Tour & Tee · Legal
Privacy Policy
This policy explains what information Tour & Tee handles, why, who else receives it, and what happens when you delete your account. It describes the app as it is built today — not what it might do later.
Who operates Tour & Tee
Tour & Tee is operated by Apple Bee SRL, a software company based in the Republic of Moldova ("Apple Bee", "we", "us", "our"). You can reach us about anything in this policy at applebeesrl@gmail.com.
Scope
This policy covers the Tour & Tee mobile app and the backend service behind it. It does not cover the separate Apple Bee website, which has its own privacy policy, or any third-party service you reach from the app, which is governed by that provider's own terms.
Information you provide
Account
To create an account you provide an email address and a password. Authentication is handled by our backend provider (see Service providers); we do not store your password ourselves.
Profile
Your profile holds a username and display name, and optionally a handicap, a home club and an avatar image address. Only the username and display name are needed to use the app. The app does not ask for your real name, date of birth, address or phone number, and it has no photo-upload feature.
Golf and participation information
When you use the app to play, we store the rounds you create or join, the course and tee time, who is playing, hole-by-hole scores, saved scorecards, marker assignments and signatures, round results and standings, any challenges attached to a round, and invitations you send or receive. This is the core of what the app does.
Organisation and contact information
If you use the organiser tools, we store the organisation, its members and their roles, and the contacts, tags, tasks and segments you record in it, together with activity history and the messages and consent records generated by payment reminders. Contact records you create describe other people; you are responsible for having a proper basis to hold them.
Support messages
If you email us, we hold that correspondence so we can answer you.
Payment and transaction information
Where a round, event or challenge carries a participation fee, we store the amount, the currency, what it relates to, its status, the payment attempts made against it, cash receipts recorded by an organiser, refunds, and an internal ledger of those movements.
We never receive or store your card details. Card data is entered directly into Stripe's own payment sheet inside the app and goes to Stripe. There is no card number, expiry or security code anywhere in our systems. What we do hold is payment metadata: amounts, currency, status, failure codes and Stripe's own reference identifiers. We say this plainly because "we don't handle payments" would be untrue.
If you choose to scan a card, the camera is used by Stripe's payment sheet for that purpose only. That is the only reason the app requests camera access, and the image is not sent to us.
Organisers and Stripe
An organisation that collects fees by card connects its own Stripe account. That account belongs to the organisation, not to Apple Bee. We store the Stripe account reference, its onboarding and capability status, and any outstanding requirements Stripe reports — not the organisation's banking credentials.
Subscription information
Tour & Tee Premium is purchased through the app store on your device. The store handles the payment; we do not see your payment method. We receive and store the resulting subscription and entitlement records — what you are entitled to and until when — via RevenueCat, which we use to process store purchases. RevenueCat receives your Tour & Tee user identifier so entitlements follow your account.
Device and technical information
The app stores small amounts of data on your own device, such as your session and preferences. Our servers keep an audit trail of security- and money-relevant actions: who did what, to which record, and when.
We do not collect your IP address or user-agent in that audit trail — there is no such field in it. The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK and no tracking technology. It does not request access to your location, contacts, photo library or microphone.
Notifications
The app can send notifications about rounds, invitations and results. If a build of the app has push notifications enabled and you allow them, your device is issued a push token by Apple's and Google's notification services, and we store that token together with a random installation identifier so we can send to the right device and avoid duplicates. That identifier is generated on the device and is not an advertising or hardware identifier. Tokens are removed when you sign out or delete your account.
You can turn notification types on and off in the app, and withdraw the system permission at any time in your device settings.
Professional golf statistics
Some screens show professional tour player and event statistics supplied by an external sports data provider. That is reference information about public figures, not about you. If you follow a player, we store that choice against your account.
How we use information
- to create and run your account;
- to provide the golf features — rounds, scoring, invitations, challenges, events;
- to provide the organiser tools you choose to use;
- to calculate, collect, reconcile and refund participation fees;
- to give you the Premium entitlement you purchased;
- to send the notifications you have enabled;
- to keep the service secure and to investigate abuse or payment disputes;
- to answer your support messages;
- to meet financial, tax and other legal obligations.
Service providers
We do not sell personal information, and we do not share it for advertising. We do rely on a small number of providers to run the service, and they receive only what their function requires:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosts our database, authentication and server functions | Your account and all service data described above. Our project runs in the eu-west-3 (Paris) region. |
| Stripe | Processes card payments and organiser payouts | Your card details (directly — not via us), payment amounts and status |
| Apple | App distribution and in-app purchases | Your purchase and subscription record, under Apple's own policy |
| RevenueCat | Processes store purchases into entitlements | Your Tour & Tee user identifier and store purchase data |
| Google (Firebase Cloud Messaging) | Delivers Android/cross-platform push, when a build has push enabled | Your push token |
Each provider handles that data under its own terms and privacy policy.
Other people in the app
Golf is played with other people. Players you invite to a round, and organisers of an organisation you take part in, can see the information the feature requires — for example your display name, username, your scores in that round, and whether a participation fee you owe is outstanding. Invitations work by exact username only: the app has no directory, no browsing and no lookup by email or phone number.
Legal and safety disclosures
We may disclose information where we reasonably believe it is required by law or legal process, or where it is necessary to investigate fraud or a payment dispute, to enforce our Terms, or to protect the rights and safety of users or the public.
International processing
Our database is hosted in the European Union (eu-west-3, Paris). Our providers may process data in other countries, including outside the European Economic Area, under their own terms.
Retention
We keep account and golf data for as long as your account exists. We do not apply a fixed retention period to it, and we would rather say so than publish a number the system does not enforce.
Financial records — obligations, payments, refunds, ledger entries and subscription records — and the security audit trail are kept beyond account deletion, in de-identified form, because we need them for accounting, tax, fraud and dispute purposes. See below for exactly what that means.
Deleting your account
You can delete your account from inside the app: Profile → Settings → Account management → Delete account. It asks you to confirm, and it is permanent — it is not a sign-out and not a deactivation.
What happens, precisely:
| Data | What happens |
|---|---|
| Sign-in identity, sessions and password | Deleted |
| Profile, rounds, scorecards, hole scores, challenges, invitations, notification preferences, push tokens | Deleted |
| Your actions appearing in other people's notification feeds | Deleted, so your name does not survive there |
| Contact records about you in an organisation's CRM | Redacted in place — name, handle, email and notes removed and the link to your account cut. The organisation's own activity and consent history remains as its compliance record. |
| Payment obligations, payments, refunds, ledger entries, subscription contracts and entitlements | Kept but de-identified — the record no longer points at you |
| Security audit trail | Kept but de-identified — the actor reference is removed |
One limit, stated up front: if you own an organisation you cannot delete your account until you transfer or close it, because other people's records depend on it. The app tells you this rather than failing silently.
Backups taken before deletion age out on their normal cycle.
Your choices
- Edit your profile, or clear the optional fields, in the app at any time.
- Choose which notifications you receive, in the app and in your device settings.
- Delete your account as described above.
- Ask us about the information we hold about you by emailing applebeesrl@gmail.com. Depending on where you live you may have rights of access, correction, deletion, portability or objection; we will respond to requests in line with the law that applies to you.
Security
Traffic between the app and our servers uses HTTPS. Access to data is enforced in the database itself by row-level security and by server-side functions, so a client cannot read records it is not entitled to. Card details never enter our systems. No service can promise perfect security, and we do not.
Children
Tour & Tee is not intended for children. You must be at least 16 to create an account, as set out in our Terms of Service. We do not knowingly collect information from children below that age; if you believe a child has created an account, contact us and we will remove it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and where a change is significant we will say so in the app or by email.
Contact
Apple Bee SRL, Republic of Moldova — applebeesrl@gmail.com. See also our Support page.