HandiRoam lets you publish your golf data, starting with your handicap, and choose which apps and services ("services" below) can read it. This page explains what we keep about you and why.
Who we are
HandiRoam is run by PA Product Ventures Ltd, a company registered in England and Wales (company number 16981371), registered office 138 The Drive, Rickmansworth, WD3 4DP, United Kingdom (the "data controller"). Contact us at privacy@handiroam.com.
What we keep
- Your HandiRoam ID, for example HR-7K3Q9XD, and an internal sign-in reference from our sign-in provider. Your email address is not stored alongside these; see the next section.
- Your handicap values: each number you or a connected service publishes, when, and who published it. A handicap here is a number you or a service gave us. We don't check it ourselves. Where it came from a verified source you connected, such as your federation, we record that and label it as verified.
- Your federation, if you choose to say which one manages your handicap. It is optional and, unless set by a connected verified source, unverified.
- Your connections: which services you have authorised, when, which kinds of data (for example handicap) you allowed each to read, and whether you allowed it to publish. Each service gets its own private reference to you, stored here, and is never given your HandiRoam ID. Short-lived share codes you create are stored only in hashed form and deleted shortly after they expire.
- An activity log: which service read or published which kind of data, and when.
- Your sign-in session: a random token, kept as a one-way hash.
- Your IP address, briefly, in counters that limit repeated sign-in attempts, failed API requests and sandbox use. These are deleted within a day.
Your email address
To sign you in we collect your email address. It is held by WorkOS, our sign-in provider, which processes it on our behalf and sends you any sign-in codes. We are the data controller for it. By design, HandiRoam's own database does not hold your email: your handicap, connections and activity are stored against a random ID, so a problem with that database, or a service reading our API, cannot expose it. We keep only an internal reference that links your account to the sign-in record. The services you connect are never given your email address. Deleting your account deletes your sign-in record, including your email, from WorkOS.
If you email us, we keep that correspondence in our mailbox (Google Workspace, processing it on our behalf) for as long as is needed to deal with it, and for up to two years after that for our records.
If you build an app that uses HandiRoam
If you apply for an API key we keep what you tell us (service name, contact email, website and description) so we can review the application and reply. We delete it 90 days after we decide it, or after 60 days if it is never decided. A sandbox key and its made-up test players are deleted after 30 days, and sandbox requests keep only short-lived abuse counters tied to your IP address.
Why we use it, and our legal basis
We use your data to:
- run the service you asked for, including showing you who read or published your handicap (performance of our contract with you);
- keep the service secure and stop abuse, which is why we keep sign-in and request counters and a short-lived IP record (our legitimate interests);
- review developer applications and answer email (our legitimate interests in running the service and responding to you).
We don't use your data for marketing and we don't profile you.
Who can see your handicap
Only you, and the services you authorise. Each service receives a private reference that works for that service alone, so two services can't tell, from what we give them, that they both know you. A service might still recognise you by other means, such as your name in its own app. You can disconnect a service at any time from your dashboard. Once a service has read your handicap, it holds that information under its own privacy policy, and disconnecting doesn't erase what it already received. Ask the service what it keeps.
We use Cloudflare to host the service, WorkOS for sign-in and Google Workspace for email. They process data on our behalf as our processors. We don't sell your data, show adverts or use analytics trackers.
Cookies
We use one essential cookie to keep you signed in (it ends after 7 days without use, and after 30 days at most), and two short-lived cookies (10 minutes) during sign-in. We don't use advertising or analytics cookies, so there is no cookie banner.
How long we keep it
- Your account data, handicap history and connections: until you delete your account.
- The activity log: 12 months, or until you delete your account.
- Sign-in sessions: until they expire. Expired ones are cleared automatically.
- IP-based counters: no more than a day.
- Email you send us: while we deal with it, and up to two years after.
Deleting your account
Use Delete account at the bottom of your dashboard. It permanently removes your handicap history, connections and activity log, and deletes your sign-in record, including your email address, from our sign-in provider (WorkOS). It can't be undone.
Your rights
Under UK data protection law you can ask to see your data, correct it, delete it, restrict or object to its use, and receive a copy. Most of this you can do yourself: while signed in you can download everything we hold about you as a data file at /me, /me/history and /me/audit (these open as plain data, not a formatted page), correct your handicap and federation from the dashboard, and delete your account. For anything else, email privacy@handiroam.com; we reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
International transfers
Cloudflare, WorkOS and Google may process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK's adequacy regulations or by the UK International Data Transfer Agreement or Addendum, which are the safeguards UK law recognises.
Children
HandiRoam is not meant for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll update the date above and, where we can, tell you in the service.