Privacy Policy

Foremates (“App”, “we”, “us”, “our”) is operated by Luduslabs Ltd, a company registered in England & Wales with its registered office at Billericay, Essex, United Kingdom. This Privacy Policy describes how we collect, use, disclose and protect your information when you use the Foremates mobile app or website.

We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR), EU GDPR and the UK Data Protection Act 2018.

1. Eligibility & Age Requirement

Foremates is intended for users aged 13 and over. If you are under 18, you confirm that you have permission from a parent or legal guardian to use the App. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. Parents or guardians who believe their child under 13 has provided us with personal information can contact us at info@luduslabs.net.

2. Information We Collect

A. Information you provide to us

• Account details: name, email address, profile photo, date of birth (for age verification), login credentials.
• Profile information: home course, handicap, preferred tees, bio, golf stats.
• User content: posts, photos, captions, comments, messages, scorecards, event details.
• Social graph: friend connections, group memberships, society or club affiliations.
• Communications: correspondence with our support team or feedback submitted through the App.

B. Information collected automatically

• Device information: device type, operating system, device identifiers, app version, language, time zone.
• Usage information: pages viewed, features used, session duration, interaction events.
• Diagnostic data: crash logs, performance traces, error reports.
• Approximate IP-based location for security and regional compliance.

C. Information from third parties

• If you sign in with Apple, Google or Facebook, those providers share basic profile information (name, email, avatar) with us in accordance with your permissions.
• Course data and certain golf facility information may be sourced from public third-party databases.

3. How We Use Your Information

We use your information to:

• Create and manage your account and profile
• Enable social features (friends, groups, events, messaging)
• Track and display your golf statistics, rounds and performance
• Show nearby or relevant golf clubs and courses
• Process subscriptions (via Apple/Google) and unlock paid features
• Provide customer support and respond to your requests
• Send service-related communications (account, transactional)
• Detect, prevent and address fraud, abuse or security incidents
• Improve and optimise the App through analytics and research
• Comply with legal obligations

We do not use your personal information for advertising, ad profiling, or sale to third parties.

4. Legal Bases for Processing (UK / EU users)

• Performance of a contract: to provide the App and its features.
• Legitimate interests: to secure the Service, prevent abuse, and improve performance.
• Consent: for optional features such as push notifications, precise location, or marketing emails — you may withdraw consent at any time.
• Legal obligation: to comply with applicable laws.

5. When We Share Your Data

We share information only in the following circumstances:

• With other users according to your visibility settings (e.g. your posts are visible to friends or group members you choose).
• Service providers who process data on our behalf (hosting, analytics, customer support) under strict contractual obligations.
• Legal authorities when required by law, court order, or to protect our rights, users, or public safety.
• Business transfers: in the event of a merger, acquisition, or asset sale, your information may be transferred to the successor entity, subject to equivalent privacy protections.

We never sell, rent or trade your personal information.

6. Third-Party Services We Use

We rely on the following categories of processors:

• Google Firebase— authentication, push messaging, analytics, crash reporting
• Google Analytics / Google Analytics for Firebase— aggregated product analytics
• Sentry— crash reporting and performance monitoring
• Pusher / Laravel Echo— real-time messaging and live scoring
• RevenueCat— subscription management (does not see card details)
• Apple, Google, Facebook— authentication providers
• Resend— waitlist sign-ups and email delivery (website only)
• Cloud hosting infrastructure— secure backend and storage

Each provider processes data under its own privacy policy. We select providers with strong security, privacy and compliance practices.

7. Authentication Providers

You may sign in with Apple, Google, Facebook, or with email and password. Sign-in providers share basic profile information (name, email address, profile image) with us. We do not receive your provider passwords. If you signed in with Appleand used the “Hide My Email” option, we only see a relay email address generated by Apple.

8. Subscription Payments

Optional subscriptions are processed through the Apple App Store and Google Play Store. Payment card details are collected, stored and processed by Apple or Google in accordance with their own terms and privacy policies. We never store or see your full card number or security code. We receive only a purchase identifier, product ID, and renewal status from Apple/Google or from our subscription intermediary (RevenueCat).

9. Tracking & Analytics (App Store Disclosures)

Foremates uses analytics and diagnostic tools to improve the Service. We collect usage events, crash data and performance data. We do not use the iOS App Tracking Transparency (ATT) framework to track you across other apps and websites for advertising.

App Store “Data Used to Track You”: None.

App Store “Data Linked to You”: account identifiers, email, user content, usage events, diagnostics — used for app functionality, analytics and product personalisation only.

10. Push Notifications

With your permission, we send push notifications for account activity, invites, event reminders, and score updates — and, if you opt in, play reminders based on the days and times you usually play, worked out from the rounds you have recorded in Foremates. You can turn off push notifications at any time in your device Settings; play reminders can be turned off in the App under Settings → Play reminders.

11. Location Data

With your permission, the App uses your location to show nearby clubs and courses and to power live GPS yardages while you play a round.

If you turn on the optional Round Reminders feature, the App additionally asks for background (“Always” / “Allow all the time”) location access and uses your device’s built-in geofencing to notice when you arrive at a golf course, so it can remind you to score your round. This check happens entirely on your device: your background location is never transmitted to our servers or to anyone else, and no location history is collected or stored. Round Reminders is off by default, and you can turn it off at any time in the App under Settings → Round reminders, which stops all background location use immediately.

You may revoke location permission at any time in your device Settings.

12. Camera, Photos & Media

You may grant access to your camera and photo library to upload profile pictures, scorecard photos or post images. Media is used only to fulfil the action you requested and is stored in connection with your account. You can revoke permission at any time in device Settings.

13. Data Storage & Security

Your data is stored on secure cloud infrastructure. We protect it using:

• HTTPS/TLS encryption for data in transit
• Encryption at rest where supported by our hosting provider
• Role-based access controls and principle of least privilege for Luduslabs staff
• Secure key management and credential rotation
• Regular security reviews and dependency patching

While we use industry-standard measures, no system is 100% secure. If you believe your account has been compromised, contact us immediately at info@luduslabs.net.

14. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After deletion, most personal data is removed within 30 days; certain records may be retained for a limited time for legal, tax, fraud-prevention or accounting obligations.

15. Account Deletion

You may delete your account at any time by:

• Opening the App and going to Settings → Account → Delete Account
• Visiting foremates.com/account-deletion
• Emailing info@luduslabs.net from your registered address

Upon verification, your account, profile and user content will be permanently deleted within 30 days, except where we are legally required to retain certain information.

16. Your Rights

If you are located in the UK, the EEA, Switzerland, or a jurisdiction with equivalent laws, you have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to certain types of processing
• Request data portability in a machine-readable format
• Withdraw consent for processing based on consent
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local data-protection authority

We will respond to valid requests within one month. To exercise these rights contact us at info@luduslabs.net.

17. International Transfers

We may transfer, store and process your information outside your country of residence. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or adequacy decisions.

18. Children

Foremates is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users aged 13 to 17 are welcome but must have parental or guardian consent.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

20. Contact Us

For any privacy-related questions, requests, or complaints, please contact us at:

Luduslabs Ltd (Data Controller)
Billericay, Essex, United Kingdom
Email: info@luduslabs.net