Policies & consent
Privacy Policy
GolfXI apps, GolfXI Admin, organizations, and messaging
Summary. We collect what we need to run a golf app: who you are, the golf you play, the messages you send, and the posts you explicitly share. Direct messages are private but not end-to-end encrypted — we can access them to investigate a report or when the law requires it. We do not sell your personal information. You can delete your account from the app.
This Policy explains what MC Golf Holdings Inc., which operates GolfXI, collects, why, who we share it with, how long we keep it, and the choices you have. It covers our mobile apps, our websites, GolfXI Admin, and the messaging, feed post, photo, and video features.
1. Who we are
GolfXI is operated by MC Golf Holdings Inc. ("MC Golf Holdings", "we", "us", "our"), a Delaware corporation. MC Golf Holdings Inc. is the controller of the personal information described in this Policy.
Contact us about anything in this Policy at hello@golfxi.com.
2. Information we collect
Account and profile. Name, mobile number (our primary identifier), email where provided, home club, profile and banner photos, and your date of birth. We collect date of birth solely to confirm you meet our minimum age of 13, and we store the date rather than re-asking.
Messages and shared content. The content of messages you send in direct, group, event, match, and league conversations; feed posts, captions, comments, photos and video you upload; reactions; read receipts; and who is in each conversation.
Golf data. Scores, rounds, events, leagues, teams, tee times, handicap index and score history retrieved from GHIN/USGA where you connect an account, and course information including GPS positions when you use on-course yardages.
Wagering and settlement records. Side games, skins, Calcutta lots and bids, ledgers, and amounts recorded as owed between players. We record these; we do not process the money.
Organization data. Membership, roles, rosters, and administrative activity where you belong to an organization.
Billing. Payment method tokens, billing details, transactions, invoices, and promo code usage. Card details are handled by our payment processor and are not stored on our servers.
Device and usage. Device identifiers, push notification tokens, app version, IP address, log and crash data, and analytics about how the app is used.
Location. Approximate and precise location while you use GPS yardages, used to show distances on the hole you are playing. You control this in device settings.
Contacts. If you choose to find friends from your contacts, we process that list to match existing GolfXI users. We do not store your address book.
3. How we use it
To operate the Services: deliver messages, show posts to their intended audience, keep score, run events and leagues, calculate standings, and show handicaps.
To confirm you meet our minimum age.
To send push notifications, service emails, and — only with your express consent — event SMS.
To keep people safe: investigating reports, enforcing our Terms, detecting abuse, spam, and fraud.
To administer subscriptions, billing, and promo codes.
To fix problems, understand usage, and improve the product.
To meet legal obligations and respond to lawful requests.
4. Messages and moderation
Direct messages are private between the participants. They are not end-to-end encrypted. Message content is stored on our servers so it can be delivered and shown on your devices.
We do not read your messages in the ordinary course of operating the Services. We access message content only when we have a specific reason: a report of objectionable content, a safety concern, a legal obligation, or debugging a fault you have reported to us.
When you report a message, post, or comment, the reported content, who created it, and who reported it are retained so we can review it and act, and so we can identify repeat offenders.
5. Photos, video, and feed posts
Media you share in a conversation is stored on our infrastructure and served over short-lived signed links authorized for an eligible viewer. Links expire, and current conversation access is checked again when media is requested. A complete signed link should still be treated as sensitive until it expires. Media is not intentionally public or indexable.
Sending media in a conversation does not automatically publish it to the community feed. If you separately choose to share that media to your feed, or create a post from the feed, GolfXI creates an independent post that your accepted followers can see. The post can have its own caption, comments, and reactions. Blocking or ending a follow removes future access, subject to the short expiry of any link already issued.
A feed post and its source conversation message have separate lifecycles. Deleting the message does not delete a post you explicitly created from it, and deleting the post does not delete the message. You must delete each in its own location. Feed posts are not intentionally public or indexable.
7. Retention and deletion
We keep personal information for as long as your account is open and while it is needed for the purposes above.
You can delete your account from the app. When you do, we delete or anonymise your personal information within 30 days, except where we must keep it longer:
Transaction and tax records — 7 years, as required by tax and financial record-keeping law.
Moderation and safety records — reports made about you, and the content reported, for 2 years, so that a banned user cannot erase the record by deleting and re-creating an account.
SMS opt-outs — kept indefinitely, because we must be able to prove you opted out and must never message you again.
Anything subject to a legal hold — retained until the matter closes.
Backups are overwritten on a rolling 35-day cycle, so a deleted record may persist in a backup for up to that long before it is gone entirely.
Messages you sent to others remain visible to those recipients, in the same way an email you sent stays in the recipient's mailbox. Deleting a message removes its content from the conversation for everyone.
Media uploaded but never sent is deleted automatically within 24 hours.
Deleting a feed post or comment removes it from other users immediately. Unreported deleted feed content is removed from our active systems within 30 days. If the content was reported, the report and the reported content are retained for 2 years, or longer when a legal hold requires it.
8. Your choices and rights
You can update your profile, control notifications per conversation, mute or archive conversations, delete your feed posts and comments, block users, report users or content, revoke location and contacts permissions in device settings, opt out of SMS by replying STOP, and delete your account.
Depending on where you live you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. Email hello@golfxi.com to exercise them. We will respond within 30 days, and we will not discriminate against you for asking.
If you are in the EEA, UK, or Switzerland. You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. Our legal bases are: performing our contract with you (running your account, delivering messages, billing); your consent (SMS marketing, location, contacts — each withdrawable at any time); our legitimate interests (keeping the platform safe, preventing fraud and abuse, improving the product); and legal obligation (tax records, responding to lawful requests). You may lodge a complaint with your local supervisory authority.
If you are in California. In the past 12 months we collected the categories of personal information described in section 2 — identifiers, commercial information, internet activity, geolocation, and your own content — for the purposes in section 3, from you and from the golf associations you connect. We disclosed personal information to the service providers named in section 6 for business purposes only.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months, including for anyone under 16. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link to provide. You have the rights to know, delete, correct, and to limit use of sensitive personal information, and you may use an authorised agent — email us with written proof of their authority.
Other US states. If you live in a state with comparable privacy legislation, the same rights and process above apply to you, including the right to appeal a refused request by replying to our decision.
9. Children's privacy
GolfXI is not intended for anyone under 13, and we do not knowingly collect personal information from them. We ask for date of birth at sign-up to enforce this. If you believe a child under 13 has an account, contact us at hello@golfxi.com and we will close it and delete the information.
10. Security
We use encryption in transit, encryption at rest for stored media, access controls, and signed, expiring links for private media. No system is perfectly secure, and we cannot guarantee absolute security.
11. International transfers
MC Golf Holdings Inc. operates in the United States and processes data there. If you use GolfXI from elsewhere, your information is transferred to and processed in the United States, which may not offer the same level of legal protection as your home country.
Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with the providers named in section 6, together with additional technical measures including encryption in transit and at rest. You may request a copy of the relevant clauses by emailing us.
12. Changes to this Policy
We will post any revised Policy with a new effective date and, for material changes, notify you in the app or by email.
13. Contact
MC Golf Holdings Inc., which operates GolfXI · hello@golfxi.com
Privacy questions, data requests, and complaints all reach us at that address. Mark data requests "Privacy Request" in the subject line so we can route them quickly. We are not currently required to appoint a Data Protection Officer; privacy enquiries are handled directly by the GolfXI team.