Privacy Policy

Junior Golf Passport is a live, early-stage service that lets an adult document and share a junior golfer's journey. Accounts and passports must be created and managed by a parent, guardian, or other responsible adult. The service is not intended for children to create or manage accounts independently.

Information The Service Collects

Supabase Auth processes the adult account holder's email address, password credentials, account identifiers, and sign-in session. Junior Golf Passport stores the information an adult adds, which may include:

• golfer names, profile photos, home state, headlines, and biographies;
• courses played, rounds, scores, achievements, tournaments, and goals;
• memories, stories, dates, tags, photo captions, and uploaded photos;
• publication choices, passport visibility, and share-link records; and
• AI request status and limited operational records used to run and troubleshoot the service.

The browser stores sign-in session information and limited cached app data in local storage. Service providers may also receive routine request information, such as an IP address, browser type, device type, timestamps, and error or security logs, when they deliver the service.

How Information Is Used

Information is used to authenticate adult account holders; create, store, and display passports; save memories and photos; map course history; operate sharing controls; generate an optional AI draft; protect and troubleshoot the service; and respond to support or safety issues when a support route is available.

Junior Golf Passport does not currently use a site analytics service, provide visitor counts, run targeted advertising, or sell personal information. Infrastructure providers may still keep ordinary delivery, security, and error logs under their own policies.

Passport Visibility And Share Links

• Public passports can be viewed by anyone and may appear in the golfer directory.
• Link-only passports are not intended for the public directory, but anyone with an active share link can view the published content.
• Private passports require an authorized sign-in unless the adult manager creates an active share link.

A share link acts like a password and can be forwarded, copied, or captured in a screenshot. Share links show content that has been published or shared, not private drafts. Adults should still review the complete passport before sending a link. Changing a visibility setting cannot remove copies that another person has already saved.

AI Drafting And Course Lookup

Built-in AI drafting is optional. Only when an adult clicks the AI drafting button does the service send the rough story note and related form text to OpenAI to produce a suggested draft. Photos are not sent with that drafting request. AI output can be incorrect and must be reviewed before it is saved or published.

Course lookup sends the course-search words an adult enters to Google Places so the course can be identified and mapped. The previous feature for importing Google-sourced course photos is being retired; adults should upload only photos they are allowed to use.

Service Providers

The current service relies on:

• Supabase for authentication, database storage, file storage, and server-side functions;
• OpenAI for optional drafting when the adult chooses that feature;
• Google for Places course lookup; and
• GitHub Pages for delivery of the static website.

These providers may process data in locations where they operate and handle it under their own terms and privacy policies.

Junior Golfer Privacy

An adult is responsible for deciding what is appropriate to collect and share. Do not add a child's home address, school schedule, birth date, personal contact information, medical information, precise live location, or anything else that could put the child at risk. Use private mode when testing the service.

The service does not yet provide formal age assurance, verified guardian consent, or a complete child-privacy request process. No claim of legal compliance for children's accounts is made. The service should remain adult-managed, invitation-only, and private by default until those safeguards and a direct support contact are in place.

Retention, Editing, And Deletion

Account and passport data is kept while it is needed to operate the account and for legitimate security, legal, backup, or operational needs. A fixed retention schedule has not yet been published. Backup copies and logs may remain until their normal rotation completes.

Adult managers can edit many passport fields, remove individual content where the app provides that control, change visibility, and sign out. The service does not yet offer self-service account export or complete account deletion. Removing visible content is not the same as deleting every account record or backup.

Security

The service uses authentication and access controls, but no online service can guarantee complete security or permanent availability. Adults must protect their password and share links, sign out on shared devices, and keep their own copy of important photos and records.

Policy Changes

This policy may change as the early service develops. The updated date at the top of this page will change when the policy is revised.

Privacy And Support Contact

A verified operator identity and direct privacy or support contact are not currently published. This is an important limitation and must be corrected before a broad public launch. If someone gave you access, contact that person outside the app for help. Until a direct contact and full deletion process are available, do not add sensitive information about a child. See the support page for immediate safety and troubleshooting steps.