Improvements → Share iPhone Analytics (toggle off)
Children’s Privacy
Minigolf Score Tracker is rated 4+ and is suitable for all ages. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
Data Retention
- Active Users: Data is retained on your device as long as the app is installed
- Deleted Games: Permanently removed from device when you delete them
- Deletion Markers (Sync): When you are signed in, deleting a round leaves a marker on our servers for 90 days so your other devices can learn it is gone, then the marker is purged. It holds the deleted item’s identifier and nothing else.
- Automatic Sync: When you are signed in, your device syncs in the background — after you record a round, add a course or a player, or change your name or avatar, and when you open the app. It syncs at most once every five minutes. Signing out stops it; a sync already underway when you sign out finishes.
- Account Deletion: Account deleted from our servers and all locally-stored data deleted from your device when you delete your account
- App Uninstall: All locally-stored data is removed when you uninstall the app. If you signed in with Apple, your account remains on our servers until you delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the “Last Updated” date at the top of this policy
- Posting a notice in the app when significant changes occur
- Requiring you to accept updated terms for material changes
Your continued use of the app after changes indicates your acceptance of the updated policy.
International Users
Minigolf Score Tracker is available worldwide. Your rounds, scores, players and courses are stored on your device. When you sign in with Apple, they reach the same North American servers as the account identifier described above, which may be outside your own country.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know: What personal information we collect (see “Information We Collect” above)
- Delete: Request deletion of your personal information (use “Delete Account” in Settings)
- Opt-Out: We do not sell personal information, so there’s nothing to opt out of
- Non-Discrimination: We do not discriminate based on privacy choices
European Privacy Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access: View all your data within the app
- Rectification: Edit your information in the app settings
- Erasure: Delete your account and everything you synced from our servers, and all associated data from your device
- Data Portability: Export your game data
- Withdraw Consent: Revoke location or analytics permissions at any time
Legal Basis for Processing:
- Account data: Consent (when you sign in with Apple)
- Game data: Contractual necessity (to provide the service)
- Location data: Consent (when you grant location permission)
- Analytics: Legitimate interest (app improvement)
If you have questions about this Privacy Policy or your data:
Developer: Steve Tannock
Email: [email protected]
Response Time: We aim to respond within 7 business days
Transparency Commitment
We believe in radical transparency:
- Open Source: Our privacy practices match our public code
- No Hidden Tracking: We don’t use analytics SDKs or third-party trackers
- Local-First: Your rounds, scores, players and courses live on your device. When you are signed in, they also reach your other devices through servers we operate — never anyone else’s.
- Clear Language: This policy is written in plain English, not legal jargon
Summary (TL;DR)
✅ What we do:
- Store your game data locally on your device
- Let you optionally find nearby courses using Google Places
- Let you optionally sign in with Apple for account features
- Sync your rounds between your own devices when you sign in with Apple
- Collect anonymous analytics through Apple’s privacy-focused system
❌ What we DON’T do:
- Sell or share your rounds with anyone else
- Track you across apps or websites
- Sell your data to anyone
- Show ads or collect data for advertising
- Send anything to a third party except the course search described above
Your privacy is not negotiable. If you have concerns, please contact us.