Privacy policy – Birdy app
Last updated: 23/09/2026
Data controller: Birdy Golf OÜ (registry code 17233501), info@birdy.ee
Registered address: Värava, Leina küla, Häädemeeste vald, Pärnu maakond, 86504, Estonia

1. Introduction
This privacy policy explains how Birdy Golf OÜ (“we”, “us”) collects, uses, stores, and protects personal data when you use the Birdy mobile application (“App”).

By using the App, you acknowledge this policy. If you do not agree, please do not use the App.

2. What data we collect
Depending on how you use the App, we may process:

Account and profile data
– First and last name
– Email address
– Profile photo (for example from Google or Apple sign-in)
– Custom avatar and profile settings
– Optional self-reported skill ratings (such as PDGA or DG Metrix values)

Location and regional data
– Approximate country, region, and city derived from device location or reverse geocoding
– GPS coordinates while you have an active round open, to show live presence and related features
– Coordinates used for course maps, nearby course search, and weather lookup for a round

Gameplay and social data
– Round scores, throws, penalties, and round metadata
– Casual and ranked round history, statistics, achievements, streaks, and step counts during rounds
– Birdy rating, ranking points (RP), league position, and weekly challenge progress
– Friend connections, invites, and activity you choose to share with friends
– Messages you send in ranked mini-competition lobbies
– Round reactions and other in-app social interactions
– Course information you submit or edit

Health and fitness data
– The number of steps you took during a round
– Where you allow it, this step count is read from Apple Health (iOS) or Health Connect (Android) for the period between the start and the finish of that round; otherwise it is measured by your device’s own motion sensor
– We read step counts only. We do not read any other health or fitness data type, and we never write anything back to Apple Health or Health Connect

Purchase data
– Supporter packs and Birdy Club subscriptions you buy, with their product, price, currency, store, country, and purchase and renewal dates
– Payment is handled entirely by Apple (App Store) or Google (Google Play); we never see or store your card or bank details

Technical and device data
– Firebase user ID and authentication tokens
– Push notification tokens (FCM), device identifiers, and device platform
– App language, timezone offset, and notification preferences
– Diagnostic, security, and usage data such as IP address, app version, and interaction events collected through Firebase Analytics

Support and moderation data
– Feedback, bug reports, and user reports you submit
– Records related to account bans or moderation actions when applicable

We do not ask for your national ID code or bank account details in the current App.

3. How and why we use your data
We use personal data to:
– Create and manage your account
– Provide scoring, live round features, ranked mini-competitions, and matchmaking
– Display leaderboards, statistics, profiles, and social features
– Send push notifications and in-app messages you have enabled
– Improve, secure, and analyse the App
– Review user-submitted courses and handle support requests
– Enforce our terms, prevent abuse, and protect other users

4. Legal basis (EEA users)
Where applicable under GDPR, we rely on:
– Performance of a contract – to provide the App and your account
– Legitimate interests – to secure the service, prevent fraud, and improve features
– Consent – for optional permissions such as location access and push notifications, which you can withdraw in device or App settings
– Consent – for ads measurement with Meta (see section 6), which you can withdraw at any time in ACCOUNT → PRIVACY

5. Who can see your data
Depending on App functionality and your settings, other users may see:
– Your name, avatar, profile stats, and ranking information
– Scores and round activity shared with friends, opponents, or on leaderboards
– Your step totals from rounds, on step leaderboards
– Messages you post in ranked mini-competition lobbies

We do not sell your personal data.

6. Third-party service providers
We use trusted providers that process data on our behalf and under appropriate safeguards:
– Google Firebase – authentication, database, cloud functions, push messaging, and analytics
– Google Sign-In and Apple Sign-In – account sign-in
– RevenueCat – managing in-app purchases and subscriptions (supporter packs and Birdy Club), linked to your Birdy user ID
– Meta Platforms (Facebook SDK) – only if you allow ads measurement: that the App was installed and opened and that you created an account, with device and app information and, where you also allow tracking on iOS or have not turned it off on Android, your device’s advertising ID. We use it to see which of our Facebook and Instagram ads bring new players. Scores, location and profile details are never shared with Meta
– Open-Meteo – weather lookup using round coordinates (no account is created for you there)
– Platform location and geocoding services on your device (for example Apple or Google services)

These providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. Health and fitness data
Step counts are health and fitness data, and we handle them with particular care.

– What we access: only the number of steps recorded while you were playing a round, for the period between when you start that round and when you finish it. We do not access any other health or fitness data type.
– Where it comes from: with your permission, Apple Health on iOS or Health Connect on Android. We ask because a health store records continuously and includes steps from a paired watch, which makes a round’s step count far more accurate than what we can measure on our own. Granting this is entirely optional — if you decline, Birdy falls back to your device’s motion sensor and every other feature works exactly as before.
– What we use it for: showing the step count on your round summary and your own statistics, and counting it towards step totals and step leaderboards in the App. We do not use it for anything else.
– Who can see it: your step totals may be visible to other users on leaderboards and on your profile, in the same way as your scores.
– What we never do: we never write data to Apple Health or Health Connect, we never use health data for advertising or marketing, we never sell it, and we never share it with third parties for their own purposes.
– Withdrawing and deleting: you can revoke the permission at any time in Apple Health or in Health Connect, which stops any further access immediately. Step counts already recorded against your rounds are deleted together with those rounds and with your account, as described in the retention section below.

8. Data retention
We keep personal data while your account is active and as needed to operate the App.

When you delete your account, we permanently remove your profile, stats, friends, and round history from our systems, except where we must retain limited information for legal, security, or dispute-resolution reasons.

Aggregated or anonymised analytics data that can no longer identify you may be kept longer.

9. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. No online service can be guaranteed completely secure.

10. Your rights
If you are in the EEA or otherwise covered by applicable data-protection law, you may have the right to:
– Access the personal data we hold about you
– Correct or update inaccurate data
– Delete your account and associated data
– Restrict or object to certain processing
– Request data portability where applicable
– Withdraw consent where processing is consent-based
– Lodge a complaint with a supervisory authority

To exercise these rights, contact info@birdy.ee. You can also delete your account directly in the App.

In Estonia, complaints may be submitted to the Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.

11. Children
The App is not directed at children under 13. If you are under 18, you may use the App only with permission from a parent or legal guardian.

If you believe we have collected personal data from a child without appropriate consent, contact us and we will take appropriate steps.

12. Notifications and marketing
We may send service-related notifications about rounds, friends, ranked matches, and account activity. You can manage many notification types in the App.

If we send marketing messages, you can opt out at any time through App or email settings.

13. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated through the App. The updated policy takes effect when published unless stated otherwise. Continued use after changes means you accept the updated policy.

14. Contact
Questions or requests about privacy: info@birdy.ee