1. What we collect
When you use FirstCut, we collect the following information:
- Account information — Your email address and name, provided through Sign in with Apple, Google OAuth, email and password, or magic link sign-in.
- Golf data — Courses you save, rounds you play, hole-by-hole scores, and putts.
- Rules Assistant queries — Questions you ask are sent to our AI provider and recorded with your account for usage records. Attached photos are sent for processing and are deleted by FirstCut after the response.
- Scorecard photos — Images you upload for course scanning. These are sent to our AI provider and deleted by FirstCut after extraction.
- Session information — We store a minimal session token on your device to keep you signed in.
- Approximate location — If you choose Find Courses Near Me, the Android app sends a coarse latitude and longitude to FirstCut to locate nearby golf courses. FirstCut rounds and caches the search area; it does not request background or precise location.
- Product usage and reliability — We record bounded first-party events such as app sessions, course-setup steps, scorecard sharing, feature outcomes, response time, app version, build number, and error category. These records do not contain Rules Assistant question text, photos, scorecard images, email addresses, access tokens, or raw error stacks.
2. How we use your data
- To provide the core service: tracking your golf rounds, saving courses, and displaying your history.
- To process scorecard images and rules questions via AI.
- To send you emails you request (account confirmation, password recovery, scorecard summaries, and magic link sign-in).
- To prevent abuse and enforce request limits.
- To understand whether golfers complete and return for rounds, improve feature usability, and find reliability problems by app version.
We do not sell your data. We do not serve ads. We do not build advertising profiles.
3. Third-party services
FirstCut uses the following third-party services to operate:
- Supabase — Database and authentication. Your account and golf data are stored in Supabase's cloud infrastructure. Supabase Privacy Policy
- Anthropic (Claude) — AI processing for scorecard scanning and rules questions. Images and text are sent to Anthropic's API for processing. Under Anthropic's standard API policy, inputs and outputs are deleted from its backend within 30 days, except when a different retention agreement applies or longer retention is required for safety or legal reasons. Anthropic data retention
- Resend — Email delivery for account confirmation, password recovery, scorecard summaries, and other transactional emails. Resend Privacy Policy
- GolfCourseAPI — Course search database. Search queries are sent to this service; no personal data is shared.
- Google Places — Nearby golf-course discovery. A rounded search location is sent from FirstCut's server; the Google Places key is never included in the app.
- Vercel — Hosting and deployment. Vercel Privacy Policy
4. Data storage and retention
- Your account and golf data are stored as long as your account exists.
- Rules Assistant question records are stored with your account and deleted when you delete your account.
- Active round state is cached in the browser or native app's private storage and cleared only after the server confirms completion.
- FirstCut deletes scorecard photos and Rules Assistant images after processing. Anthropic may retain API inputs and outputs for up to 30 days under its standard policy, subject to the exceptions described above.
- Raw product-usage events are retained for up to 13 months and are deleted when you delete your account.
5. Your rights
- Delete your account — You can delete your account and all associated data at any time from the app, or follow the instructions on our account deletion page without installing the app. This action is irreversible.
- Access your data — Your rounds, courses, and scores are visible in the app at all times.
If you are in the EU, UK, or California, you may have additional rights under GDPR or CCPA.
6. Cookies
FirstCut uses a session cookie managed by Supabase to keep you signed in. First-party product events use that authenticated session; they do not require an analytics cookie. We do not use advertising identifiers, device fingerprints, cross-app tracking, analytics cookies, or advertising cookies.
7. Children
FirstCut is not directed at children under 13. We do not knowingly collect data from children under 13.
8. Changes
We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page.