Privacy Policy for NoPro

1. Who we are (Data Controller)

NoPro ("NoPro", "we", "us", "our") is provided by:

We are the "data controller" for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not legally required to do so; for any privacy question, use the contact email above.

This policy applies to the NoPro iOS app (bundle identifier com.bloukaas.nopro) and to our backend service at getnopro.com.

2. What data we process, why, and our legal basis

We only process personal data in the specific situations below. An account is optional, and we do not build a profile about you.

2.1 Location data

• What: Your device's GPS location (latitude/longitude), at high accuracy, while you use the app.
• How it's used:
  • On your device only — to show your position on the hole and calculate distances to the green and to any point you measure. This data is held in memory on your device and is not transmitted to us.
  • Sent to our server only when you actively use the "find courses near you" feature: at that moment, your coordinates are sent to getnopro.com so we can return a list of nearby golf courses. We use them to answer that request and do not use them to track you.
• Legal basis: Your consent (GDPR Art. 6(1)(a)), which you give through the iOS location permission prompt and by choosing to search nearby. You can withdraw it at any time in iOS Settings › Privacy & Security › Location Services › NoPro. Withdrawing it disables location features but does not affect prior lawful processing.

2.2 Scorecard email

• What: When you choose to email a round summary, you enter a recipient email address, and we transmit it to our server together with your handicap index, your hole-by-hole scores (strokes, putts, bunker shots, penalties), and round details (date played, selected tee, and course identifiers).
• How it's used: Our backend uses this data to generate and send the round-summary email to the address you entered. The email address is held only in memory on your device while sending; it is not stored on your device afterward.
• Legal basis: Performance of a service you request (GDPR Art. 6(1)(b)) — i.e. delivering the email you asked us to send. If you enter someone else's email address, you are responsible for having a basis to share their address with us for that purpose.

2.3 Course browsing and search

• What: When you browse or search the course catalogue, we receive your search text and standard pagination parameters.
• Legal basis: Our legitimate interests (GDPR Art. 6(1)(f)) in operating and improving the course catalogue. This involves no profiling.

2.4 Account and saved rounds

• What: If you create an account, we store:
  • your email address, and when you created the account and last signed in;
  • the rounds you save: course, configuration and tee, the date played, your handicap index, and your hole-by-hole scores (strokes, putts, penalties, bunker shots);
  • your sign-in sessions: when they started and when they end;
  • for each sign-in request: the email address and the time.
• How it's used: To sign you in without a password (we email you a one-time link and code), to keep you signed in, to show your saved rounds in the app and at getnopro.com, and to protect accounts against abuse.
• Legal basis: Your account and saved rounds: performance of a contract (GDPR Art. 6(1)(b)), i.e. providing the account you asked for. Sign-in requests: our legitimate interests (GDPR Art. 6(1)(f)) in keeping accounts secure.
• Bot protection: Before our website sends a sign-in email, your browser solves a small computing puzzle (ALTCHA, which we run on our own server). The puzzle uses no personal data, no cookies and no tracking. We only remember which puzzles were solved, until they expire 20 minutes later.

2.5 Technical data from using our backend

• What: Like any internet service, when your app contacts getnopro.com, our servers and hosting provider automatically receive standard technical information such as your IP address, the date and time of the request, and basic request metadata (e.g. app/OS version sent by your device).
• How it's used: To deliver responses, keep the service secure and reliable, and prevent abuse. We do not use it to identify you personally.
• Legal basis: Our legitimate interests (GDPR Art. 6(1)(f)) in the security and proper functioning of our service.

3. Who we share data with

• No advertisers, data brokers, or analytics companies. We do not sell, rent, or share your personal data for advertising or marketing.
• Our hosting/infrastructure provider — our backend (getnopro.com) runs on Scaleway (Paris, France), which processes data on our behalf as a "processor."
• Our email delivery provider — to send your scorecard email and sign-in emails, our backend uses Scaleway's transactional email service, which processes the recipient email and message content on our behalf to deliver it.
• Legal requirements — we may disclose data if required by law or to protect our rights, safety, or the integrity of our service.

We use no third-party tracking, advertising, crash-reporting, or analytics SDKs in the app.

4. International transfers

Our backend and email delivery are hosted with Scaleway in Paris, France, within the European Economic Area (EEA). Your data is processed inside the EEA and we do not transfer it to a country outside the EEA. If this ever changes, we will ensure an appropriate safeguard is in place — typically the European Commission's Standard Contractual Clauses — so your data receives a level of protection essentially equivalent to that in the EEA, and we will update this policy.

5. How long we keep data

• Scorecard email data (recipient address, scores, handicap, round details) is used only to deliver your email and is not retained afterward — it is deleted as soon as the email has been sent.
• Your account (email address, saved rounds, sessions) is kept until you delete your account. When you delete it, you are signed out everywhere right away and everything is removed 30 days later. Signing in again within those 30 days cancels the deletion.
• Sign-in sessions end when you sign out, 30 days after signing in on the website, and in the app after 90 days without use.
• Sign-in requests are deleted after 24 hours.
• Server logs / technical data are retained for up to 30 days for security and troubleshooting, then deleted or anonymised.

6. Your rights

Under the GDPR you have the right to: access your data; request rectification or erasure; restrict or object to processing; request data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.

To exercise these rights, email privacy@getnopro.com. Please note:

• If you have an account, you can see your saved rounds in the app and at getnopro.com/rounds, and delete your account yourself at any time: in the app under You › Delete account, or on the website under Account › Delete account. See Section 5 for what happens next.
• Without an account, most of your data exists only on your own device, where only you can access or delete it — we have no copy and cannot retrieve or erase it for you.
• For data our backend received (e.g. a scorecard email), we may need details such as the email address used and approximate date to locate the relevant records, and we may be unable to act if we cannot identify the data in question.

We respond to verified requests within the timeframe required by law (generally one month).

7. Children's privacy

NoPro is rated 4+ but is intended for a general golfing audience and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

8. Security

We protect data in transit using encryption (HTTPS/TLS) for all communication with our backend. We store no passwords. No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the limited data we handle.

9. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

10. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, provide a more prominent notice (for example, within the app or on our website). Continued use of NoPro after a change means you accept the updated policy.

11. Contact

Questions or requests about this policy or your data: