Who we are
Fairway Social is operated from Queensland, Australia by Todd Cogill. This policy covers the website at fairwaysocial.au and the Fairway Social iOS app, which is the same service in an app window. For anything on this page, including access, correction and deletion requests, write to privacy@fairwaysocial.au.
Who controls club information
A club organiser decides which members, contact details, handicaps, events and scores are entered into their club. They must have authority to provide and manage that information, tell their members how the club uses it, and keep share links and organiser credentials appropriately restricted. Fairway Social stores and processes it on the club's behalf.
Information we hold
For a club: club settings, member names and optional email addresses, club-use handicap information, tee data, seasons, events, RSVPs, scores and security audit records. For a Player Passport: an independent profile, club-profile links, personal tee cards, private rounds, hole scores, bag specifications, handicap provenance, and shot coordinates entered by hand or captured through device geolocation. Limited technical records are kept to protect the service from abuse. Rate-limit records are operational security data and are not included in club exports.
Location
Location is used for one thing: showing distances while you play, and recording the positions of shots you choose to record. It is collected only in the foreground, only after you press Start with the round open, and it stops when you stop or leave the page. There is no background location. Continuous samples are not stored — what is kept is the shot positions that end up in your own private record. There is no tracking of you across other apps or websites, and location is never shared with an advertiser or data broker.
What we use it for
Running the club's clubhouse, calculating Stableford and season results, producing a player's own private statistics, providing support, and securing the service. A member share link exposes appropriate club information to whoever holds that link; member email addresses, private Passport records and organiser credentials are not shown in the normal member view. Recent-form and Fairway Plus analysis is computed from that player's own recorded cards on our own servers. No round, score or note is sent to an external model provider.
Who else receives information
We do not sell personal information and we do not share it for advertising. A small number of providers process it so the service can run:
Cloudflare hosts the application and database and routes mail sent to our addresses. Resend, which delivers through Amazon SES, sends sign-in links and notification email. Stripe takes payments on its own hosted page: card details are entered with Stripe, never with us, and we never see or store them. Esri supplies the satellite imagery used behind the hole maps, so opening a map means your device requests image tiles from Esri, which necessarily reveals your network address and the tiles you looked at; the golf-hole shapes themselves come from OpenStreetMap contributors and are served by us. If push notifications are enabled in a future release, Google's Firebase Cloud Messaging would deliver them.
We may also disclose information where the law requires it, or to protect the service and its users from abuse.
What we do not do
There are no advertising SDKs and no third-party analytics in this product. Nothing you do here is tracked across other companies' apps or websites, and no identifier is shared for that purpose. There is no in-app purchase: Fairway Plus and club plans are bought on the website.
Launch-monitor sessions and screen photos
A launch-monitor session can be brought into your bag two ways, and neither sends anything to a third party. An exported session file is read in your browser; only the per-club distances you confirm are saved. A photograph of a simulator's club-averages screen is read by text recognition that runs entirely on your own device — the image is never uploaded, never stored by us, and is discarded once the numbers are extracted. What is saved is the table of distances you reviewed and approved, labelled with how it was captured so a photographed reading is never mistaken for a measured one.
Player Passport and Fairway Plus
Passport access is passwordless — a passkey held by your device, or a single-use link sent to your email address. The account belongs to you, may exist without any club, and may link matching roster profiles from more than one club. Associating a private round with a club adds a private label only: it does not enter a competition, publish a scorecard, award points, or expose your notes or GPS to the club. Plus entitlement records hold the plan, the expiry and a non-secret operator reference. Handicap connections and imports carry an explicit verification state and are never described as official when no authorised provider is configured.
Keeping it safe
Traffic is encrypted in transit. Sign-in links and session tokens are stored only as hashes, are single-use where the design allows, and expire. Organiser credentials are hashed. Sign-in attempts are rate limited. No method is perfect, and we do not claim otherwise; if a breach ever affects you we will tell you and the relevant Australian authority as the law requires.
Retention, deletion and export
Club data is retained while the club remains active, and for a reasonable period afterwards for support, security and legal obligations. An authorised organiser can download the club's JSON export from club Settings. A signed-in player can export their Passport JSON with provenance, and can delete an individual private round, personal course, shot or bag club; deactivate a bag club; unlink a club profile; or permanently delete their Passport account from Settings → Account (step by step: Delete your account). Deleting a bag club preserves shot history by clearing the reference, and deleting a personal course preserves rounds the same way. Unlinking and account deletion preserve club-owned roster, competition, score and history records, which belong to the club. Account deletion removes the email-based identity, personal records, sessions, sign-in tokens, entitlement history and any named account-based club role. Exports exclude sessions, sign-in tokens and rate-limit security records.
Children
Fairway Social is built for adults running and playing in social golf clubs, and is not directed at children under 13. We do not knowingly collect their information. A junior member may appear on a club roster because their club entered them; that is the club's decision and the organiser is responsible for having the right to do it. Write to us and we will remove information about a child.
Your choices and requests
You can ask us what we hold about you, and ask for its correction or deletion, and you can complain if you think we have handled it badly. Players control their own Passport records directly in Settings. For club-held information, your organiser controls what the club entered, so ask them first — but you can always come to us at privacy@fairwaysocial.au and we will help. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner.
Changes
If this policy changes in a way that matters, the effective date below changes with it and material changes are announced in the app. Continuing to use the service after that means the new version applies.
Effective 16 September 2026.