Privacy Policy

Mapraow Labs Pte. Ltd. · มีผลตั้งแต่: 26 May 2026 · อัปเดตล่าสุด: 26 May 2026

เอกสารนี้เป็นภาษาอังกฤษ และฉบับภาษาอังกฤษคือฉบับที่มีผลบังคับใช้

This privacy policy explains how Mapraow Labs Pte. Ltd. ("Cardie," "we," "us," or "our") collects, uses, stores, and protects your personal data when you use the Cardie mobile application ("the App"). This policy is written in English as the authoritative version. Translations are provided for convenience; in case of any conflict, this English version governs.

If you are located in China or Thailand, additional terms apply to you. Please see our regional addenda linked at the end of this policy.

1. Who We Are

Mapraow Labs Pte. Ltd. is a company incorporated in Singapore. We operate the Cardie mobile application, which allows golfers to scan physical scorecards, track rounds, maintain a handicap, and participate in competitions.

Contact: privacy@cardie.golf

2. What Data We Collect

2.1 Account Information

When you sign in using Apple Sign In or Google Sign In, we receive your name and email address from the identity provider. We do not collect or store passwords — authentication is handled entirely by Apple or Google.

2.2 Scorecard Photos

When you scan a scorecard, the photo is uploaded to our servers for processing. The image is used to extract scores and is retained as evidence supporting your round history and handicap calculation.

2.3 Golf Data

Hole-by-hole scores, putts, fairway hits, round summaries, handicap index, and competition results. This data is generated from scorecard scans and any manual edits you make.

2.4 Handicap Rating Basis

You may select whether your handicap is calculated using men's or women's course ratings and slope values, as defined by the World Handicap System. This is a functional setting that determines which rating table is applied to your handicap calculation. It is stored on your profile and is visible to other users in your groups as a small badge on your avatar. You can change this setting at any time in the App. If you do not set a preference, men's ratings are used by default.

2.5 Location Data (Optional)

If you grant permission, we collect your device location when you scan a scorecard. This is used to identify the golf course and retrieve weather conditions for your round summary. Location data is not collected in the background — only at the moment of a scan and only if you have enabled this feature. You can use Cardie fully without sharing your location; you will simply be asked to select your course manually instead.

2.6 Device and Service Reliability Information

We collect basic device information including device model, operating system version, app version, and language setting. This is used for app functionality, debugging, and ensuring compatibility.

We also collect anonymous service reliability events to monitor the health and performance of the App. These events include:

Crash reports — When the App crashes, we record the app version, operating system, device model, and a technical summary of the error.
Scorecard processing outcomes — Whether scorecard image processing succeeded or failed, processing time, and which processing provider was used.
Upload outcomes — Whether photo uploads succeeded or failed, and at which processing stage.

Service reliability events contain no user identifier, device identifier, or session identifier. They cannot be linked to your account or to your device and are used solely to maintain a reliable service. This data is collected automatically regardless of your analytics preference.

2.7 Usage Analytics (Optional)

If you consent, we collect usage data to understand how the App is used and to improve the experience. No analytics data is collected unless you opt in. When enabled, analytics includes:

Screen views — Which screens you visit and how you navigate the App.
App sessions — When you open and use the App, including session duration derived from event timestamps. Sessions are identified by a rotating session identifier that resets after 30 minutes of inactivity.
Product interactions — Actions such as reacting to a round, joining or leaving a group, creating an event, searching for a course, or uploading a course photo. For course searches, we record the length of your query but never the query text itself.
Device identifier — A randomly generated anonymous identifier stored on your device, used to correlate analytics events across sessions (including before you sign in). This identifier is not linked to your Apple or Google account and cannot be used to identify you personally. It persists across app relaunches and, where the device Keychain is available, across reinstalls.

Analytics data is processed by our self-hosted PostHog instance in Singapore — your analytics data does not leave our infrastructure. We do not use analytics to build individual behavioral profiles or to target you with advertising.

2.8 Community and Social Data

When you use Cardie's community features, we collect and process additional data:

Group membership — Which groups you belong to and your role within them.
Event participation — Events you join or create, and scores you submit to events.
Course contributions — Course data you add to the Cardie community database, including course name, pars, stroke indexes, tee information, and slope and rating data scanned from course materials. Course photos submitted by Premium users.
Rounds shared with groups — When you scan a round, it may be visible to members of your groups, subject to your privacy controls.
Notification preferences — Your per-group and global notification settings.

2.9 Social Interactions

When you or other users interact with rounds through the App's social features:

Reactions — When you react to another user's round with an emoji, we record which reaction you chose, the round you reacted to, and when.
Views — When you view another user's round, we record that you viewed it and when. The round owner can see how many people viewed their round; Premium owners can see the identities of viewers and reactors. Other users cannot see who viewed or reacted to a round that is not theirs.
Invitations — When a group admin invites a user, the inviter's identity is recorded and shown to the invitee.

2.10 Subscription Information

If you subscribe to Cardie Premium, your subscription status is managed through RevenueCat, which communicates with Apple App Store or Google Play. We receive your subscription status (active, expired, trial) but we do not receive or store your payment card details, bank information, or billing address. All payment processing is handled by Apple or Google.

3. Why We Collect Your Data

We process your personal data on the following legal bases:

Performance of contract — Account information, scorecard photos, golf data, and your rating basis preference are necessary to provide the core service: scanning scorecards, maintaining your round history, and calculating your handicap.

Consent — Location data and usage analytics are only collected with your explicit, opt-in consent. You can withdraw consent at any time in the App's privacy settings without affecting your ability to use the core service.

Legitimate interest — Device information and anonymous service reliability data are collected to maintain app functionality, monitor service health, fix bugs, and ensure security. Social interaction data (views and reactions) is processed as part of the community features you actively use. We have assessed that these interests do not override your rights, given the limited and non-identifying nature of this data and the controls available to you.

4. How We Use Your Data

We use your data for the following purposes:

Extracting scores from scorecard photos using automated image recognition
Building and maintaining your round history, statistics, and handicap index
Applying the correct course ratings (men's or women's) to your handicap calculation based on your selected rating basis
Generating shareable round summaries, including AI-generated narrative recaps of your rounds
Operating groups and events, including displaying your rounds, scores, statistics, handicap, and rating basis badge to group members and event participants
Recording and displaying social interactions (reactions and views) on rounds shared within groups
Maintaining the community course database with course data contributed by users
Generating aggregated community statistics and Cardie ratings for golf courses based on all users' rounds
Sending push notifications about group activity, event updates, leaderboard changes, reactions to your rounds, and when your rounds are attracting views, subject to your notification preferences
Identifying your golf course and retrieving weather data (if location is enabled)
Managing your subscription
Improving the App based on aggregate usage patterns (if analytics is enabled)
Communicating service updates and important account notifications
Monitoring the reliability and performance of the App, including crash rates, scorecard processing health, and upload success rates
Maintaining the security and integrity of the service

We do not use your data for advertising, profiling for marketing purposes, or selling to third parties.

5. Who We Share Your Data With

We share your data only with the service providers necessary to operate the App:

Supabase Pte. Ltd. (Singapore) — Backend infrastructure, database, user authentication, and file storage. Supabase hosts your account data, golf data, and scorecard photos.

Amazon Web Services (AWS) (Singapore region) — Storage of scorecard images used for improving our scorecard recognition accuracy. Images stored here are used for training and quality assurance of our recognition system.

PostHog (self-hosted, Singapore) — Usage analytics and service reliability monitoring. Opt-in usage analytics are processed through PostHog to help us understand how the App is used. Anonymous service reliability data (see Section 2.6) is also processed through PostHog to monitor service health; this data contains no user identifiers.

RevenueCat, Inc. (United States) — Subscription management. RevenueCat receives your anonymous user identifier and subscription status from Apple or Google to manage your premium subscription.

LLM Providers (currently Anthropic, Google, and OpenAI; United States) — Scorecard image processing and round narrative generation. When you scan a scorecard, the image is sent to a large language model provider via API for text and score extraction. Round narratives (short AI-generated recaps) are also generated via these providers using your round statistics — no personally identifying information is included in narrative requests. Content is processed and not retained by the provider beyond the processing request. We use each provider's API, which is contractually prohibited from using your data for model training. We may change providers; this policy will be updated to reflect current providers.

Apple Inc. / Google LLC — Authentication (Sign In) and payment processing (In-App Purchases). These providers handle your sign-in credentials and payment information directly. We do not receive your payment details.

Data Visible to Other Cardie Users

In addition to the service providers listed above, certain data is visible to other Cardie users through the App's community features:

Group members can see your rounds, scores, statistics, handicap index, rating basis badge, and Premium status badge if you are in a shared group. You can exclude individual rounds from group visibility using the exclude toggle, and you can control per-group whether your activity is shared. You can leave a group at any time.
Reactions and views — When you react to a round, your reaction (emoji type) and identity are visible to the round owner and to other members who can see that round. When you view a round, the owner can see a count of views; Premium owners can see who viewed their round. Reaction counts (without identities) are visible to all group members who can see the round.
Event participants can see your name, scores, handicap (if applicable), rating basis, and scanned scorecard image when you submit a round to an event.
All Cardie users can see course data you contribute (course name, pars, stroke indexes, tee information, slope and rating data) and course photos submitted by Premium users.
Community statistics (Cardie ratings, per-course averages) are derived from all users' rounds at a course. These statistics are aggregated and not individually attributed — no user can see another user's individual contribution to community statistics.

We do not sell your personal data. We do not share your data with advertisers. We will disclose data to law enforcement only when required by a valid legal order.

6. Where Your Data Is Stored

Your data is stored and processed in Singapore. Our backend infrastructure (Supabase), production file storage (Supabase Storage), training data storage (AWS S3), and analytics (PostHog) are all hosted in Singapore.

RevenueCat processes subscription data in the United States. This transfer is covered by contractual safeguards.

If you are located in the European Economic Area (EEA) or the United Kingdom, the transfer of your data to Singapore is protected by Standard Contractual Clauses (SCCs) as approved by the European Commission. You may request a copy of the relevant safeguards by contacting us at privacy@cardie.golf.

If you are located in China or Thailand, please refer to the relevant regional addendum for specific information about cross-border data transfer safeguards.

7. How Long We Keep Your Data

We retain your data for as long as your account is active. Your accumulated round history, statistics, and handicap are the core value of the service, and we keep this data so you can access and build on it over time.

If you request account deletion: Your account enters a 30-day grace period during which it is deactivated and your data is not accessible to other users. If you sign back in during this period, the deletion is automatically cancelled and your account is fully restored. After 30 days without reactivation, your personal data and scorecard images are permanently deleted.

Anonymized data: After account deletion, we may retain anonymized, aggregated data (such as course scoring averages and community statistics) that cannot be linked back to you. This data is used to improve the service for all users.

Community course data: Course data you contributed (course name, pars, stroke indexes, tee information, slope and rating data) is factual information about golf courses and is retained in the community database after account deletion. This data is not personal data and is not linked to your identity.

Backup retention: Backup copies of your data may persist in our backup systems for up to 90 days after deletion, after which they are automatically purged.

8. Your Rights

Depending on where you are located, you have some or all of the following rights regarding your personal data:

Access — You can request a copy of the personal data we hold about you.

Correction — You can request that we correct inaccurate data.

Deletion — You can request that we delete your personal data. You can do this directly in the App under account settings, or by contacting us. A 30-day grace period applies during which you can cancel the deletion by signing back in.

Data portability — You can request a copy of your data in a structured, commonly used format. Use the "Request my data" feature in the App.

Withdraw consent — You can withdraw consent for optional data collection (location, analytics) at any time in the App's privacy settings.

Object — You can object to processing based on legitimate interest.

Complaint — You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, use the relevant feature in the App or contact us at privacy@cardie.golf. We will respond within 30 days.

9. Children and Minors

Cardie is intended for users aged 16 and older. By signing in with Apple or Google, you confirm that you are at least 16 years of age.

We do not knowingly collect personal data from anyone under 16. If we become aware that a user is under 16, we will delete their account and all associated data promptly.

10. Analytics and Tracking

Service Reliability Monitoring

We collect anonymous service reliability data (see Section 2.6) to monitor the health of the App — for example, crash rates by app version and scorecard processing success rates. This data contains no user identifier, device identifier, or session identifier and is collected automatically. It is processed by our self-hosted PostHog instance in Singapore and does not leave our infrastructure.

Usage Analytics (Optional)

We also use PostHog for opt-in usage analytics. Usage analytics are entirely optional. You choose whether to enable analytics during onboarding, and you can change this at any time in the App's privacy settings. If you do not opt in, no usage analytics data is collected or transmitted.

When enabled, PostHog collects information about how you interact with the App — see Section 2.7 for details. This data is used in aggregate to improve the App. We do not use analytics to build individual behavioral profiles or to target you with advertising.

A persistent anonymous device identifier is used to group usage analytics events across sessions. This identifier is randomly generated, stored locally on your device, and is not derived from any hardware identifier or linked to your Apple or Google account. It is only transmitted when usage analytics is enabled.

The App does not use cookies. As a native mobile application, Cardie does not place cookies on your device.

11. Data Security

We take reasonable technical and organizational measures to protect your personal data, including:

Encryption of data in transit (TLS/SSL) and at rest
Authentication through established providers (Apple, Google) rather than storing passwords
Row-level security on our database, ensuring users can only access their own data and data explicitly shared with them through groups and events
Access controls limiting which team members and systems can access personal data
Regular security reviews of our infrastructure and third-party providers

No system is completely secure. If we become aware of a data breach that is likely to result in a risk to your rights, we will notify affected users and relevant authorities within 72 hours, in accordance with applicable law.

12. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you through the App before the changes take effect. The App may require you to review and acknowledge material changes before continuing to use the service.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Regional Addenda

If you are located in the following jurisdictions, additional terms apply:

China — See the China (PIPL) Addendum for information about cross-border data transfers, your additional rights under the Personal Information Protection Law, and how to contact our representative.
Thailand — See the Thailand (PDPA) Addendum for information about your rights under the Personal Data Protection Act and cross-border transfer safeguards.

14. Contact Us

If you have questions about this privacy policy or how we handle your data:

Email: privacy@cardie.golf

Entity: Mapraow Labs Pte. Ltd., Singapore

This document is the authoritative English version. Translations into other languages are provided for convenience only.