Privacy Policy
Effective Date: July 28, 2026
Last Updated: July 28, 2026
1. Introduction
BagTag ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BagTag mobile application. BagTag is a social platform for discovering, reviewing, and sharing golf courses. Some features involve user-generated content and interaction with other users. You have control over how your information is shared within the app through privacy settings.
2. Information We Collect
Personal Information
We may collect: • Name and email address • Phone number (if you choose to verify one) • Profile photo and bio • Golf handicap and playing preferences
User Content
• Reviews, ratings, and comments • Photos and videos you upload • Messages sent to other users
Social Data
• Followers and following lists • Likes, reactions, and interactions • Profile visibility preferences
Contact Data (Optional)
If you choose to turn on contact discovery, the BagTag app reads the phone numbers and email addresses stored in your device's address book and converts each one into a hashed value on your device. Only those hashed values are sent to us. We do not receive or store the names, phone numbers, or email addresses themselves. Contact discovery is entirely optional, and every other feature of BagTag works without it. See Section 5 for details.
Location Data (Optional)
• Precise location (only if you grant permission) • Used solely to calculate distance to nearby golf courses • We do not store location history
Device and Technical Data
• Device identifiers • IP address • Push notification tokens • App usage data and interactions • Performance data and diagnostics • Crash logs and error reports
3. How We Use Your Information
We use your information to: • Provide and maintain the app • Personalize your experience • Enable social features (following, messaging, interactions) • Help you find people you already know on BagTag, if you turn on contact discovery • Display nearby courses and distance information • Send push notifications and updates • Improve app performance and fix bugs • Ensure security, prevent fraud, and enforce our policies
4. Social and Interactive Features
BagTag includes social features such as: • User profiles • Following and followers • Likes, comments, and reactions • Direct messaging (1:1 only, requires mutual following) • User-generated content (reviews, photos, videos) • Ability to report users or content that violates our guidelines Content you share may be visible to other users depending on your privacy settings. • Profiles are public by default but can be hidden from other users • Reviews are public by default but can be made visible only to you • Followers and following lists are visible to other users unless your profile is hidden • Blocking another user will fully hide profiles, content, and interactions (including past content) We may review and take action on reported content or accounts to maintain a safe and respectful environment.
5. Contact Discovery
Contact discovery is an optional feature that helps you find people you already know on BagTag.
How it works
If you enable contact discovery, the app standardizes the phone numbers and email addresses stored in your device's address book and converts each one into a hashed value on your device. Only those hashed values are sent to BagTag. We compare them against hashed versions of the phone numbers and email addresses associated with BagTag accounts. When there is a match, we let you know that someone in your contacts is already on BagTag. We keep the hashed values so that we can also notify you if and when someone in your contacts joins later. We do not receive the names, phone numbers, or email addresses themselves, and we cannot read your address book. So that people who already know you can find you, we also store hashed versions of the phone number and email address on your own BagTag account, and compare them against hashed values submitted by other users.
What we do not do with contact data
• We do not sell contact data. We will never sell it. • We do not use contact data for advertising, ad targeting, or profiling. • We do not use contact data to build profiles of people who are not BagTag users. • We do not contact or message people in your address book on our own initiative. • We do not disclose your contact list, or any part of it, to other users or to third parties. • We do not use contact data for any purpose other than helping you discover connections as described above.
Inviting people you know
BagTag lets you invite people from your address book. Invitations are composed and sent from your own device, using your phone's own messaging or email app. We do not send invitations on your behalf, we do not receive the phone number or email address of the person you invite, and we do not store any record of who you invited.
People in your contacts who do not use BagTag
If a hashed value does not match any BagTag user, we retain it so that a match can be made if that person later joins BagTag. We do not know who that person is, we do not create an account or profile for them, and we do not contact them in any way.
Your control
• Contact discovery is off until you turn it on • You can turn it off at any time in Settings • Turning it off deletes the hashed values we hold for you • Deleting your account deletes the hashed values we hold for you • You can also revoke the Contacts permission in your device settings
Requests from people who are not BagTag users
If you are not a BagTag user and you do not want your phone number or email address to be matched through another person's contact discovery, contact us using the details in Section 19. We will suppress it from future matching.
6. Profile Visibility Controls
You can control who can see your profile within the app. • When your profile is visible, other users can view your profile information, reviews, and social activity (subject to your other privacy settings) • When your profile is hidden, your profile, reviews, and social activity are not visible to other users Hidden profiles are also excluded from contact discovery. If your profile is hidden, you will not be shown as a match to people who have your phone number or email address saved in their address book. You can change this setting at any time in the app.
7. Device Permissions
BagTag may request the following permissions. All are optional, and the app functions without them: • Camera — to capture photos and videos for reviews • Photo Library — to upload existing media • Contacts — to find people you know who are on BagTag, or who join later (see Section 5) • Location (Precise) — to show distance to nearby courses You can manage permissions at any time in your device settings.
8. Notifications
We may send push notifications (if enabled) related to: • Likes and reactions • Comments on your content • New followers • Direct messages • Someone in your contacts joining BagTag (only if you have enabled contact discovery) • App updates and announcements You can disable notifications at any time in your device settings.
9. Third-Party Services and Integrations
We use trusted third-party services to operate and improve BagTag:
Google Sign-In / Apple Sign-In
Used for authentication. These services may provide your name, email, and profile information.
Firebase Cloud Messaging
Used to send push notifications. Collects device tokens and notification preferences.
Firebase Performance Monitoring
Collects app performance and diagnostic data.
Sentry
Used for error logging and crash reporting. May collect device information, IP address, and crash data.
Google Maps
Used to display maps and location-based features.
Supabase
Provides backend infrastructure and data storage for user accounts and app data.
Twilio
Used to send verification codes when you verify a phone number.
These providers may process data on our behalf in accordance with their own privacy policies. We do not share contact data with any third party for that third party's own purposes.
10. Information Sharing
We may share your information: • With other users (based on your activity, privacy settings, and profile visibility preferences) • With service providers that help operate the app • When required by law or legal process • In connection with a business transfer (e.g., merger or acquisition) We do not sell your personal information and will never sell individual user data. This includes contact data, which is never sold, shared with other users, or disclosed to third parties for their own purposes.
11. Data Retention
We retain data as follows: • Account information — retained until you delete your account • User content — retained until deleted by you or your account is deleted • Contact data — retained until you turn off contact discovery or delete your account, whichever comes first • Crash logs and diagnostics — retained temporarily for debugging and then deleted • Analytics data — may be retained in aggregated and de-identified form
12. Your Rights
General Rights
You have the right to: • Access your data • Correct inaccurate information • Delete your account and data • Withdraw consent • Opt out of communications You can delete your account at any time within the app (Settings → Privacy). You can also control your profile visibility, content privacy, and contact discovery directly within the app.
13. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: • Know what personal information we collect and how it is used • Request deletion of your personal information • Opt out of the sale or sharing of personal information The categories of personal information we collect are identifiers (including name, email address, phone number, and device identifiers), internet or network activity, approximate and precise geolocation (if permitted), user-generated content, and hashed phone numbers and email addresses derived from your address book (if you enable contact discovery). We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.
14. GDPR (European Users)
If you are in the European Economic Area (EEA), you have rights including: • Access, correction, or deletion of your data • Restriction or objection to processing • Data portability We process your data based on: • Your consent • Performance of our services • Legitimate interests (such as improving the app and ensuring security) Contact discovery is processed solely on the basis of your consent. You may withdraw that consent at any time by turning off contact discovery in Settings, which deletes the contact data we hold for you. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. If your personal information was uploaded to BagTag by another user through contact discovery, you may exercise your rights of access, correction, and erasure by contacting us using the details in Section 19.
15. Data Security
We use appropriate technical and organizational measures to protect your data, including secure data transmission, on-device hashing of contact data before it leaves your phone, and restricted internal access. However, no system is completely secure.
16. Children's Privacy
BagTag is intended for users aged 14 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete the account and remove that information.
17. International Data Transfers
Your information may be processed in countries outside your own. We take steps to ensure appropriate safeguards are in place.
18. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the policy within the app.
19. Contact Us
If you have questions about this Privacy Policy, please contact us: