Breakfast Ball (“the app,” “we,” “us”) is a golf scorecard and side-games app published by Strategy Labs AI, LLC. We built Breakfast Ball to be local-first: your golf data lives on your device and the app works fully without an account. If you choose to sign in, we additionally keep a cloud backup of your golf data so it can sync and survive a lost phone. This page explains exactly what the app accesses, what leaves your device, and the choices you have.
The short version
- Accounts are optional. The app works fully without one. Signing in (Apple or Google) turns on cloud backup & sync of your golf data.
- Local first. Scores, rounds, shots, courses, clubs, handicap, and your profile are stored on your iPhone and Apple Watch — and, only when you’re signed in, backed up to your private cloud account.
- No analytics, no tracking, no ads. The app contains no advertising, analytics, attribution, or tracking SDKs, and does not track you across other apps or websites. We do not sell your data.
- A few features query third-party services (maps, weather, course data, the optional voice caddie) to function — described below.
- Playing together shares only what it must. Friend links, live shared rounds, and round invites share your display name, avatar, and the round you’re playing with the people you choose — never your GPS trail or Health data.
- You can export everything (Settings → Export My Data) and erase everything (Settings → Delete Account & All Data) — device and cloud — at any time, in the app, immediately.
Information the app stores
On your device (always), and in your cloud account (only while signed in):
- Profile & identity: your display name, optional avatar, home course, and bio. If you sign in with Apple or Google we receive the stable user identifier and the email address the provider shares; we use them solely to create and secure your account.
- Golf data: rounds, hole-by-hole scores, shot locations (precise GPS coordinates of where shots were hit, including automatically detected shots), the round’s GPS walking trail, custom courses and any hole geometry you map, club bag and distances, handicap scoring records, side-game results and settlements, and the names/avatars of players you add to rounds.
- Preferences: theme, distance source, scoring defaults, and watch settings stay on-device. Handicap settings sync with your account.
- API keys you enter (optional Google Maps / golf-course keys) are stored locally only and used to make the requests you trigger.
Optional account & cloud sync
When you sign in, your golf data is backed up to a private database operated for us by Supabase (our database and authentication provider), hosted in the United States (AWS us-west-2, Oregon). Access is enforced row-by-row: every record is tied to your account id, and database row-level security policies ensure only your authenticated session can read or write your rows. Data is encrypted in transit (TLS) and at rest. We retain it until you delete it or delete your account. Signing out stops syncing but leaves both your device data and your cloud backup intact; deleting your account removes the cloud copy immediately and permanently.
Alongside your golf data, your account stores a small amount of plumbing: your friends list, live-round invites, your device’s push-notification token (only if you allow notifications), and a record of which versions of this policy and the Terms you accepted. All of it is erased with your account.
Location
With your permission, the app uses your device’s GPS to show yardages, place shot markers, and detect which hole you’re on. Location is used while the app is in use and, during an active round, in the background so yardages and shot tracking keep working with your phone in your pocket. Your round’s location trail and shot coordinates are stored on your device — and, when you are signed in, saved rounds (including their GPS trail and shot locations) are backed up to your private cloud account as described above. Precise coordinates are sent to third-party services only to provide specific features (see Third-party services below).
Help improve course maps (optional)
Settings has a “Help improve course maps” toggle, off by default. When you turn it on, your saved rounds contribute anonymized course observations — tee positions and spots where players pause (coordinates, hole number, and a dwell weight) — used solely to improve the shared course geometry for everyone. These observations carry no account reference and their timestamps are rounded to the day, so they can’t be tied back to you or to when you played. Flip the toggle off at any time; nothing is contributed without it.
Health & Fitness (Apple Watch)
If you use the Apple Watch app and grant permission, Breakfast Ball starts an Apple Health “Golf” workout while you play. Through Apple HealthKit it may read and write the following specific data on your device: workouts, active energy burned, heart rate, walking/running distance, and step count. This data is used solely to record your round as a workout and to display activity during play. Your workout and its heart-rate readings stay in Apple Health on your device. The round’s summary activity stats — step count, walking distance, and active calories — are saved with your scorecard and, when you’re signed in, back up to your private cloud account like the rest of your golf data. We never use Health or Motion & Fitness data for advertising, marketing, or data-mining, and we never disclose it to third parties. You can revoke Health access at any time in the iOS/watchOS Settings or the Health app.
Motion & steps
The Apple Watch app uses motion sensors (accelerometer/gyroscope) to detect your golf swing so shots can be logged automatically, and its pedometer to count your steps during a round — when you play without a watch, your iPhone’s own pedometer counts the round’s steps instead. Raw motion data is processed on your device and never leaves it. Your round’s step count and walking distance are saved with the round — and, when you’re signed in, backed up to your private cloud account like the rest of your golf data. Motion data is never used for advertising or tracking.
Camera, microphone & photos (shot tracer)
The shot tracer records a video of your swing (with sound) so the app can draw the ball’s trace over it. Recording, processing, and the finished clip all stay on your device — tracer videos are never uploaded, even when you’re signed in. The camera is also used to scan a friend’s QR code, which is decoded on-device. Photo-library access happens only when you pick a video to trace or a photo for your avatar; the avatar is part of your profile, so it syncs to your account while you’re signed in.
Voice caddie (optional)
If you use the voice caddie, your spoken audio is sent over TLS through our proxy (hosted on Cloudflare) to OpenAI for transcription and to generate the caddie’s reply, together with the round context needed to answer (the current hole and your distances, the round’s players and scores, side-game standings, and your club distances). We do not store your voice conversations — requests are processed per turn and discarded; nothing is retained on our servers, and the audio is not used for advertising or to train our systems. OpenAI processes these requests under its API terms, which exclude API data from model training. If you never use the voice caddie, no audio ever leaves your device.
Third-party services
To provide certain features, the app sends limited, feature-specific requests to these services. Each has its own privacy policy.
- Supabase — database and sign-in infrastructure for the optional account & cloud sync described above. Processes your account data on our behalf.
- Cloudflare — hosts this website and the proxy that serves the voice caddie and course-search features.
- OpenAI — speech transcription and responses for the optional voice caddie, via our proxy as described above.
- Google Maps Platform (Google LLC) — map display and geocoding of course addresses you enter. Receives the address/area being looked up. See Google’s Privacy Policy.
- Open-Meteo — wind/weather for the course. Receives the coordinates being queried to return local wind. Open-Meteo does not require an account or API key.
- OpenStreetMap / Overpass API — optional import of hole geometry. Receives the course area coordinates being queried.
- GolfCourseAPI (golfcourseapi.com) — course search and details. Receives the course name/search text you enter.
- Google Fonts — web fonts loaded for the app’s typography.
These requests are made to deliver the feature you’re using; we do not use them to build a profile of you and we never sell your information. Your Health data is never sent to any of them.
Nearby Players (local network)
If you invite nearby players to a round, the app uses Apple’s peer-to-peer technologies (Bluetooth and local Wi-Fi) to discover devices on your local network and exchange your display name, avatar, and pairing identifier (your sign-in user id, or a random local id when you’re not signed in) with the people you invite — plus, when you invite them, the round itself (course and current scores). This happens directly between devices on your local network — there is no central server, and discovery is only active while you’re setting up a round.
Friends & friend links
You can add a friend with a QR code or share link (breakfastballapp.com/add). The link carries exactly two things — your display name and your pairing identifier — in its fragment (the part after “#”), which browsers never send to a server: scanning it adds you entirely on the recipient’s device. When you’re both signed in, adding each other also records the friendship in your cloud accounts (your account ids and display names) so invites can find you across devices. There is no public directory — nobody can look you up without your link or exact pairing handle — and friends see only your display name and avatar. Deleting your account erases your friendships.
Live shared rounds
Hosting or joining a live round shares that round through our backend with the players in it: the course, the roster (display names and avatars), hole-by-hole scores, side-game standings, and who’s currently connected — updated in real time while you play. Other players never receive your GPS trail, shot locations, or Health data; those stay yours. When the round ends, each player keeps their own copy of the round (and their own cloud backup, if signed in).
Push notifications (optional)
If you allow notifications, we store your device’s push token with your account and use it for one thing: telling you when a friend invites you to a round. No marketing, no re-engagement nudges. Decline notification permission and everything still works — invites simply appear in the app instead. The token is deleted with your account.
What we do NOT do
- We do not run advertising, analytics, attribution, or tracking SDKs.
- We do not track you across other companies’ apps or websites (no App Tracking Transparency prompt is needed).
- We do not sell or share your personal information with data brokers.
- We do not read your data for any purpose other than operating the service for you.
- We do not store voice-caddie conversations.
- We do not send marketing push notifications — push exists only for round invites.
Your choices & rights
- Export everything: Settings → Export My Data produces a complete machine-readable copy (JSON) of your profile, rounds, courses, handicap, players, and clubs.
- Delete everything: Settings → Delete Account & All Data permanently erases your cloud account and every server-side record immediately, then wipes all on-device data, including your Sign in with Apple link. You can also revoke the Apple credential in iOS Settings → your name → Sign in with Apple.
- Sync is optional: never sign in and your data never leaves your device (apart from the feature-specific requests described above).
- Permissions: revoke Location, Motion, Health, camera, microphone, or notification access at any time in iOS/watchOS Settings.
- Course-map contributions: off by default; opt in or out any time in Settings (“Help improve course maps”).
- GDPR (EEA/UK): for cloud-synced data we are the controller and Supabase is our processor. Legal basis: performance of the service you request (Art. 6(1)(b)). You can exercise access, portability, rectification, and erasure directly in the app (export and delete above) or by emailing us. Data is hosted in the United States; transfers are protected by our processors’ standard contractual clauses.
- CCPA/CPRA (California): we collect the categories described above solely to provide the service; we do not sell or share personal information. Access, portability, and deletion are available in-app at any time.
Children
Breakfast Ball is not directed to children and is rated 4+. We do not knowingly collect personal information from children; if you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new effective date. June 9, 2026: added the optional account & cloud sync, in-app data export, immediate cloud account deletion, voice-caddie disclosures, and round step-count saving. June 10, 2026: added friends & friend links, live shared rounds, round-invite push notifications, optional course-map contributions, the shot tracer’s camera/microphone use, and cloud backup of round activity stats (steps, walking distance, active calories).
Contact
Questions about privacy? Email pterodaniel@gmail.com (Strategy Labs AI, LLC).
Last updated June 10, 2026.