Privacy Policy for NoPro

1. Who we are (Data Controller)

NoPro ("NoPro", "we", "us", "our") is provided by:

We are the "data controller" for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not legally required to do so; for any privacy question, use the contact email above.

This policy applies to the NoPro iOS app (bundle identifier com.bloukaas.nopro) and to our backend service at getnopro.com.

2. What data we process, why, and our legal basis

We only process personal data in the specific situations below. We do not require you to create an account, and we do not build a profile about you.

2.1 Location data

• What: Your device's GPS location (latitude/longitude), at high accuracy, while you use the app.
• How it's used:
  • On your device only — to show your position on the hole and calculate distances to the green and to any point you measure. This data is held in memory on your device and is not transmitted to us.
  • Sent to our server only when you actively use the "find courses near you" feature: at that moment, your coordinates are sent to getnopro.com so we can return a list of nearby golf courses. We use them to answer that request and do not use them to track you.
• Legal basis: Your consent (GDPR Art. 6(1)(a)), which you give through the iOS location permission prompt and by choosing to search nearby. You can withdraw it at any time in iOS Settings › Privacy & Security › Location Services › NoPro. Withdrawing it disables location features but does not affect prior lawful processing.

2.2 Scorecard email

• What: When you choose to email a round summary, you enter a recipient email address, and we transmit it to our server together with your handicap index, your hole-by-hole scores (strokes, putts, bunker shots, penalties), and round details (date played, selected tee, and course identifiers).
• How it's used: Our backend uses this data to generate and send the round-summary email to the address you entered. The email address is held only in memory on your device while sending; it is not stored on your device afterward.
• Legal basis: Performance of a service you request (GDPR Art. 6(1)(b)) — i.e. delivering the email you asked us to send. If you enter someone else's email address, you are responsible for having a basis to share their address with us for that purpose.

2.3 Course browsing and search

• What: When you browse or search the course catalogue, we receive your search text and standard pagination parameters.
• Legal basis: Our legitimate interests (GDPR Art. 6(1)(f)) in operating and improving the course catalogue. This involves no profiling.

2.4 Technical data from using our backend

• What: Like any internet service, when your app contacts getnopro.com, our servers and hosting provider automatically receive standard technical information such as your IP address, the date and time of the request, and basic request metadata (e.g. app/OS version sent by your device).
• How it's used: To deliver responses, keep the service secure and reliable, and prevent abuse. We do not use it to identify you personally.
• Legal basis: Our legitimate interests (GDPR Art. 6(1)(f)) in the security and proper functioning of our service.

What we do not collect

We do not collect or use: any account or login, your name, an advertising identifier (IDFA) or vendor identifier (IDFV), App Tracking Transparency tracking, push-notification tokens, contacts, photos, health data, or payment information. NoPro is free with no in-app purchases.

3. Data stored on your device

The following is stored locally on your device and is never automatically sent to us. You can delete each item from within the app:

Deleting the app removes all of this local data from your device.

4. Who we share data with

• No advertisers, data brokers, or analytics companies. We do not sell, rent, or share your personal data for advertising or marketing.
• Our hosting/infrastructure provider — our backend (getnopro.com) runs on Scaleway (Paris, France), which processes data on our behalf as a "processor."
• Our email delivery provider — to send your scorecard email, our backend uses Scaleway's transactional email (SMTP) service, which processes the recipient email and message content on our behalf to deliver it.
• Legal requirements — we may disclose data if required by law or to protect our rights, safety, or the integrity of our service.

We use no third-party tracking, advertising, crash-reporting, or analytics SDKs in the app.

5. International transfers

Our backend and email delivery are hosted with Scaleway in Paris, France, within the European Economic Area (EEA). Your data is processed inside the EEA and we do not transfer it to a country outside the EEA. If this ever changes, we will ensure an appropriate safeguard is in place — typically the European Commission's Standard Contractual Clauses — so your data receives a level of protection essentially equivalent to that in the EEA, and we will update this policy.

6. How long we keep data

• On-device data (Section 3) is kept until you delete it in the app or uninstall NoPro.
• Scorecard email data (recipient address, scores, handicap, round details) is used only to deliver your email and is not retained afterward — it is deleted as soon as the email has been sent.
• Server logs / technical data are retained for up to 30 days for security and troubleshooting, then deleted or anonymised.

7. Your rights

Under the GDPR you have the right to: access your data; request rectification or erasure; restrict or object to processing; request data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.

To exercise these rights, email privacy@getnopro.com. Please note:

• Because NoPro has no accounts, most of your data exists only on your own device, where only you can access or delete it (see Section 3) — we have no copy and cannot retrieve or erase it for you.
• For data our backend received (e.g. a scorecard email), we may need details such as the email address used and approximate date to locate the relevant records, and we may be unable to act if we cannot identify the data in question.

We respond to verified requests within the timeframe required by law (generally one month).

8. Children's privacy

NoPro is rated 4+ but is intended for a general golfing audience and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We protect data in transit using encryption (HTTPS/TLS) for all communication with our backend. Data stored on your device is protected by iOS's app sandbox. We store no passwords and use no login credentials. No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the limited data we handle.

10. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, provide a more prominent notice (for example, within the app or on our website). Continued use of NoPro after a change means you accept the updated policy.

12. Contact

Questions or requests about this policy or your data: