Teewise

Legal

Privacy Policy

This policy explains what personal information Teewise collects, how we use it, who we share it with, and the choices and rights you have. Please read it alongside our Terms & Conditions.

Last updated: 5 October 2026

1. Who we are and how to contact us

Teewise is operated by Teewise Computer Systems Design LLC, a limited liability company established in the United Arab Emirates under trade licence number 1457664, with its registered office at Office 105 - 215, Muna Aljaziri Building - 105, Al Marrar, Deira, Dubai, United Arab Emirates. We are the data controller for the personal information described in this policy, and our processing is governed primarily by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), overseen by the UAE Data Office. Teewise is offered to golfers in the United Arab Emirates and elsewhere. Teewise is licensed in the Emirate of Dubai by the Department of Economic Development; it holds a mainland Dubai licence and is not established in a free zone. For anything to do with your personal data, or to exercise any of the rights in this policy, email hello@teewisegolf.com. For general help, email hello@teewisegolf.com.

2. Account and sign-in information

When you create an account we collect your email address. If you choose a password, our authentication provider (Supabase Auth) stores it only in securely hashed form. Teewise never stores your password in its own database tables. If you use Sign in with Apple, we receive the name and email you approve; if you use Apple’s private email relay, we only ever see the relay address. If you use Google sign-in, we receive your Google account email and the identity token Google returns. The account emails we send you, password resets and email confirmations, are delivered on our behalf by our email provider, Resend, which receives your email address and the contents of those messages. We also keep basic account records such as when your account was created and your notification and consent settings.

3. Your golf profile

Your profile can include a display name, an avatar photo, your handicap, skill level, strengths and weaknesses you describe, your risk tolerance and your goals. You can change your display name (it cannot be left empty), add, change or clear your handicap and goals, and change your avatar, at any time in Settings → Edit profile, and you can change your skill level, handicap, strengths, weaknesses, risk tolerance and goals in Settings → Skills Assessment. Where your profile has a typical score range on file, it cannot be entered or edited anywhere in the app, but it is still included in AI caddie requests. Email hello@teewisegolf.com to have it corrected or cleared. Earlier versions of the app also offered a set of optional personal details: your age range (the options included an ‘under 18’ band), gender, emirate, how long you have played, how often you play, your home golf club, and golf communities or societies you play with (free text). Those fields have been withdrawn. They can no longer be entered or edited in current versions of the app, and we are not collecting anything new under them, although an older version of the app that has not yet updated still shows these fields, so it may save values entered in it until it updates. And where you filled them in while they were available, those values are still stored on your profile record. They are not used by any feature of the app; we keep them only so that the fields can be restored later without you having to enter everything again. They were always optional and the app works fully without them. To have any of them corrected or erased, email hello@teewisegolf.com and we will action it; deleting your account removes them along with everything else. An earlier version of the app also had an optional free-text ‘profession’ field. It was withdrawn in June 2026 and is no longer offered or collected; it is not used by any feature of the app. Where you filled it in while it was available, that value is still stored on your profile record. To have it corrected or erased, email hello@teewisegolf.com; deleting your account removes it along with everything else. One thing to know: avatar photos are stored in a public storage area, which means anyone who has the image link can view your avatar. Please do not use an avatar image you would not want to be publicly visible.

4. Rounds, games and scores

When you track golf we store the rounds and holes you record: strokes, putts, penalties, fairway results, greens in regulation, sand saves, up and downs, driving distances in yards, and any free-text notes you add. We also store the per-hole AI tips generated for you, a record of who entered each score in shared games (so groups can see scores were entered fairly), the games you host or join and the players in them, and a snapshot of the weather at the time of your round. Games can use different scoring formats, such as Stableford, and we store the scoring format chosen for each game. When you start a round we also save a snapshot of your handicap at that moment on the round, so Stableford points stay consistent even if your handicap changes later; the points themselves are calculated on your device and are not stored on our servers. On your profile, other signed-in Teewise golfers can see your display name and avatar, your handicap and skill level, when you joined, whether you have Premium, your golf stats (rounds played, best and average score, courses played and games joined), the badges you have earned and when you earned each, and your completed rounds: the course, the date and your score on each hole. Your profile never shows them your notes, your caddie tips or the other stats you record on each hole, such as putts and fairways, and for a round played in a game it shows only your own scores, not the game or the other players in it. You can hide your completed rounds from your profile at any time in Settings → Hide my rounds; your profile stats stay visible. If you have blocked someone, or they have blocked you, neither of you can see the other’s profile in current versions of the app, including its stats and rounds. An older version of the app that has not yet updated may still show your name, avatar, handicap and skill level to someone you have blocked, but not your stats or rounds. Three things are separate from your profile. Anyone who has a link to your profile, signed in or not, can see your display name, how many rounds you have played and your average score in the link’s preview, and blocking someone does not change that. The players in a game with you see your name and scores for that game; blocking one of them does not hide your scores in a game you have both already played. And a round you share by link shows its full scorecard to any signed-in golfer who has the link, whether or not you hide your rounds or block them, until you turn the link off.

5. Finding friends from your contacts

So that friends who already know your email address can find you, we store a one-way SHA-256 hash of your own email in a private matching index. A hash is designed to be one-way and cannot practically be reversed back into your email. If you choose to grant contacts access, the email addresses in your address book are normalised and hashed on your device, and only those hashes are sent to our server to check for matches. Your contacts never leave your device in readable form, and Teewise never stores your address book: the hashes you submit are used only to run the match and are not kept. All we record against your account is how many hashes you sent and when, so we can rate-limit the feature. We rely on our legitimate interest in helping players find each other to run this matching, including for people in your address book who are not Teewise users. If a friend of yours uses this feature, a hash of your email address may reach us from their address book in the same way.

6. Location

With your permission, Teewise uses your precise device location only while you are using the app (foreground only: we never track your location in the background) for three things: finding golf courses near you, fetching accurate weather for your round, and calculating GPS rangefinder distances while you play. The rangefinder is the most precise of the three: while that screen is open your device streams high-accuracy positions, updating roughly every two metres you move, so the yardages stay live, and the tracking stops the moment you leave the screen. Your exact coordinates are sent to our weather service, which forwards them, without your name, account ID, or any other identifier, to the weather providers Open-Meteo and MET Norway. Our own server logs record location only at a coarse level of roughly 11 kilometres. So that everyone playing the same course sees the same conditions, our weather service also reuses each weather snapshot for up to about 30 minutes from a shared cache, stored against a rounded location cell of roughly 1 kilometre rather than your exact position, and not linked to you or your account. When the AI caddie uses rangefinder information, it receives only a derived distance to the green in yards, never your coordinates. To draw the rangefinder map, satellite imagery around your position is loaded from the device’s map provider: Apple Maps on iOS or Google Maps on Android. We do not store your raw coordinates. You can switch location off at any time in your device settings; the location features stop working but the rest of the app is unaffected.

7. AI caddie (powered by OpenAI)

The AI caddie is powered by OpenAI. OpenAI is the only AI provider we use. No other AI company receives your data. The caddie works only with your consent, and that consent is enforced on our servers: if you have not consented, or have withdrawn consent, caddie chat and tips will not run. When you send the caddie a message or request a tip, we send OpenAI the information needed for a good answer: your display name, handicap, skill level, strengths and weaknesses, risk tolerance, goals and typical score range, the caddie’s memory of you (see the next section), your last ten rounds and their weather, your live round state and GPS-derived distances if you are mid-round, the current weather, the conversation so far, and any photo you attach to a message (our server fetches it from your private storage and includes it with the request). If you ask the caddie during a shared game, the request also includes your full hole-by-hole scores for the round, and the first names and hole-by-hole scores (and Stableford points, where applicable) of the other players in your game, so the caddie can answer questions about the game, side bets and scoring variations. Other players’ data is limited to their first name and gameplay data, nothing else about them is sent, and it is included only when you ask the caddie during a shared game; the same OpenAI commitments described in this section apply to it. By joining a shared game, the name and scores you play under are visible to the other players in your group, and may be included in those players’ caddie requests on the same basis. Under our agreement with OpenAI, your data is not used to train OpenAI’s models, and OpenAI may retain inputs for up to around 30 days for abuse monitoring before deleting them. On our own servers we store your caddie conversations, together with your per-reply feedback (such as a thumbs up or down), how each message was entered, and basic technical telemetry about each reply. The caddie’s suggestions are informational and for entertainment. It is not a certified coach or medical professional, and you should not rely on it for decisions that affect your health or safety. The caddie is genuinely optional: you can withdraw your consent at any time in Settings and the caddie switches off immediately.

8. Caddie memory and sensitive information

To give you consistent advice across sessions, an OpenAI model generates a short memory summary about you (up to 2,000 characters) from your caddie conversations, and this summary is included with future caddie requests. The memory is designed to keep useful context you have shared, which can include things like injuries, family, work or schedule details if you mentioned them. Please think before telling the caddie about your health or other sensitive matters: anything the memory keeps will be re-sent to OpenAI in future conversations. Where you choose to share health-related information (for example an injury), we process it on the basis of your explicit consent. You can clear the caddie’s memory and delete your chat history at any time: withdrawing AI consent in Settings offers to delete both, and deleting your account removes them permanently.

9. Round summaries and recaps

Separately from the chat, Teewise generates end-of-round summaries and recaps on our servers using OpenAI. These use your round data and, where it exists, your recent caddie conversation content, and they run as part of providing the app’s round features rather than under the caddie chat consent setting. They are covered by the same commitments described above: under our agreement with OpenAI, your data is not used to train models, and OpenAI’s abuse-monitoring retention is up to around 30 days.

10. Social features, blocking and reporting

When you use social features we store your friendships and friend requests, the users you block, and reports you make about other users or content: a reason category (such as harassment, hate speech, sexual content or self-harm) plus any description you add. Reports are kept even after the reporter’s or the reported user’s account is deleted, because they are needed to keep the community safe, but on deletion they are anonymised so they are no longer linked to the deleted account.

11. Premium subscriptions

Premium subscriptions are sold through the App Store or Google Play, and Apple or Google handle billing, renewal and cancellation under their own terms, including your card details, which we never see. We use RevenueCat to manage subscription status; RevenueCat identifies you only by your random Teewise account ID, not your name or email. We store your entitlement, product and billing period so the app knows what you have access to. Teewise never stores any card data for subscriptions.

12. Paying for a seat in a game (Stripe)

Some games let you pay for your seat. These payments are processed by Stripe in two steps: when you pay more than 72 hours before tee-off, Stripe places a hold (a card authorisation) on your card for the full amount, and your card is only actually charged at the refund deadline, 72 hours before tee-off; seats bought inside that window are charged straight away. If you cancel before the deadline, the hold is released and your card is never charged. When you start a checkout we give Stripe your email address, your Teewise account and slot identifiers, and a payment description that names the course. Your card details are entered in a secure payment sheet and go directly to Stripe. They never pass through or get stored on Teewise servers. In our own records we keep only: the amounts (in UAE dirhams, the only supported currency), the AED 10 booking fee where it applies (it is waived while you have an active Premium subscription), Stripe payment and refund identifiers, the refund deadline, timestamps for when you paid (that is, when the hold was placed), when your card was actually charged (the capture) and when any refund was made, the seat’s payment state (such as held, charged, released, charge failed or refunded), and, where a seat or game is cancelled, who cancelled and why. Because the charge happens at the deadline rather than at booking, the charge date in our payment and tax records is the capture date, not the date you paid for the seat. Teewise stores no card numbers anywhere. Refunds of charged amounts are returned by Stripe to your original card; a released hold was never charged, so there is nothing to refund. The rules on when a seat is held, charged, released or refunded are set out in our Terms & Conditions.

13. Course booking requests

If you ask our concierge team to book a tee time, we collect your contact name, a contact phone number (required so the course or our staff can reach you), your email address and current handicap (both saved as they were at the time of the request), your party size, any notes you add, and your requested dates and tee times. These details are shown to Teewise staff through a secure staff portal (hosted for us by Vercel) so they can arrange the booking and contact you, and they are passed on to the golf course you asked us to book. The course uses your details as an independent organisation under its own privacy practices, not on our instructions. Most partner courses are in the United Arab Emirates, so your booking details largely stay within the UAE. See the international transfers section below.

14. Push notifications and device information

To deliver notifications we store your push token, a random device identifier, your platform (iOS or Android), app version, language and timezone, and when the device was last seen. You control notification categories in Settings: marketing notifications are off by default and are only sent if you opt in, while a Payments and refunds category (on by default) covers activity on your paid seats: confirmations when a hold is placed on your card or released, reminders before and confirmation when your card is charged at the refund deadline, an alert if the charge fails and your seat is removed, and refund updates. We keep a log of the notifications we send you, including their content and delivery receipts, so we can troubleshoot delivery problems. Notifications are delivered through Expo’s push notification service.

15. Diagnostics, crash reports and feedback

To find and fix crashes we use Sentry. Crash reports identify you only by your random account ID. Your email is not sent to Sentry. Sentry also records session replays, which reconstruct how you moved through the app. These are not limited to sessions that go wrong: about 1 in 10 of all app sessions is recorded as a replay from start to finish, whether or not anything goes wrong. In sessions we are not already recording, your device keeps only a rolling buffer of roughly the last minute of activity, and that buffer is sent to Sentry if an error happens; recording may then continue for the rest of that session. In every replay, all text and all images are masked before anything leaves your device. When the app hits an error, a screenshot of the screen at that moment may also be attached to the crash report to help us reproduce the problem. Teewise contains no advertising SDKs and no cross-app tracking, and we do not track you across other companies’ apps or websites, which is why iOS never shows an App Tracking Transparency prompt for Teewise. If you send feedback in the app, we store where the feedback came from, its sentiment, your 1 to 5 rating, your comments, the related round if there is one, and your app version and platform. If you report a problem, we also store the category you choose and any screenshots you attach. Screenshots are kept in the same private storage area as your caddie chat images, can be viewed by Teewise staff so they can investigate, and are used only to diagnose the problem you reported. They are not sent to OpenAI. A screenshot captures whatever was on your screen, which can include other people’s names, avatars and scores, so please attach only what is needed to show the problem.

16. How we use your information and our lawful bases

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the PDPL, requires a legal basis for each use of your data. Ours are: (a) Your consent: the AI caddie chat and tips, matching your contacts to find friends, using your device location, and marketing notifications; where you choose to tell the caddie about your health, we rely on your explicit consent, reflecting the PDPL’s stricter treatment of sensitive data. (b) Necessity for the contract between you and us: creating and running your account, tracking rounds and stats, running multiplayer games, subscriptions, seat payments and refunds, booking requests, payment and refund notifications, and customer support. (c) Our legitimate interests: keeping the app secure, preventing fraud and abuse, acting on reports of harmful behaviour, diagnosing crashes, improving the app, matching hashed contact emails (including those of people who are not yet Teewise users) when a user runs the find-friends feature, generating round summaries and recaps as part of the service, and showing your profile, golf stats and completed rounds to other signed-in golfers as section 4 describes (you can hide your rounds in Settings). (d) Legal obligations: keeping an accounting record of the payments you make to us, for tax and accounting, and responding to lawful requests from authorities. Where we rely on legitimate interests, you can object. See the section on your rights.

17. Who we share your data with

We share data only with the providers we need to run Teewise, each limited to its role: Supabase (app hosting, authentication, database and file storage, hosted in the European Union (Ireland, AWS eu-west-1)); OpenAI (our only AI provider); Stripe (card payments for game seats); RevenueCat (subscription management); Apple and Google (sign-in and App Store or Google Play billing, under their own terms); Sentry (crash diagnostics); Resend (sending our account emails, such as password resets and email confirmations: it receives your email address and the contents of those messages); Expo (app updates and push notification delivery); Vercel (hosting for the secure staff portal used to manage booking requests); Apple Maps and Google Maps (map imagery for the GPS rangefinder: Apple on iOS, Google on Android); and Open-Meteo and MET Norway (weather: they receive only bare coordinates with no identifier attached). When you make a booking request, the golf course you choose receives your booking details and handles them as an independent controller. Our service providers are contractually bound to protect your data and use it only on our instructions. We do not sell your personal information, and we do not share it with advertisers or data brokers. Other Teewise golfers see the parts of your profile and rounds that section 4 describes.

18. International transfers

Teewise is established in the United Arab Emirates, and much of your data is processed outside the UAE by our service providers: Teewise data is hosted by Supabase in the European Union (Ireland, AWS eu-west-1), and OpenAI, Stripe, Sentry, RevenueCat, Expo, Vercel and Google process data in the United States. Our email provider, Resend, also handles the account emails we send you, your email address and the contents of those messages, outside the UAE. The UAE Personal Data Protection Law allows personal data to be transferred outside the UAE to jurisdictions that provide an adequate level of protection, or otherwise where appropriate safeguards are in place (such as contractual protections binding the recipient) or with your consent. For these transfers we rely on contractual safeguards in our agreements with each provider and, where a transfer is part of a feature you have chosen to switch on (such as the AI caddie), on your consent. By contrast, your golf-course booking details largely stay within the UAE: the partner courses you ask us to book are mostly UAE businesses. If Teewise is offered to users in the United Kingdom or the European Union, the UK GDPR or EU GDPR may also apply to how we handle those users’ data. You can ask for details of the transfer safeguards we use by emailing hello@teewisegolf.com.

19. How long we keep your data

We keep your data while your account is active, then delete it as described in the next section. Some specific rules apply: AI caddie conversations are summarised, and once a conversation has been summarised the raw chat is automatically deleted around 90 days after it was last active, except sessions you have pinned or reopened, which are kept until you delete them or your account. The caddie’s memory summary is kept until you clear it using the AI consent control in Settings or delete your account. Where you have paid us, we keep an accounting record of that payment for at least as long as the tax, accounting and commercial record-keeping obligations that apply to us in the United Arab Emirates require. That period is not counted from the date you booked: it runs from the end of the financial year in which the payment falls, and it runs on for longer while an audit, a dispute or a refund claim is still open. The length of it is set by UAE law rather than by us. The record is kept to the minimum needed for that purpose: the amount and the currency, the Teewise booking fee where one applied, the Stripe payment and refund references, the course and tee date the payment relates to, how many players and how many holes the booking covered, and the dates the hold was placed, your card was charged and any refund was made. For this record the charge date is the date your card was actually charged, the capture, which happens 72 hours before tee-off unless the seat was bought inside that window, not the date you booked. It carries no name, no email address and no phone number, it is held apart from your profile, and it does not depend on your account record: that is why deleting your account does not remove it, and why once your account is gone the record is no longer connected to any account. OpenAI may retain caddie inputs for up to around 30 days for abuse monitoring before deleting them. Sentry retains crash diagnostics and session replays for a limited period under its standard retention schedule. Backup copies of deleted data are purged within 30 days.

20. Deleting your account

You can permanently delete your account at any time in Settings → Delete account. After you re-confirm your identity, we delete your profile, rounds, games, friendships, caddie chats and caddie memory, your photos and chat images (both storage areas are wiped), your push tokens, and every other record linked to your account. Backup copies are removed within 30 days. Two narrow exceptions remain: safety reports are kept but permanently anonymised so they are no longer linked to you, and where you have paid us, the accounting record of that payment survives your account, without your name or contact details, because UAE tax and accounting law requires us to keep it, as described in the retention section. If you cannot access the app, email hello@teewisegolf.com and we will delete your account for you.

21. Your rights

Under the UAE Personal Data Protection Law you have the right to: access a copy of your data; correct it (in Settings → Edit profile and Settings → Skills Assessment, or by contacting us); delete it (in Settings → Delete account, or by contacting us); restrict or object to processing, including any processing based on our legitimate interests; receive the data you provided to us in a portable, machine-readable format; and withdraw any consent you have given, at any time. The app does not currently include a self-serve data export. To exercise your access or portability rights, email hello@teewisegolf.com and we will respond within one month. You can withdraw consent at any time: switch off the AI caddie in Settings (this clears your consent and offers to delete your caddie chats and memory), change location and contacts permissions in your device settings, and manage notification categories in Settings. Withdrawing consent does not affect processing that happened before you withdrew it. We do not make any decisions about you by purely automated means that have legal or similarly significant effects. The AI caddie only offers golf suggestions. If you are unhappy with how we handle your data, you have the right to complain to the UAE Data Office, the federal data protection authority of the United Arab Emirates. If you use Teewise in the United Kingdom or the European Union, you may also have rights under the UK GDPR or EU GDPR; we extend the rights described above to all our users, wherever they are.

22. Children and young people

Teewise is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has signed up, contact us and we will delete the account. The optional age range field in profiles no longer offers an ‘under 18’ option; where you gave us that answer while it was available we still hold it, but it is not used by any feature of the app and it is not shared with anyone outside the service providers listed in this policy.

23. Cookies, SDKs and tracking

Teewise is a native mobile app and does not use browser cookies. It contains no advertising SDKs and no tracking SDKs, and we never sell or share your data for advertising. The third-party software built into the app that touches your data is limited to: Supabase (accounts and data sync), Sentry (crash reporting), RevenueCat (subscriptions), Stripe (the payment sheet), Expo (app updates and notifications), Apple Maps and Google Maps (rangefinder map imagery), and the Apple and Google sign-in libraries. Each is used only for the purpose described in this policy.

24. Security and data breaches

We protect your data with row-level security rules that decide which records each account can reach: its own, and the parts of other golfers’ records this policy describes, such as their profiles, their completed rounds and the rounds of games you play together. We also use encryption in transit for all connections, encryption at rest by our hosting provider, private owner-only storage for chat images (except screenshots you attach to a problem report, which Teewise staff can view), and server-enforced consent checks for AI features. No system can be guaranteed to be completely secure. If a personal data breach occurs that is likely to put your privacy or the confidentiality of your data at risk, we will notify the UAE Data Office as the UAE Personal Data Protection Law requires, and if the risk to you is high we will tell you directly without undue delay.

25. Changes to this policy

We may update this policy to reflect new features or legal requirements. If we make a material change we will notify you in the app before or when the change takes effect. The ‘Last updated’ date at the top of this policy always reflects the most recent version, and you can request earlier versions by emailing hello@teewisegolf.com.