Privacy Policy - Duck Hook Golf

DUCK HOOK GOLF, LLC

PRIVACY POLICY

Last Updated: May 12, 2026

THE DUCK HOOK GOLF APPLICATION AND WEBSITE ARE INTENDED FOR USE ONLY BY INDIVIDUALS LOCATED IN THE UNITED STATES WHO ARE AT LEAST 18 YEARS OF AGE. THE SERVICE IS NOT DIRECTED TO CHILDREN UNDER 13, AND WE DO NOT KNOWINGLY COLLECT PERSONAL INFORMATION FROM ANY INDIVIDUAL UNDER 18.

I. Introduction

This Privacy Policy describes how Duck Hook Golf, LLC ("Duck Hook," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with the Duck Hook Golf mobile application, the website operated by Duck Hook, and all related features and services (collectively, the "Service"). This Privacy Policy is incorporated by reference into our Terms and Conditions of Use.

By accessing or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

II. Scope; Eligibility

This Privacy Policy applies to personal information we collect through the Service. The Service is offered only to individuals located in the United States who are at least 18 years of age. We do not knowingly collect personal information from any individual under 18, and we do not direct the Service to children. If you believe we have collected personal information from someone under 18, please contact us at support@duckhook.golf and we will take steps to delete the information.

III. Information We Collect

We collect the following categories of information from and about you:

A. Information You Provide Directly

Account information: name, username, email address, phone number (optional), password, profile picture, and similar account-creation details.
Payment-service identifiers: at your option, a username, handle, link, or other identifier associated with a third-party payment service (such as a Venmo handle) (a "Payment Handle"), which you may add to your User profile. Duck Hook stores any Payment Handle as plain-text profile metadata only. Duck Hook does not validate, verify, or connect to the associated third-party payment service, and does not process, route, or initiate any payment through the third-party payment service.
Profile and gameplay information: handicap, home course(s), club preferences, scorecards, statistics, notional scoring entries, group memberships, and friend connections.
User-submitted content: photographs, comments, group-chat messages, course reviews, and other content you submit through the Service.
Communications: information you provide when you contact us for support or when you respond to surveys or promotional messages.
Subscription and payment information: for tournament-organizer subscribers, billing name, billing address, and payment-method details (which are processed by the applicable app store or our third-party payment processor and not stored by Duck Hook in unencrypted form).

B. Information Collected Automatically

Device information: device type, operating system and version, unique device identifiers (including mobile advertising identifiers), browser type, language settings, and mobile network information.
Usage information: pages or screens viewed, features used, time and duration of activity, referring URLs, and crash and diagnostic information.
Precise and approximate geolocation: with your permission, we collect precise geolocation (including GPS data) to provide course-detection, hole-mapping, shot-tracking, and scorekeeping features. We also infer approximate location from your IP address.
Cookies and similar technologies: cookies, local storage, software development kit ("SDK") identifiers, and similar technologies as further described in Section X.

C. Information from Other Sources

If you sign in through a third-party identity provider (such as Sign in with Apple, Google, or Facebook), we receive the information that you authorize that provider to share with us, which may include your name, email address, and profile information.
If you invite friends to use the Service, you may provide contact information for those friends. We use that information only to send the invitation as directed by you and to facilitate the connection within the Service.
We may receive analytics, attribution, advertising, and similar information from our service providers and partners.

IV. How We Use Information

We use personal information for the following purposes:

To provide, operate, maintain, and improve the Service, including scorekeeping, group tracking, leaderboards, and tournament organization.
To create and manage your account and authenticate you.
To enable social features, including friend connections, group play, and communications between Users.
To provide and bill for subscription services for tournament organizers.
To communicate with you about the Service, including service announcements, customer-support responses, and security alerts.
To send marketing and promotional communications (subject to your consent where required by law and your right to opt out, as described in Section VII).
To send push notifications related to your use of the Service (with your device-level permission).
To personalize content and recommendations.
To monitor and analyze trends, usage, and activities.
To detect, investigate, prevent, and respond to fraud, abuse, security issues, and violations of our Terms.
To comply with applicable legal obligations, respond to legal process, and protect our rights and the rights, property, and safety of our Users and others.
For any other purpose disclosed to you at the time of collection or with your consent.

V. How We Share Information

We share personal information with the following categories of recipients:

Other Users: information you make available through the Service (such as your profile, scores, leaderboard positions, photos, group-chat content, and any Payment Handle you include in your profile) may be visible to other Users, including the Users in your groups and, where applicable, the public-facing portions of the Service.
Service providers: vendors and contractors that perform services for us, including cloud hosting, data storage, analytics, crash reporting, attribution, email delivery, push-notification delivery, payment processing, fraud prevention, and customer support. These service providers are authorized to use personal information only as necessary to provide their services to us.
Tournament organizers: if you participate in a tournament organized through the Service, your scoring and identifying information may be shared with the applicable tournament organizer.
Affiliates: our current and future affiliates and corporate parents, for purposes consistent with this Privacy Policy.
Business transfers: in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, bankruptcy, or similar event, your information may be transferred to a successor or affiliate.
Legal and protective purposes: to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms and other agreements; to protect the rights, property, or safety of Duck Hook, our Users, or others; or to investigate suspected fraud or wrongdoing.
With your consent or at your direction.

We do not sell personal information for money. Whether certain disclosures of personal information for advertising, analytics, or similar purposes may be deemed a "sale" or "share" of personal information under applicable state privacy laws (such as the California Consumer Privacy Act, as amended) is addressed in Section XIV.

VI. Third-Party Services and SDKs

We use third-party software development kits and services to operate and analyze the Service. These third parties may collect device identifiers, IP addresses, usage data, crash reports, and similar information directly from your device. The third-party services we use include providers of analytics, crash reporting, mobile attribution, advertising identifiers, authentication, payments, and push-notification delivery. A list of the specific third-party SDKs and service providers we use, as updated from time to time, will be made available on request to support@duckhook.golf. The data practices of these third parties are governed by their own privacy policies.

VII. Marketing Communications and Push Notifications

We may send you marketing communications by email about the Service and related products, subject to your consent where required by applicable law. You may opt out of marketing communications at any time by following the "unsubscribe" link in any such email or by contacting us at support@duckhook.golf. We may continue to send you transactional and service-related communications (such as account confirmations, security alerts, and important changes to the Service) even if you opt out of marketing. If you enable push notifications on your device, we may send push notifications related to your use of the Service. You may disable push notifications at any time through your device settings.

VIII. Photographs and User-Generated Content

If you upload a photograph, profile picture, or other image to the Service, the image and any metadata associated with it (such as location, date, time, and camera settings) may be uploaded to our systems and stored on our service providers' infrastructure. Photographs and other content you post publicly through the Service may be viewed by other Users and, where the Service makes them publicly available, the general public. Please do not upload photographs that depict any person without that person's permission, and never upload images of children. You are solely responsible for ensuring that you have all necessary rights and consents to upload any content.

Payment Handles in User Profiles

If you choose to include a Payment Handle (such as a Venmo username, link, or other payment-service identifier) in your User profile, that Payment Handle will be visible to other Users in accordance with your profile-visibility settings and, where applicable, may be visible on public-facing portions of the Service. Duck Hook stores Payment Handles as plain-text profile metadata and does not connect to, validate against, or transact through any third-party payment service. Duck Hook does not control, monitor, or have any visibility into the activity of, or any account associated with, the third-party payment service. You may add, edit, or remove a Payment Handle at any time through your profile settings. Removal will be reflected in your profile going forward, but Duck Hook cannot retrieve, control, or delete copies of your Payment Handle that other Users may have viewed, copied, screenshotted, or otherwise recorded prior to removal. Posting a Payment Handle publicly may significantly increase your exposure to fraud, impersonation, phishing, harassment, unwanted contact, doxing, and identification. You should not include a Payment Handle that you are not comfortable sharing widely and persistently. Duck Hook is not responsible for, and you assume all risk associated with, the consequences of displaying a Payment Handle on the Service.

IX. Geolocation Information

With your device-level permission, we collect precise geolocation information (including GPS data) to provide core gameplay features (course detection, hole mapping, shot tracking, distance measurements, and scorekeeping). You may grant, deny, or revoke permission for the Service to access precise location through your device settings at any time; however, doing so may limit the functionality of the Service. We may continue to collect approximate location information derived from your IP address even if you deny precise location permission.

X. Cookies, Local Storage, and Similar Technologies

We use cookies, local storage, software development kits, web beacons, pixels, and similar technologies on the website and within the application to operate the Service, remember your preferences, authenticate your sessions, measure usage and performance, and support advertising and analytics. Most web browsers are set to accept cookies by default; you can typically adjust your browser settings to refuse cookies or alert you when a cookie is being sent. Some features of the Service may not function properly without certain cookies.

XI. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, enforce our agreements, and for the purposes described in this Privacy Policy. When we no longer need personal information, we will take reasonable steps to securely delete or de-identify it. We may retain de-identified or aggregated information indefinitely.

XII. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot and do not guarantee the absolute security of personal information.

XIII. Your Choices and Rights

A. Account Information

You may access and update your account information through the Service. You may also request that we delete your account by contacting us at support@duckhook.golf. We may retain certain information after account deletion as required or permitted by applicable law.

B. Marketing

You may opt out of marketing emails as described in Section VII. You may disable push notifications through your device settings.

C. Device Permissions

You may grant, deny, or revoke device-level permissions (such as access to location, camera, photos, and contacts) through your device settings.

D. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no industry consensus on how to interpret this signal, we currently do not respond to Do Not Track signals.

XIV. State-Specific Privacy Disclosures

Some U.S. states give residents specific privacy rights. The disclosures in this Section XIV supplement, and where applicable supersede, other portions of this Privacy Policy for residents of the listed states.

A. Colorado Residents (Colorado Privacy Act)

Colorado residents have the right, subject to verification and exceptions: (1) to confirm whether we are processing your personal data and access that personal data; (2) to correct inaccuracies in your personal data; (3) to delete personal data we have collected from or about you; (4) to obtain your personal data in a portable, usable format; and (5) to opt out of the processing of personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact us at support@duckhook.golf. If we deny your request, you may appeal that decision by emailing support@duckhook.golf with the subject "Appeal — Colorado Privacy Request." If we deny your appeal, you may contact the Colorado Attorney General at coag.gov.

B. California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA/CPRA"), provides you with the rights described in this Section B with respect to your personal information. The terms "personal information," "sensitive personal information," "sell," "share," and "service provider" have the meanings given to them under the CCPA/CPRA.

Notice at Collection; Categories of Personal Information We Collect. In the preceding twelve (12) months, Duck Hook Golf, LLC has collected the following categories of personal information from California residents, as enumerated in Cal. Civ. Code § 1798.140:

Identifiers (e.g., name, email address, postal address, telephone number, account username, IP address, device identifiers);
Customer records information under Cal. Civ. Code § 1798.80(e) (e.g., name, contact information, payment card or financial account information);
Commercial information (e.g., products purchased or considered, transaction history, order details);
Internet or other electronic network activity information (e.g., browsing and usage data, interactions with the Service, referring URLs);
Geolocation data (general, IP-derived; precise geolocation);
Audio, electronic, or visual information (e.g., customer service recordings, photos you submit);
Inferences drawn from the foregoing to create a profile reflecting preferences and behavior; and
Sensitive personal information, limited to: account log-in credentials and payment card information in combination with any required access code. We do not use or disclose sensitive personal information for purposes other than those permitted under Cal. Civ. Code § 1798.121 and applicable regulations, and accordingly the right to limit set forth in Section B.3 below does not apply to our processing.

Sources, Purposes, and Disclosures. We collect personal information directly from you, automatically from your device and use of the Service, and from third-party sources (e.g., service providers, business partners, advertising partners, and publicly available sources). We use personal information for the business and commercial purposes described in this Privacy Policy, including to provide and improve the Service, process transactions, communicate with you, personalize content, ensure security and prevent fraud, comply with legal obligations, and for analytics and marketing. We disclose each category of personal information identified above to the following categories of recipients: service providers and contractors; affiliates; advertising and analytics partners; professional advisors; and government authorities or other parties when required by law or to protect our rights.

Your Rights. Subject to verification of your identity and applicable exceptions under the CCPA/CPRA, you have the right to:

Know / Access. Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to which we disclosed personal information;
Delete. Request that we delete personal information we have collected from you;
Correct. Request that we correct inaccurate personal information we maintain about you;
Opt Out of Sale or Sharing. Direct us not to "sell" or "share" your personal information, including for purposes of cross-context behavioral advertising;
Limit Use of Sensitive Personal Information. To the extent we use or disclose sensitive personal information for purposes beyond those permitted under Cal. Civ. Code § 1798.121, direct us to limit such use or disclosure; and
Non-Discrimination. Not be subject to discriminatory treatment for exercising any of the rights above.

How to Exercise Your Rights. You may submit a request to exercise any of the rights above by emailing us at support@duckhook.golf with the subject line "California Privacy Request." To opt out of sale or sharing, you may submit a request to the email address above, and we will honor opt-out preference signals (e.g., the Global Privacy Control) transmitted by your browser in a frictionless manner consistent with the CCPA/CPRA regulations. We will verify your request by matching information you provide in connection with the request against information we maintain about you in our records. You may designate an authorized agent to submit a request on your behalf in accordance with Cal. Civ. Code § 1798.140(l) and § 1798.185 and the implementing regulations; we may require the agent to provide proof of authorization and may require you to verify your identity directly and confirm the agent's authority.

Retention. We retain each category of personal information for the period reasonably necessary to fulfill the purposes for which it was collected, as described in Section XI (Data Retention) of this Privacy Policy, or for a longer period where required or permitted by law.

Response Timing. We will confirm receipt of verifiable requests within ten (10) business days and respond within forty-five (45) days, subject to one (1) additional 45-day extension as permitted under the CCPA/CPRA, with notice to you.

Contact for California Residents. For questions about this Section B, to exercise any of the rights described above, or for information about our privacy practices generally, contact us at:

Duck Hook Golf, LLC
Attn: Privacy
Email: support@duckhook.golf

C. Other States

Residents of Connecticut, Virginia, Utah, Texas, Montana, Oregon, Tennessee, Indiana, Iowa, Delaware, New Jersey, Minnesota, Maryland, New Hampshire, and other states with comprehensive consumer privacy laws may have additional rights similar to those described above. To exercise any such rights, please contact us at support@duckhook.golf.

XV. Children's Privacy

The Service is not directed to and is not intended for use by children under 18. We do not knowingly collect personal information from any individual under 18. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly. If you are a parent or guardian and believe we may have collected personal information from your child, please contact us at support@duckhook.golf.

XVI. International Users

The Service is operated from the United States and is intended only for Users in the United States. We do not direct the Service to, and we do not knowingly collect personal information from, individuals outside the United States. If you access the Service from outside the United States, you do so at your own initiative and at your own risk, and you understand that your information will be transferred to, stored, and processed in the United States.

XVII. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice through the Service, by email, or by other reasonable means. The "Last Updated" date at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

XVIII. Contact Us

If you have any questions or comments about this Privacy Policy or our privacy practices, please contact us at:

Duck Hook Golf, LLC
Attn: Privacy
Email: support@duckhook.golf