Privacy Policy
How Gimmi collects, uses and protects the data your society, its members and its scores depend on.
Overview
Gimmi is a platform for running golf societies - events, live scoring, Ryder Cups and the public website that comes with each society. This policy explains what information we collect to make that work, how it's used, and the choices you have over it.
Accounts
We collect the information needed to create and secure your account:
- Name and email address, used for sign-in and account recovery.
- A profile photo and handicap index, where you choose to add them.
- Authentication is handled by Supabase; we do not store your password ourselves.
Society data
When you create or join a society, we store the information needed to run it: society name and branding, membership list, roles (owner, organiser, member), invite codes, and any wallet balances or entry-fee records an organiser tracks for that society.
Society organisers can see membership and wallet data for their own society. Gimmi staff access this data only to provide support or maintain the service.
Scores & competitions
Round scores, match results, Ryder Cup fixtures and Order of Merit standings are stored against your account and the society you recorded them for. Where a society or event is made public, its fixtures, results and leaderboard are visible to anyone with the link - this is a deliberate feature of Gimmi's public pages, not incidental exposure, and organisers control whether an event is public or members-only.
Analytics
If you allow Analytics in the cookie banner or Cookie settings, we record basic product usage events - such as an event being created, a public page being viewed, or a score being submitted - to understand which parts of Gimmi are actually used and where organisers get stuck. These events are tied to your account or society, not sold or shared for advertising, and are used only to improve the product. Without that consent, no usage events are recorded for you.
We send account-related email - invitations, password resets, and (where enabled) event or results notifications. We do not send marketing email you haven't asked for.
Data retention
We retain account, society and scoring data for as long as your account remains active, so that historical results, Order of Merit standings and season records stay intact for your society.
Third parties
Gimmi relies on a small number of trusted infrastructure providers to operate:
- Supabase - authentication and database hosting.
- Vercel - application hosting.
- Sentry - error and performance monitoring, so we can find and fix bugs. Configured not to collect your IP address or other identifying details by default.
- Resend - sends transactional email on our behalf (invitations, notifications, password resets).
- Stripe - processes payments for paid plans. Stripe, not Gimmi, handles your card details directly.
- A web push provider, for optional browser notifications you explicitly enable.
None of these providers are permitted to use your data for their own purposes.
Your rights
You can request access to, correction of, or deletion of your personal data by contacting us. Depending on your location, you may have additional rights under data protection law.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page and, where appropriate, let organisers know directly.
Contact
For privacy-related questions or requests, contact us at:
hello@gimmi.golf
