Privacy Policy

1. Who we are

Birrdii Golf Incorporated (“Birrdii”, “we”, “us”) operates the birrdii platform: a marketplace where golfers discover, follow and book golf caddies and coaches, and where golf businesses publish profiles, services and booking links.

This policy explains what personal information we collect through birrdii, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to the birrdii website and app, including when you use them without an account.

2. The short version

• We collect what is needed to create and verify accounts, publish profiles and content, run bookings and conversations, and keep the platform safe.
• Creator and business identity documents are held in private storage and are never shown to other users. They are reached only through short-lived links that our own servers issue after checking who is asking.
• That private storage is the application platform's today. A dedicated private object storage architecture, with immutable originals and server-only access, has been built and tested, but private media has not been moved into it yet.
• We do not sell personal information, and the app carries no advertising networks or third-party tracking pixels.
• A small number of service providers help us run the platform. They are listed in this policy.
• You can edit your information and remove content you have posted in the app, and you can ask for your account to be deleted.

3. Information you give us

• Account details: your name, email address, password, and whether you use birrdii as a golfer, a creator or a business.
• Profile details: display name and username, photograph, bio, city and region, languages, and any links you choose to publish.
• Creator details: years of experience, golf knowledge, skills, certifications, prices, availability, service area, travel rules and the content you post.
• Business details: business name and legal name, category, description, address and coordinates, contact details, opening hours, gallery, social links, the booking tool you link to, and the representative who acts for the business.
• Booking details: the course and location, date and time, number of golfers, holes and cart or walking, round type, notes you add, and the fees that make up the total.
• Content and communications: reels, images, videos, captions and comments you post, and the messages, offers and attachments you exchange with creators, golfers or businesses.
• Requests to us: support requests, reports, and any feedback you send.

Your password is handled entirely by the application platform's authentication service. It is never stored in birrdii's own database, and birrdii staff cannot see it.

4. Signing in with Google or Apple

You can create an account and sign in with an email address and password, or with Google. Email sign-up is confirmed with a six-digit code sent to your address.

Apple sign-in is enabled in the product, but a sign-in attempt on an Apple device did not complete during testing. It is described here because it exists in the product, not because it has been confirmed as working, and it should not be relied on as a way into your account until that is resolved.

When a provider sign-in completes, that provider confirms your identity to us and sends us limited information: an account identifier and the email address on that account, plus the name you agree to share on your first Apple sign-in. We never receive your Google or Apple password, and those providers never receive your birrdii password.

Provider sign-in gives us only the information described above. We do not receive access to your Google or Apple account, and we do not read your mail, contacts, calendar, photos or files through it.

Email sign-up and Google sign-in are confirmed working. Apple sign-in is not verified: it is enabled on the platform, and the attempt made on an Apple device after the device confirmed the user's identity did not complete. This policy is updated when that changes.

5. Information collected automatically

• Technical information needed to deliver and secure the service: device and browser type, the address a request comes from, error and performance data, and timestamps.
• Product usage: which screens are used, which content is viewed, likes, saves, comments, follows, shares, profile and listing views, booking clicks, and which links in the app are opened.
• A sign-in token stored in your browser so you stay signed in between visits.
• Identifiers and records that let us detect abuse, duplicate accounts and fraud.

The app records product events such as a landing page view, a booking click from a reel, or a booking completed from a reel. These carry a content or profile identifier, not advertising identifiers.

6. Cookies and local storage

• birrdii keeps your sign-in token in your browser's local storage. It is what keeps you signed in, and signing out clears it.
• A short-lived marker is kept in your browser's session storage while a Google or Apple sign-in is in progress, so that we can tell you if the sign-in did not complete. It is removed as soon as it is read.
• We do not use advertising cookies, cross-site tracking pixels or data brokers.
• If we add analytics or advertising cookies later, we will update this policy and provide the choices required by law first.

7. Creator and business verification documents

Applicants for a creator profile are asked to confirm they are 18 or older, and to provide a photograph of themselves holding a government-issued photo identification document, together with a photograph of that document. Business applicants provide business details and location evidence for review.

These documents are held in the application platform's private file storage. They have no public address, and the reference to each file is kept on our servers rather than sent to the browser.

To show a document, our servers decide first whether the person asking is entitled to see it, and only then issue a link that expires within minutes. A link that has been issued is a bearer link: anyone holding it can open that file until it expires. The protection is the check made before the link exists, together with the short life of the link itself.

We are moving private media, including these documents, to a dedicated private object storage architecture that keeps originals immutable and releases access only through server-authorized links that expire. It has been built and verified with synthetic test files. No private media submitted by users has been migrated into it yet, so the platform's private file storage described above is what holds it today.

They are reviewed only by authorised birrdii staff or platform administrators, only to confirm age, identity and the claim being made. They are never shown to other users, never published on a profile, and never used for marketing.

Where a claim to an existing business or creator profile is reviewed, the evidence submitted for that claim is handled in the same way.

• What we keep: the submitted documents, the date of birth provided and the age calculated at submission, the review outcome, the reviewer, and the time of the decision.
• Where it is kept: the application platform's private file storage, separate from public profile media, and not yet in the dedicated private object storage described above.

The same pattern covers the other private media in the product: attachments sent in messages and partnership conversations, evidence uploaded with a business or creator profile claim, and creator media that is not free, including subscriber-only and paid content. Each is reached through a short-lived link our servers issue after checking who is asking.

8. How we use personal information

• Create, verify and secure accounts, and keep you signed in.
• Publish and display the profiles, content, prices and availability you choose to publish.
• Match golfers with creators and businesses through discovery, search, filters and distance, and show who is available.
• Run the booking lifecycle: holds, requests, acceptance or decline, reminders, completion and cancellation records.
• Carry conversations between golfers, creators and businesses, and the media or paid content sent within them.
• Record reviews, subscriptions, tips, boosts and paid content.
• Process payments, receipts and payouts once a payment provider is connected.
• Verify age, identity and business claims, confirm business locations, and review reports or content.
• Answer support requests and complaints.
• Understand which parts of the platform are used so we can improve them.
• Meet legal, tax, accounting and record-keeping obligations.

9. What we do not do

• We do not sell your personal information.
• We do not share your private messages, your saved payment method details or your verification documents with other users.
• We do not use verification documents for advertising or for any purpose other than the review they were submitted for.
• We do not run third-party advertising or behavioural tracking inside the app.

10. Who we share information with

We share personal information with the service providers that process it on our behalf, and only as needed to run the platform:

• Base44, the application platform that hosts birrdii and provides its database, authentication, private file storage, email delivery and application services.
• Google, when you choose to sign in with Google, to confirm your identity.
• Apple, when you choose to sign in with Apple, to confirm your identity.
• Cloudflare (R2), the private object storage birrdii has built for private media, including verification documents and attachments. It has been exercised with synthetic test files; no user media is held in it today.
• Google Fonts, which serves the typefaces used on the public site.
• OpenStreetMap, through its Nominatim place lookup, and timeapi.io, both called by our servers to confirm a chosen business location and its time zone. When a map is shown in the app, the map images are loaded from OpenStreetMap's tile servers in your browser.
• Stripe, our payment provider, once payment processing is connected, to process card payments, payouts and receipts.

Where you book a service, message a creator or business, or accept an offer, the other party sees what you share with them in that transaction. We may also disclose information where the law requires it, to respond to lawful requests, to enforce our Terms of Service, or to protect the safety of users or the public.

Some of these providers process data outside Canada, including in the United States and the European Union. The laws of those places may apply to information held there.

11. How long we keep information

We keep account, booking, message and payment information while your account is open, and for a period afterwards where we need it for legal, tax, dispute, safety or record-keeping reasons. Verification documents are kept for the review and for a limited period afterwards, then removed.

When an account is deleted, we remove the personal information we are not required to keep, and tell you what was kept and why. A creator or business account files the deletion request from its own settings in the app, which records it for review and confirmation. Any other account asks through Help & Support in the app, which is the route the app itself gives you.

Specific retention periods per category have not yet been set by birrdii and are listed for owner and legal decision.

12. Your choices and rights

• View and edit your profile information in the app at any time.
• Control what a creator profile shows, including whether your age or gender is displayed, and who can message you.
• Remove content you have posted, except where we must keep a record for legal, safety or dispute reasons.
• Ask for your account to be deleted. A creator or business account files the request from its own settings in the app; any other account asks through Help & Support in the app.
• Ask us for access to your personal information, a correction, or a copy, and ask us to restrict or object to certain processing, by contacting support in the app.
• Withdraw consent where our use of your information relies on it, understanding that some features then cannot work.

The response period we must meet, and the full list of rights in each place where birrdii operates, are listed for legal confirmation.

13. Children

birrdii is intended for adults. Creator and business applicants confirm they are 18 or older, and creator applications are reviewed against the identification documents provided. We do not knowingly collect personal information from children.

If you believe a child has created an account, contact us through the in-app support form and we will investigate and remove the account.

Whether golfer accounts are also restricted to adults is listed for owner confirmation.

14. How we protect information

• Private media, including verification documents, is held in private storage rather than at a public address. The stored reference to each file is kept on our servers.
• Before private media is shown, our servers check the account that is asking, and issue a link that expires within minutes. A link that has already been issued is a bearer link for its short life, so we keep those links short.
• Private media is served from the application platform's private file storage today. The dedicated private object storage birrdii has built, with immutable originals and server-authorized links, is verified but not yet carrying live private media.
• Role-based access limits who inside birrdii can see moderation, verification, sponsorship and financial records.
• Traffic to the platform is served over encrypted connections.

No system is perfectly secure, and birrdii claims no security certification. This section describes what is in place today and does not claim the protection a future migration is expected to add.

15. Changes to this policy

If this policy changes, we update the version and the date at the top of this page. Where a change is significant, we tell you in the app before it takes effect.

16. How to contact us

Privacy, business and support questions: contact@birrdii.com. This address is active and monitored, and you do not need an account to write to it.

You can also use the in-app support form in Help & Support and choose the category that fits. Requests raised there are recorded, reviewed by birrdii, and answered at the contact details on the account that raised them.

contact@birrdii.com is birrdii's published contact for privacy, business and support questions. No mailing address and no named privacy officer are published yet.