Privacy Policy

Last updated: June 19, 2026

The Migration Cup (the “App”) is operated by Grant Sanders (“we”, “us”, “our”). The App is a private golf league, tournament, and round-tracking tool. This policy explains what personal data we collect, why, how it is used, and the choices you have.

1.Who we are

The Migration Cup is a private golf league, tournament, and round-tracking tool operated by Grant Sanders. We built it to help groups of friends run their leagues, keep score, and track stats — nothing more.

2.The data we collect

We collect only what the App needs to function:

You provide it:

• Account data — email address, and the password you choose (passwords are never stored by us in readable form; see §5). If you sign in with Apple or Google, we receive your email and name from that provider instead.
• Profile data — display name, optional @username, and an optional profile photo you upload.
• Content you create — leagues and tournaments you create or join, golf rounds, hole-by-hole scores and stats, head-to-head results, chat (“Clubhouse”) messages, reactions, and league/tournament logos you upload.
• Money tracking (informational only) — buy-in amounts and “paid / not paid” markers for pots. No money moves through the App. We do not process, hold, or transfer funds, and we never collect card or bank details. These are scorekeeping notes only (see the Terms of Service).

Collected automatically:

• Push notification token — if you enable notifications, a device token from Apple Push Notification service so we can deliver alerts. You can turn this off in iOS Settings at any time.
• Basic technical data — standard server logs (e.g. timestamps, error diagnostics) generated by our hosting provider to keep the service running.

We do not collect: precise location, contacts, health data, advertising identifiers, or financial-account information. We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.

3.How we use your data

• To create and operate your account and profile.
• To run leagues, tournaments, rounds, scoring, standings, and the trophy room.
• To show your profile, stats, and public rounds to other members, and to power the follow/followers social features.
• To deliver push notifications you’ve opted into.
• To keep the service secure, prevent abuse, and fix problems.
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

4.Who can see your information

• Other members can see your display name, username, profile photo, your stats and rounds that are visible under league settings, your follower/following lists, and anything you post in a league’s Clubhouse chat.
• Your email address is private. It is not shown to other users and is not served through our public API; it is technically restricted at the database level so that only you (via your sign-in session) and our systems can access it.
• Service providers (processors) who operate the App on our behalf:
  • Supabase — database, authentication, file storage, and serverless functions (our hosting/back-end provider).
  • Apple Push Notification service — to deliver notifications.
  • Apple / Google — only if you choose “Sign in with Apple” or Google sign-in.
  These providers process data under their own terms and only to provide their service to us.
• Legal — we may disclose data if required by law or to protect rights, safety, or the integrity of the service.

5.Security

Passwords are handled by our authentication provider using industry-standard salted hashing; we never see or store your plaintext password. All traffic is encrypted in transit (HTTPS/TLS). Access to data is enforced by per-row database security policies so members can only read and change what they’re permitted to. No system is perfectly secure, but we take reasonable measures to protect your information.

6.Data retention & deletion

• We keep your data for as long as your account is active.
• You can delete your account at any time from Profile → Settings → Delete account. This permanently removes your login and personal information (email, name, username, photo) and removes you from every league and tournament.
• To preserve the integrity of other players’ historical scorecards and standings, your past game records are de-identified (shown as “Former Member”) rather than erased, so other members’ competitive history stays intact. These records contain no personal identifiers after deletion.
• You can also email antlrcreatives@gmail.com to request deletion or ask questions.

7.Your rights

Depending on where you live (e.g. the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. You can exercise most of these directly in the App (edit your profile, delete your account) or by contacting antlrcreatives@gmail.com. We will not discriminate against you for exercising your rights. We rely on your consent and on the necessity of providing the service you requested as our legal bases for processing.

8.Children

The App is intended for users aged 17 and older and is not directed to children under 13, because the App includes user-generated chat and tracks informal money games among friends. We do not knowingly collect personal data from children under 13; if you believe a child has provided us data, contact antlrcreatives@gmail.com and we will delete it.

9.International users

The App is operated from the State of Georgia, USA and data may be processed in the United States and other countries where our service providers operate. By using the App you understand your data may be transferred to and processed in those locations.

10.Changes to this policy

We may update this policy. We will revise the “Last updated” date and, for material changes, provide a notice in the App. Continued use after changes take effect means you accept the updated policy.

11.Contact

Questions or requests: antlrcreatives@gmail.com, Grant Sanders.