Privacy Policy
Effective May 7, 2026
This Privacy Policy describes how mashie (“we”, “us”) collects, uses, and shares information about you when you use mashieapp.com and the mashie web app (collectively, the “Service”).
What we collect
- Account information. When you sign up, we collect your name, email address, password (stored hashed, never in plaintext), and golf handicap.
- Subscription information. If you subscribe, our payment processor Stripe collects your payment method and billing address. We never receive or store your full card number; we receive a customer ID and a redacted card summary (last 4 digits, expiration) from Stripe.
- Usage data. Rounds you create, players and courses you add, scores you enter, and bet configurations you set up are stored on our servers so the app works across your devices.
- Technical data. Standard server logs may capture your IP address, browser, device type, and the pages you visit, used for security and debugging.
How we use it
- To operate the Service — show your rounds, calculate bet payouts, sync across devices.
- To process subscription payments and manage your trial via Stripe.
- To send transactional emails: account confirmation, password resets, trial-ending notices, and payment receipts. We do not send marketing emails without your consent.
- To detect and prevent abuse or violations of our Terms.
How we share it
We share information only with service providers who help us run the app, under contractual obligation to protect it:
- Stripe — payment processing
- Vercel — application hosting
- Neon — database hosting
- GolfCourseAPI — course data lookups (we send only the course query string, never your account info)
We do not sell your personal information. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of mashie, our users, or the public.
Friends added as guests
When you add a friend to your roster (with their name, optional email, and handicap), that information is stored under your account and visible only to you. We do not contact guests on your behalf.
Your choices
- You can edit or delete your account, friends, courses, and rounds at any time from within the app.
- You can cancel your subscription at any time from your profile (Manage Subscription) or by contacting us.
- Account deletion permanently removes your data from our active database within 30 days. Backups roll off within 90 days.
Cookies
We use a single first-party authentication cookie to keep you signed in. We do not currently use third-party advertising or tracking cookies.
Security
We use TLS for all data in transit and industry-standard encryption at rest via our hosting providers. Passwords are hashed with bcrypt. No system is perfectly secure, and we cannot guarantee absolute security.
Children
mashie is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via a prominent notice in the Service before the changes take effect. Continued use after the effective date constitutes acceptance.
Contact
Questions or requests: hello@mashieapp.com.