Privacy Policy

Effective March 9, 2026

PinWeather ("we," "us," or "our") operates the PinWeather website at pinweather.com and the PinWeather mobile application (collectively, the "Service"). This Privacy Policy explains what personal information we collect, how we collect it, how we use and share it, how long we keep it, and your rights and choices regarding your data.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect and How We Collect It

Information you provide directly

Account information. When you create an account using email and password, Google Sign-In, or Sign in with Apple, we collect your email address and display name. If you sign in with Google or Apple, we receive only the basic profile information you authorize those services to share (typically name, email, and avatar URL).

Player profile data. You may optionally provide your handicap index, home golf course, ball type, and club data (ball speed, spin rate, launch angle, carry distance). This data is used solely to personalize shot-impact calculations within the Service.

Information collected automatically

Location data. When you use the Service, we may request access to your device's location to show weather for nearby courses and to power the wind compass feature. Your coordinates (latitude and longitude) are sent directly to our weather data providers to retrieve forecasts. We do not store your precise location on our servers.

Course pins. When you save ("pin") a golf course, we store the course name, location, and coordinates in your account so they sync across your devices.

Usage data. We collect anonymous, aggregated analytics data (such as page views, feature usage, and app performance metrics) to help us improve the Service. We do not use this data to track you across other websites or apps.

Information collected by payment processors

Payment information. Payments are processed by Stripe (web), Apple (iOS), and Google (Android). We never receive or store your full payment card number. We may receive a subscription status, transaction identifier, and the email address associated with your payment account.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and personalize the Service, including weather forecasts, shot-impact calculations, and synced course pins
• Authenticate your account and manage your subscription
• Send transactional communications such as password resets, subscription confirmations, and important service updates
• Analyze usage patterns in aggregate to improve and maintain the Service
• Respond to your inquiries, requests, or support needs
• Comply with applicable legal obligations

We do not sell your personal information. We do not serve advertisements. We do not use your personal data for third-party artificial intelligence training or processing.

3. How We Share Your Information

We share limited data with the following third-party service providers solely to operate the Service. Each provider is obligated to protect your data to the same or greater standard as described in this Privacy Policy and may not use your data for their own independent purposes:

• Supabase — authentication and database hosting (stores your account data and course pins)
• Open-Meteo — weather forecasts (receives latitude and longitude only; no account data)
• Rainbow.ai — rain nowcast and radar imagery (receives latitude and longitude only; no account data)
• Google Places API — golf course search (receives search query text only)
• Stripe — web payment processing (receives payment details you provide at checkout)
• RevenueCat — cross-platform subscription management (receives a pseudonymous user identifier and subscription status)
• Apple / Google — mobile payment processing and sign-in authentication (receives only what you authorize)

We do not share your personal information with advertisers, data brokers, or any other third parties beyond those listed above. We may disclose information if required to do so by law, regulation, legal process, or enforceable governmental request.

4. Data Security

We take the security of your data seriously. All data transmitted between your device and our servers is encrypted in transit using HTTPS/TLS. Our database employs row-level security (RLS) policies so that each user can only access their own data. Authentication is managed through secure, token-based sessions. While no system can guarantee absolute security, we use industry-standard measures to protect your information.

5. Data Retention and Deletion

We retain your account data for as long as your account is active. Anonymous, aggregated analytics data may be retained indefinitely in a form that cannot identify you.

Account deletion. You can delete your account and all associated personal data directly from within the PinWeather app or website through your account or profile settings. You may also request account deletion by emailing us at hello@pinweather.com. Upon deletion, we will remove your profile, course pins, and all associated personal data within 30 days. If you signed in with Apple, we will revoke your Sign in with Apple tokens as part of the deletion process.

Active subscriptions. Deleting your account does not automatically cancel an active subscription billed through Apple or Google. Before deleting your account, please cancel your subscription through your device's subscription settings:

• iOS: Settings → [your name] → Subscriptions
• Android: Google Play → Payments & subscriptions → Subscriptions
• Web (Stripe): Manage your subscription from within the PinWeather app or contact us

6. Your Rights and Choices

All users

• You can view, update, or correct your profile information at any time within the app.
• You can delete your account and all associated data as described in Section 5.
• You can opt out of non-essential communications by contacting us.

Revoking permissions

You may revoke the Service's access to your device location at any time through your device settings (iOS: Settings → Privacy & Security → Location Services; Android: Settings → Location → App Permissions). The Service will continue to function, but features that depend on your location — such as showing nearby courses or the wind compass — will be unavailable until you re-enable location access.

If you signed in with Google or Apple, you can revoke the Service's access to your account through your Google Account settings or Apple ID settings at any time.

European Economic Area residents (GDPR)

If you are located in the EU or EEA, our legal basis for processing your personal data is: performance of our contract with you (providing the Service), your consent (for example, when you grant location access), and our legitimate interests (for example, improving the Service and preventing fraud).

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your data in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@pinweather.com. We will respond within 30 days.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you
• Delete your personal information
• Opt out of the sale or sharing of your personal information — however, we do not sell or share personal information as defined by the CCPA
• Non-discrimination — we will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at hello@pinweather.com.

7. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal data, please contact us at hello@pinweather.com and we will promptly delete it.

8. International Data Transfers

Our servers and service providers are located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and processing.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email to the address associated with your account. The "Effective" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, your data, or your privacy rights, contact us at:

PinWeather
hello@pinweather.com