Two Down

• Account & contact info — your name, and your mobile phone number and/or email address, when you claim a round or create an account. You can sign in with either; you may link both to one account.
• Golf data — scores, handicaps, courses, formats, and the friendly wagers you enter during a round.
• Scorecard photos — if you scan a scorecard, the photo is sent to our AI provider to read the card, and the numbers it returns are saved to our shared course library. We do not keep the photo.
• Location — only if you turn on the yardage feature, and only while you are on a hole. See “Location” below.
• Payment info — if you buy a Trip Pass, our payment processor (Stripe) collects and processes your card details. We never see or store your card number; we store only that the purchase happened.
• Usage data — product analytics about how the app is used (pages viewed, features tapped) via PostHog, plus standard server logs. Player names are stripped from page addresses before they are sent.

The yardage feature uses your phone’s location to measure how far you are from the green. Your browser asks your permission first, and you can decline or revoke it at any time in your device settings — the rest of the app works without it.

Your position stays on your phone. The distance is calculated in your browser against green coordinates we already store for the course. We do not send your position to our servers and we do not store it. Elevation and wind adjustments are looked up for the course’s location, not yours.

Two Down is a group app, so some of what you enter is visible to others by design:

• A round is shared by link.Anyone with a round’s share code can watch it live and see the players, scores, and results on that round. Codes are not listed publicly, but they are not secret — treat a round link like a group text.
• Claimed profiles are public. Once you claim your rounds, your stats page and your place on the clubhouse leaderboard can be viewed by anyone who knows your name.
• Dollar amounts are private by default. Your career winnings and losses are hidden from everyone but you unless you turn on money sharing in your settings. Public surfaces show a rating, never a dollar figure.
• If you never claim your rounds, we do not store your name with your stats — only a scrambled, non-reversible version of it, so your history can be matched to you if you claim it later.

If you provide your mobile number in the app, we send you a one-time passcode (OTP) by SMS to verify your identity and log you in. These are transactional account-verification messages.

Consent. You opt in by entering your own mobile number in the Two Down app and requesting a code. We only text numbers that are entered directly by their owner in the app.

Message frequency. Message frequency varies — you generally receive one message each time you request a login or verification code.

Message and data rates may apply. Standard message and data rates from your mobile carrier may apply to messages you receive.

Opt-out and help. Reply STOP to any message to opt out of further texts. Reply HELP for assistance, or contact us at support@gettwodown.com.

We do not sell, rent, or share your mobile phone number or SMS opt-in consent with any third parties for their own marketing purposes. Mobile opt-in data is never shared with third parties for marketing.

• To verify your identity and provide account access.
• To save your rounds, scores, and stats so you can see them later.
• To operate, maintain, and improve the service.

We share information only with the service providers who help us run Two Down. They process data on our behalf and are not permitted to use it for their own purposes:

• Supabase — database and sign-in (your account, rounds, and stats).
• Twilio — delivers the SMS verification code.
• Resend — delivers email (sign-in links, itineraries you choose to send).
• Anthropic — reads scanned scorecard photos and drafts trip suggestions.
• Stripe — processes Trip Pass payments.
• PostHog — product analytics.
• Vercel — hosting and server logs.

We do not sell or share your personal information, and we do not use it for advertising or let anyone else do so.

We use a small number of cookies and similar browser storage to keep you signed in, remember your settings and the round you are in the middle of, and measure how the app is used. We do not use advertising cookies, we do not run ads, and we do not let anyone track you across other websites.

Our usage measurement is done with PostHog, which records things like which pages were opened and which features were tapped. Player names are stripped out of page addresses before they are sent. You can block or clear cookies in your browser at any time; scoring a round works without them, though staying signed in will not.

If you buy a Trip Pass or a premium subscription, Stripecollects and processes your card details directly. We never see or store your full card number — we store only the fact that the purchase happened, so we know what you have access to. Stripe handles that information under its own privacy policy.

Rounds are a permanent record.A scorecard is history — the whole point is that last summer’s skins are still there next summer — so we keep rounds, career totals and ratings indefinitely rather than deleting them on a timer. Your account details we keep while the account exists. If you want something removed, see “Your choices” below.

We use reasonable technical and organizational measures to protect all of it. No method of transmission or storage is completely secure.

• Opt out of texts at any time by replying STOP.
• Turn location off in your device settings — the app still keeps score.
• Keep your dollar amounts private (the default), or share them, from your stats page.
• Remove a round from your totalsif the app scored it wrong — a typo on the card, the wrong format, a bug. It is a correction tool rather than a delete button: the round stays as the host’s record of their own game and keeps backing the share link they sent round, but it comes off your history and your name comes off it. One thing it does not undo — the round has already moved your rating, and that number is not recalculated.
• Request access to, or deletion of, your account information by emailing support@gettwodown.com. Wherever you live, we honor requests to know, correct, delete, or get a copy of your data, and we will not treat you differently for asking. One limit, and it is the same one as above: a round is a shared record.Deleting your account removes your account details and takes your name off the rounds you played. It does not erase those rounds from the other players who were in them — their card of that day is theirs, and the host’s record of their own game stays intact. Ratings those rounds already moved are not recalculated.

Two Down is intended for adults and is not directed to children under 13.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about this policy? Email us at support@gettwodown.com.