Legal

Privacy Policy

How Gimmi collects, uses and protects the data your society, its members and its scores depend on.

Last updated 22 July 2026
Legal review required
This Privacy Policy describes Gimmi's data handling in plain terms and is intended as a production-ready starting point. It has not yet been reviewed by a qualified data protection or legal professional and should be before wider public launch.

Overview

Gimmi is a platform for running golf societies - events, live scoring, Ryder Cups and the public website that comes with each society. This policy explains what information we collect to make that work, how it's used, and the choices you have over it.

Accounts

We collect the information needed to create and secure your account:

  • Name and email address, used for sign-in and account recovery.
  • A profile photo and handicap index, where you choose to add them.
  • Authentication is handled by Supabase; we do not store your password ourselves.

Society data

When you create or join a society, we store the information needed to run it: society name and branding, membership list, roles (owner, organiser, member), invite codes, and any wallet balances or entry-fee records an organiser tracks for that society.

Society organisers can see membership and wallet data for their own society. Gimmi staff access this data only to provide support or maintain the service.

Scores & competitions

Round scores, match results, Ryder Cup fixtures and Order of Merit standings are stored against your account and the society you recorded them for. Where a society or event is made public, its fixtures, results and leaderboard are visible to anyone with the link - this is a deliberate feature of Gimmi's public pages, not incidental exposure, and organisers control whether an event is public or members-only.

Cookies

Gimmi uses a small number of cookies and similar browser storage to keep you signed in, remember your privacy choice, and (only if you allow it) remember your preferences or record analytics. On your first visit you’ll see a banner asking you to accept all, reject non-essential technologies, or choose your own preferences - you can change that choice at any time via the Cookie settings link in the site footer. Full detail on every category and what each one does is covered in our Cookie Policy.

Analytics

If you allow Analytics in the cookie banner or Cookie settings, we record basic product usage events - such as an event being created, a public page being viewed, or a score being submitted - to understand which parts of Gimmi are actually used and where organisers get stuck. These events are tied to your account or society, not sold or shared for advertising, and are used only to improve the product. Without that consent, no usage events are recorded for you.

Email

We send account-related email - invitations, password resets, and (where enabled) event or results notifications. We do not send marketing email you haven't asked for.

Data retention

We retain account, society and scoring data for as long as your account remains active, so that historical results, Order of Merit standings and season records stay intact for your society.

Legal review required
Specific retention periods for closed accounts and deleted societies - and the process for responding to a deletion request within a defined timeframe - should be confirmed with legal advice before public launch.

Third parties

Gimmi relies on a small number of trusted infrastructure providers to operate:

  • Supabase - authentication and database hosting.
  • Vercel - application hosting.
  • Sentry - error and performance monitoring, so we can find and fix bugs. Configured not to collect your IP address or other identifying details by default.
  • Resend - sends transactional email on our behalf (invitations, notifications, password resets).
  • Stripe - processes payments for paid plans. Stripe, not Gimmi, handles your card details directly.
  • A web push provider, for optional browser notifications you explicitly enable.

None of these providers are permitted to use your data for their own purposes.

Your rights

You can request access to, correction of, or deletion of your personal data by contacting us. Depending on your location, you may have additional rights under data protection law.

Legal review required
The specific rights that apply (for example under UK GDPR or other regional law), and the formal process for exercising them, should be confirmed with legal advice before public launch.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page and, where appropriate, let organisers know directly.

Contact

For privacy-related questions or requests, contact us at:

hello@gimmi.golf