Legal

Privacy Policy

Last updated: 1 November 2026

This policy explains what personal data ForeWay collects, why we collect it, who we share it with and how long we keep it. We have written it to describe what the product actually does, rather than to cover every eventuality.

1. Who we are

ForeWay is operated by ForeWay Ltd, a company registered in England and Wales (company number 17468706), registered office 48 Nevada Road, Canvey Island, Essex, SS8 8EY.

ForeWay Ltd is the data controller for the personal data described here. If you have a question about this policy, or want to exercise any of the rights in section 9, contact us at privacy@foreway.co.uk.

2. What we collect

Information you give us

• Account details — email address, display name, first and last name, and a profile photo if you add one. If you sign in with Apple or Google, we receive your email and, if you share it, your name from them. With Sign in with Apple you can hide your email, and we then receive a private relay address instead.
• Date of birth — asked before your account is created, to apply our minimum age of 13 and to keep the service appropriate for under-18s. Never shown on your profile. See section 10.
• Phone number — only if you choose to provide one.
• Postal address — only if you choose to add one in Settings. It is used to send event prizes and anything else that has to come by post, and is never shown to other players.
• Golf profile — a handicap index if you give one when you sign up (after three rounds, ForeWay works yours out from your rounds instead), and any notes you record.
• Email preference — whether you would like tips and offers by email. It is off unless you turn it on, and we record when you said yes or no.
• Payment details — handled by Stripe or OpenNode. We store a customer reference and your subscription status. We never see or store your card number.

Information created when you play

• Precise location data. When you record a round, we store the GPS position of each shot on our servers, with the round. This is the most sensitive data we hold. The app reads your location only while it is open on your screen, never in the background, and stores it only while you are recording a round; section 5 says who can see it. When you look for a course, it uses your position to find the ones near you, without storing it.
• Scoring and performance data — scores, shot distances, clubs, and the statistics derived from them.
• Events and tours — events you create or join, votes you cast on dates and times, and who you play with.
• Social connections — the players you follow.

Information collected automatically

• Device and browser information, including user agent, for security and troubleshooting.
• Error reports — when something goes wrong in the app, on the website or on our servers, we record what failed, the device, browser and app version, and, if you were signed in, your account’s sign-in identifier, so we can find and fix it. Each report is kept for 30 days.
• Push notification tokens, if you enable notifications.
• Usage analytics, only if you consent — see our Cookie Policy.

3. Why we use it, and our lawful basis

4. AI analysis

Three features send data to Anthropic, which provides the AI model. Anthropic processes it on our instructions as a processor, and the results come back to us. We never send email addresses or payment details.

• Insights and coaching — the round and shot data for the round being analysed.
• Event reports — when an organiser asks for a written report of an event: the players' display names, their scores and shot-by-shot results, and any notes the organiser adds to set the tone.
• Scorecard scanning — the photo you take or choose, so the scores can be read into a round. A scorecard often shows other players' names and scores, and those go with the photo.

5. Who we share data with

We do not sell your personal data. We share it only with the service providers below, who process it on our instructions:

We may also disclose data where we are legally required to, or to establish or defend legal claims.

What other players can see

ForeWay is partly social. If you join an event, tour or round with other players, your display name, profile photo, scores and round statistics for that event are visible to the other participants.

• Your shot positions are visible to the other players in the same round. After the round, nobody else sees them.
• If you broadcast a round live, anyone with its link can follow your scores and see your shots on the hole map while the round is being played. The positions are shown to about 5 metres, not exactly. When the round ends, the shot map is no longer public. Your scores and the leaderboard stay public.
• Your handicap index is shown only if you allow it in your settings. If you hide it, a live leaderboard shows the playing handicap you receive in that round instead.
• If you are under 18, your profile is always private, and your shots are left off public shot maps: only the players in your round see them. Your scores still show. See section 10.

6. International transfers

Some of our providers process data outside the UK, including in the United States. Where that happens, transfers are made under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, as appropriate.

7. How long we keep it

• While your account is open — we keep your account, round, event and performance data for as long as your account exists, because that history is the product.
• If you delete your account — we hard-delete your personal data after a 30-day grace period, which exists so an accidental deletion can be reversed. Two categories survive, described below: billing records, and results from games you played with other people.
• Error reports — 30 days, then deleted. If you delete your account, the ones linked to it are deleted with it.
• Backups — deleted data may persist in encrypted backups for up to a further 35 days before those backups rotate out.
• Billing records — UK company law requires us to keep accounting records for six years. These are retained after account deletion and cannot be erased on request.
• Shared game results — results from events, tours and rounds you played with other people are kept after your account is deleted, detached from your profile. See section 8 for exactly what this means and why.
• Inactive accounts — if you do not sign in for three years, we will email you and delete the account if you do not respond.
• Moderation records — if you report someone, or we make a decision about something you wrote, we keep the report, the decision and the reason for two years after it is resolved, then delete it. We keep it that long so we can recognise repeat behaviour, answer an appeal about an older decision, and account for how we have moderated the service. These records survive account deletion, detached from your profile, for the same reason — deleting your account should not erase the record of a decision we have to be able to justify.
• Anonymised data — we may keep aggregated, anonymised course and performance statistics that can no longer identify you.

8. Deleting your account, and what survives it

When you delete your account we remove your profile and everything that is only about you. Where you played with other people, the result of that game is kept, because it is not only your record — the other players competed in it, and deleting your scores would silently rewrite their leaderboards, matches and handicap history years after the event.

What we delete:

• Your name, email, photo, phone number, postal address, date of birth, biography and login credentials
• Every round you played on your own, in full, including all scores and statistics
• All GPS and shot-location data, from every round, including shared ones
• AI coaching analysis, performance insights and your private notes
• Who you follow and who follows you
• Notification settings, devices and push tokens
• Error reports linked to your account
• Votes you cast on event dates and courses
• Your personal aim lines and saved course preferences

What we keep, detached from your profile:

• Your scorecard for events, tours and multi-player rounds — strokes, putts, penalties and the playing handicap the result was calculated from, so the final standings can still be reproduced
• Your place on the roster of events you joined
• Billing and payment records, for the six years company law requires

Records we keep no longer carry your name or photo. You appear as “Former player” with the default avatar, and the record cannot be traced back to you through our systems. We are being straight with you about the limit of that: in a four-person match, the other three players will still know who the fourth was. So we do not claim this data is anonymous, and we continue to treat it as personal data with all the protections in this policy.

Our lawful basis for keeping it is legitimate interests — the integrity of competitive results that other identifiable people rely on. The right to erasure is not absolute where it would override the rights of others. We keep this to the minimum that serves that purpose: the outcome of the game survives, the detail of how you played it does not. If you believe that balance is wrong in your case, you can object — see your rights below — and we will review it on its facts.

9. Your rights

Under UK data protection law you have the right to:

• Access a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased, subject to the two exceptions in section 8
• Receive your data in a portable, machine-readable format
• Object to, or ask us to restrict, processing based on legitimate interests
• Withdraw consent at any time, where we rely on consent

You can export or delete your data from your account settings, or email privacy@foreway.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

10. Children, and your date of birth

You must be at least 13 to use ForeWay. We ask for your date of birth once, before your account is created, and you cannot use the app or the site until you have given it.

We use it for two things and nothing else: to apply that minimum age, and to know which accounts belong to under-18s so we can keep the service appropriate for them. Your date of birth is never shown on your profile, never shared with anyone, and is not used for advertising or personalisation.

You can only set it once. A date of birth you could edit freely would not be an age check at all, so if you entered it wrongly email hello@foreway.co.uk and we will correct it.

This is a self-declared date rather than verified proof of age, so it raises the floor rather than making it impossible to get round. If you believe a child under 13 has an account, contact us and we will delete it.

11. Security

Data is encrypted in transit. Access to production systems is restricted, and credentials are held in our hosting providers’ secret stores rather than in code. No system is perfectly secure, but if a breach affects your rights we will notify you and the ICO as required.

12. Changes

We will update this page when our processing changes, and revise the date at the top. If a change materially affects your rights we will tell you directly.

13. Contact

privacy@foreway.co.uk
ForeWay Ltd, 48 Nevada Road, Canvey Island, Essex, SS8 8EY