This Privacy Policy explains what information Eagle Clubhouse (“we,” “us,” or “our”) collects, how we use and share it, and the choices you have. It applies to the Eagle Clubhouse mobile and web applications and related services (the “Service”). By using the Service you agree to this Policy. We do not sell your personal information.

We collect the following, mostly information you provide directly:

• Account & sign-in. Your email address and password, or, if you use Google Sign-In, the basic profile information Google shares with us (name, email, and profile photo). Passwords are handled by our authentication provider and we never see them in plain text.
• Profile. Your display name, username, optional avatar (a photo you upload or an icon and color you choose), and details you add such as a bio, handicap, and the clubs in your bag.
• Content you create. Course and club reviews and ratings, round logs, photos, messages you send, your friends and circles, anyone you have blocked, and marketplace (Pro Shop) listings — including a listing’s title, description, price, condition, and the city/state you choose to show.
• Precise location. With your permission, we use your device’s location to show nearby courses and listings, calculate distances, and fetch local weather. We use it in real time and do not build a history of your movements. If you log a round using GPS verification, we store the coordinates of that one check alongside the round as evidence you were there.
• Push notification tokens. In the mobile apps, a device token so we can deliver notifications you’ve enabled.
• Pre-release access. If you join during our invite-only period, your email and any invite code or waitlist details.
• Usage & product analytics. Standard technical information such as IP address, device and browser type, and log data. We also record which screens you open and what you do — for example that you viewed a club, submitted a review, logged a round, sent a friend request, or sent a message — along with the search terms you type, lowercased and shortened to 64 characters. Page addresses are recorded in a generic form — a profile you view is recorded as /u/[handle], not as that person’s username. Once you’re signed in, these events are linked to your account so we can understand how the Service is used over time; anything you do before you sign up or sign in — for example while browsing before creating an account — is instead collected under a temporary, anonymous device identifier that is not tied to your name or account. They never include the text of your messages, reviews, or listings, and never your precise location.
• Error diagnostics. When something goes wrong in the app, we record the technical details of the failure — the type of error, a short description of it, and the part of our code it came from — so we can find and fix it. These reports are scrubbed before they are sent: email addresses, web addresses, account identifiers and long numbers are replaced with placeholders, and the screen you were on is recorded in the same generic form as above. They are covered by the Share usage analytics setting — turn it off and no error reports are sent either.

We use your information to:

• Provide and operate the Service — your account, profile, social graph, course discovery, passport, messaging, and marketplace;
• Show you relevant nearby content, distances, and local weather;
• Send notifications you have enabled (new messages, mentions, friend requests) and important service messages;
• Keep the Service safe — preventing spam, fraud, and abuse, and moderating content;
• Understand and improve the Service — which features get used, where people get stuck, and whether new members come back; and
• Comply with legal obligations.

We do not sell your personal information. We share it only with service providers that help us run the Service, and only as needed for them to perform their function:

• Supabase — our database, authentication, file storage, and backend functions; this is where your account and content are stored.
• Vercel — web hosting.
• PostHog (US Cloud) — product analytics; it receives your usage events and your account identifier. It does not receive your name, username, email address, password, or the text of your messages, reviews, or listings.
• Google — Google Sign-In (if you use it) and Google Places/Maps data that powers course and place information.
• Open-Meteo — weather data; it receives approximate location coordinates to return local conditions.
• Expo, Apple Push Notification service, and Firebase Cloud Messaging — to deliver push notifications to your device.
• Map providers — to render maps.

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer. Content you choose to make public — such as reviews, your public profile, and marketplace listings — is visible to other users.

We use essential cookies and similar first-party storage to keep you signed in, to operate the Service, and to recognize your device across analytics events. Product analytics run on PostHog (US Cloud); once you’re signed in, events are linked to your account rather than counted anonymously, and anything recorded before that point is tied only to an anonymous device identifier.

We keep this deliberately narrow. We do not record your screen or your session, we do not automatically capture your clicks or the text on the page, we do not use third-party advertising cookies, and we do not sell your data or share it for advertising.

You can turn product analytics off at any time with the Share usage analytics toggle in Passport → Edit profile. On the web we also honor the Global Privacy Control signal — if your browser sends it, we stop sending analytics events whether or not that toggle is on. Essential cookies that keep you signed in stay either way.

We keep your information while your account is active. You can delete your account at any time from Passport → Edit profile → Delete account. Deleting your account permanently removes your account and associated data, including photos you uploaded. Some information may persist for a limited time in routine backups, and we may retain aggregate or de-identified data that no longer identifies you. You can also email us to request deletion. See Delete Your Account for step-by-step instructions and details on what is deleted or kept.

Analytics events are kept for up to twelve months and are then deleted automatically, whether or not you delete your account.

Deleting your account also deletes your analytics profile: we ask PostHog to remove the person record and the events recorded against it. The profile is removed promptly, but PostHog clears the underlying events on a weekly cycle, so those can take up to about a week to disappear.

You can access and update most of your information directly in the app — edit your profile, delete individual content, manage notification preferences, and delete your account. You can turn off location and push permissions in your device settings at any time.

To stop product analytics, turn off Share usage analytics in Passport → Edit profile. On the web you can also enable Global Privacy Control in your browser, which we honor.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of the “sale” or “sharing” of it. We do not sell your personal information. California residents have these rights under the CCPA/CPRA and will not be discriminated against for exercising them. To make a request, contact us using the details below.

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls through our providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is intended for people aged 13 and older, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.

The Service is currently offered in the United States, and your information — including product analytics, processed by PostHog — is processed in the United States. By using the Service you understand your information will be handled as described in this Policy.

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

Questions or requests about your privacy? Contact us at support@eagleclubhouse.com.