Privacy Policy

1. Who we are

Fairlie ("we", "us") is a golf strokes-gained tracking and coaching app operated by Joshua McAspurn, trading as Fairlie (a sole trader). We are the data controller for the personal data described in this policy.

Contact: support@justfairlie.com

A registered postal address will be added here before a wider public launch — for now, email is the fastest and only way to reach us.

2. What data we collect

We only collect what the app actually needs to work. Specifically:

Account data (collected when you sign up)

• Email address
• Name
• Role (Player or Coach)
• Subscription tier (Free or Pro), and if applicable, when Pro access is due to expire

Profile data (optional, added by you after signup)

• Home golf club
• Current handicap and goal handicap
• Dominant hand
• Personal notes you write about yourself
• The clubs in your golf bag

Round and practice data (created when you use the app)

• Golf rounds you log: course, date, tees played, and hole-by-hole detail (score, putts, fairway/green results, and — if you use Detailed mode — individual shot distances and outcomes)
• Practice/drill sessions you log

Coach–player relationship data (only if you connect with a coach or player)

• A coach's persistent join code
• Join requests (who requested to link with whom, and whether it was approved or denied)
• If you're a Player linked to a Coach: notes your coach writes about you, which may include a photo or a link to a video, and drills your coach assigns you

Technical/error data (captured automatically, only when something goes wrong)

• If the app encounters an error, we log the error message, a technical stack trace, the page it happened on, and your browser's user agent string, so we can fix bugs. This is not linked to your identity beyond an internal account reference where available, and it's never used for anything other than debugging.

We do not collect or ask for your date of birth, and we don't run any analytics, advertising, or tracking scripts — there is nothing in the app tracking your behaviour beyond what's needed to show you your own data and to fix errors when they happen.

3. How we use your data

We use your data solely to provide the service you've signed up for:

• To create and maintain your account and let you sign in (via a passwordless email link — we never store a password)
• To store and display your rounds, practice history, and strokes-gained statistics back to you
• To power the coach–player relationship: if you're a Player, showing your data to a Coach only happens after you've actively approved a specific join request — it is never automatic
• To send you the sign-in email itself

4. Coach access — how it actually works

This is core to how Fairlie is built, so it's worth explaining plainly:

• A Coach can only see a Player's data after that Player has approved a join request. There is no way for a Coach to see a Player's data without that explicit, in-app approval step.
• A Coach can view a linked Player's rounds and practice sessions, but cannot edit or delete them — that data always stays under the Player's control.
• A Player can disconnect from their Coach at any time, which immediately ends the Coach's access.
• Coach notes (written by a Coach about a Player, potentially including a photo) are visible to the Player they're about, but the Player cannot edit or delete a Coach's notes — only the Coach who wrote them can.

5. Who we share your data with

We use a small number of service providers ("processors") to run Fairlie. They only process data on our instructions, for the purpose of providing their specific service to us:

We do not sell your data, and we do not share it with anyone for marketing purposes.

6. International data transfers

Some of our service providers process data outside the UK:

• Resend (our email provider) stores account data, including the email addresses it sends to on our behalf, in the United States, regardless of which region an email is actually sent from. This transfer is covered by Resend's Data Processing Agreement, which incorporates the EU Standard Contractual Clauses together with the UK ICO's International Data Transfer Addendum.
• Supabase (our database, authentication, and file storage provider) hosts our project's database in Paris, France (AWS eu-west-3) — within the EEA, so your core account, round, and coach-relationship data does not leave the EEA as a result of where it's stored. Supabase may still use its own subprocessors outside the UK/EEA for narrower purposes (e.g. support tooling); any such transfer is covered by Supabase's Data Processing Agreement, which incorporates the same EU Standard Contractual Clauses and UK International Data Transfer Addendum referenced above.

We don't transfer your data internationally for any purpose beyond what's needed to run these underlying services.

7. How long we keep your data

We keep your data for as long as your account is active. If you delete your account, your profile, rounds, practice sessions, and coach-relationship data are permanently deleted immediately — this isn't a "soft delete," it's a real cascading deletion at the database level. If you're a Coach, deleting your account also disconnects (but does not delete) your players' own accounts.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can edit almost all of your own profile and round data directly in the app)
• Export your data — Fairlie has a built-in "export my data" feature that gives you a complete copy of your profile, rounds, practice sessions, and (for coaches) your roster, in a portable format
• Delete your account and all associated data — available directly in the app under your profile
• Object to or restrict certain processing
• Withdraw consent for the coach–player link at any time by disconnecting from your coach

To exercise any of these rights beyond what's available in-app, contact us at support@justfairlie.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

• We never store your password — sign-in is via a one-time emailed link.
• Access to your data is enforced at the database level using row-level security, not just application code — a Coach's account is physically incapable of reading a Player's data unless that specific Player has approved them.
• Coach note photos are stored in a private file bucket and served via short-lived signed links (expiring after one hour), not public URLs.

10. Age requirement

Fairlie is intended for users aged 18 and over. We don't knowingly collect data from children under 18. If you believe a child has created an account, contact us at support@justfairlie.com and we'll delete it.

11. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you directly.

12. Contact

Questions about this policy or your data: support@justfairlie.com