TapInStats — Privacy
Sign Up →

Privacy Policy

Last updated: April 2026

TapInStats is a personal golf statistics application. This policy explains what data we collect, how we use it, and your rights — including how to delete your account and all associated data.

Who we are

TapInStats is operated as a personal project. For questions about your data, contact us at privacy@tapinstats.com.

What data we collect

When you create an account and use TapInStats, we store the following data:

  • AccountEmail address and hashed password (managed by Supabase Auth).
  • ProfileDisplay name, benchmark level, unit preference, and feature flag settings.
  • RoundsGolf rounds you record: date, course, tee played, score, weather conditions, and per-round Strokes Gained totals.
  • ShotsShot-by-shot data for each round: lie, distance, club used, miss direction, result lie, and calculated Strokes Gained value.
  • ClubsYour bag of clubs with names, sort order, and typical carry distances.
  • Training sessionsPractice session logs including date, duration, environment, and activities (if training mode is enabled).
  • CoursesCourses you add to the shared database (name, location, tee distances). Course data is not personal and is shared with all users — it is not deleted when you delete your account.

How we use your data

All data you enter is used solely to power your personal golf statistics:

  • Calculating Strokes Gained across rounds and categories
  • Displaying trends, charts, and round summaries in your dashboard
  • Auto-suggesting distances during round entry based on club carry distances
  • Caching rounds locally on your device for offline use

We do not sell your data, share it with third parties, or use it for advertising.

Data storage and security

Your data is stored in a self-hosted PostgreSQL database on a private server. All access is protected by Row Level Security (RLS) — your rounds, shots, clubs, and training sessions are only accessible to your account. The database is not accessible from the public internet.

Authentication is handled by Supabase Auth. Passwords are hashed and never stored in plain text. Sessions use secure, HTTP-only cookies.

Third-party services

  • Supabase — database and authentication
  • Resend — transactional email (email verification, password reset)
  • Google / Facebook OAuth — optional sign-in (if used, we receive only your email and name)

Your rights

You have the right to:

  • Access all data stored against your account (visible within the app)
  • Correct inaccurate data (editable within the app)
  • Export your data (contact us if you need a data export)
  • Delete your account and all associated personal data at any time

How to delete your account and data

You can permanently delete your account and all personal data directly from the app:

  1. Go to Settings
  2. Scroll to the Danger Zone section
  3. Click Delete Account and confirm by typing the required phrase

This permanently and immediately deletes:

  • Your account credentials and profile
  • All rounds and shot data
  • All clubs
  • All training sessions

Courses you added remain in the shared course database (they are not personal data) but your name is removed from them.

If you are unable to access your account and need your data deleted, email privacy@tapinstats.com from the address associated with your account.

Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is deleted immediately and permanently. We do not keep backups of deleted user data.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of TapInStats after changes constitutes acceptance of the updated policy.