Privacy Policy
Effective date: November 2, 2026
This Privacy Policy explains what personal data Windegrated Solutions, LLC (“we”, “us”) collects through Map My Range, our app for golfers, and through our website, how we use it, who we share it with, and the rights you have over it. We tell you exactly what we keep and why: what the app genuinely needs to make your practice numbers mean something, what helps us understand and grow the product, and the choices you have over each.
If you run a driving range, this is the wrong page. Manage My Range and the operator dashboard have their own Operator Privacy Policy, because what we collect from an operator is different from what we collect from a golfer.
1. Who we are
Windegrated Solutions, LLC operates MapMyRange. This policy covers Map My Range, the app for golfers on iPhone and Android — it measures distances on a driving range and keeps a record of your shots — and our website at mapmyrange.com.
We also make Manage My Range, a separate app for the staff who run a driving range, and a web dashboard at app.mapmyrange.com. Those are covered by the Operator Privacy Policy, not by this one.
For any privacy question or request, contact us at privacy@mapmyrange.com. If your question is about an account — including having one deleted — email support@mapmyrange.com.
2. Personal data we collect
These are the categories of personal data we collect, or may collect, through the golfer app and the website. We do not collect personal data outside this list.
- Account information. Your email address, your name, and a unique account identifier. Authentication is handled by WorkOS on our behalf, and we never store your password — they do. You create your own account in the app, with your email address, by continuing with Google, or by signing in with Apple; if you choose Google or Apple, we receive your name and email address from them through WorkOS. Apple may give us a private relay address instead of your real one if you choose to hide it, and it sends your name only the first time you authorise this app.
- Date of birth. During onboarding we collect your date of birth and store it on your account. We use it to verify that you are at least 13, to apply privacy protections for younger golfers, and to lift age-based restrictions on your birthday without asking again.
- Using the app without an account. You can use parts of Map My Range as a guest, without an account. The app then keeps a random identifier for its install, the install ID, in the app’s own storage on your phone. It is not your phone’s advertising ID or any other identifier your phone gives apps, it is not kept anywhere that survives deleting the app, and reinstalling the app gives it a new one. The install ID is an identifier, and we treat what it carries as personal data. Before the app relies on it, it asks Apple’s App Attest on iPhone, or Google Play Integrity and the phone’s secure hardware on Android, to confirm that it is the genuine Map My Range app on a genuine device, and we keep a record of that registration: the install ID, which service confirmed it, when it registered, when and how many times it has checked in since, and the public key the phone’s secure hardware made for the install, with that key’s identifier. When you start a practice session as a guest, we record it against the install ID: the range, when the session started and ended, how long it lasted, when you left the range’s boundary, how it ended, and, if you signed in or signed up during it, whether you made a new account. We do not store your position with it. To show you yardages, the app sends your position with each request for distances, and we use it to work them out, including the ground-elevation lookup that section 5 describes and, at a range without a centre, the weather lookup described under “Precise device location”, without storing it against your install or any session. If you mark interest in an event as a guest, the app keeps that on your phone for up to a day, and sends it only after you have signed in and confirmed it. If you record a shot as a guest, the app keeps it on your phone, with where you stood, and sends it only after you have signed in, as one of your account’s shots; it deletes it instead if you choose not to sign in, leave the range, are stopped by the age check, or have not signed in within four hours.
- Golf shot data. Content you create in the golfer app, including your bag and club selections, recorded shot distances, the outcome you recorded for each shot (hit, left, right, short, or long — fairway practice is hit, left, or right), and the timestamps of those shots, together with the conditions we recorded at the time — wind, temperature, air pressure and humidity — so a distance can be re-checked later against the conditions it was measured in. This data is stored in your account.
- Precise device location. With your permission, the golfer app uses your device’s precise location while the app is open, for two things: to measure the distance between you and targets on the range, and — if you have shot marking — to show you the satellite map you place a mark on, described in the next bullet. During a practice session you start, the app also keeps using your location while your phone is locked or another app is in front. It does this so that your distances are ready and precise the moment you take your phone out, and so that it notices when you leave the range and your session can end then. Your phone shows when this is happening: on iPhone, the blue location indicator at the top of the screen; on Android, where the app does this on Android 8 and later only, a notification headed “Practice session at” and the range’s name, which reads “Keeping your distances ready. Stops when you leave the range.” On Android 13 and later, that notification appears only if you allow Map My Range’s notifications; if you do not, Android lists Map My Range among the active apps in Quick Settings instead. It stops when the session ends, whether you end it, it ends on its own or you sign out; about two minutes after you leave the range’s boundary; if you turn off the app’s access to your location, or on Android its access to your precise location; after ten minutes in which your phone could not place you precisely, as on an iPhone with Precise Location turned off; and four hours after the session started at the latest. Closing the app completely ends it too: force-quitting it on iPhone, or swiping it away on Android. The app never starts it on its own: only a practice session you start turns it on, and only while the app is open in front of you. While the app is not in front, nothing that carries your position is sent to us — your distances, the ranges list and range search wait until you open it again — and the positions your phone takes then are not saved. When you take your phone out, the latest one is what your distances are measured from, and a shot you record then keeps where you were standing, as every shot does. All that reaches us about where you are from a locked phone is the time you left the range’s boundary, or came back inside it, with no coordinates. Where you were standing for each shot is kept with your account — we save the coordinates themselves, and we save the measurements we work out from them: the direction from you to the target you aimed at, how far away it was, how much higher or lower the ground at the target is than where you stood, and how much of the wind was helping or hurting along that line. We also keep which target you aimed at. With each position we keep how precise your phone said it was, in metres, and how old that reading was when you recorded the shot, in seconds, so that we can tell how far each one can be trusted. All of it stays for as long as your account exists. None of this is anonymous, and we will not describe it that way. A range’s target positions are not secret, so the direction and the distance on their own would be enough to work out where you were standing — and we store that position outright in any case. We keep it because it is what every practice number is measured from: how far you actually hit each club, how consistent you are, and where your shots group around a target. It is deleted when you delete your account. We do not track where you go, and we never sell your location or use it for advertising. To look up the weather at the range, for the “plays like” figure and the conditions we record with each shot, we use the range’s centre; at a range without one, we use your position rounded to about a kilometre, which goes to the weather services we use: the US National Weather Service, its Aviation Weather Center, and Open-Meteo.
- Ranges inside residential communities. Some ranges sit inside a residential community and are shown only to people near them. To decide whether to show you one, the app sends your position, rounded to about 110 metres when it lists ranges and in full when you start a session, and we check it against the community’s boundary and do not keep it. Without an account, the app must also have passed the install check described above.
- Marked shots (part of our paid tier). If you have shot marking, you can record where one of your shots came down. Every account created before April 1, 2027 has it free until that date. You place the mark yourself — you move a satellite map under a fixed crosshair and then tap a separate button to confirm it. The app never places one for you, never marks a shot on its own, and marks nothing in the background. What you are placing is your own recollection of where the ball came down, not where it came to rest after it bounced and rolled, and not anything the app or your phone watched or measured. We keep the coordinate you placed, the coordinate of the target you were aiming at as it stood at that moment, and the two measurements we work out from them: how far long or short of the target your mark was, and how far left or right. We keep the coordinates as well as those measurements because if we ever find the calculation behind them wrong, they are the only way to correct your history rather than leave it quietly skewed. All of it is stored with your account while you have access to shot marking, and it is deleted when you delete your account. If your access ends, we keep your marks for 90 days, so they are still there if it resumes; we tell you in the app before that period runs out, and then we delete them. Your shot history is not affected. We also keep a record of the access itself: that your account has it, how it was granted, and when it started and ends. None of this is anonymous either, and we will not describe it that way — a distance from a target, together with which target it was, is a position, and a range’s target positions are not secret. What is fairly said about it is narrower and it is about how the data arrives rather than how it is stored: every mark is something you chose to make, on screen, one shot at a time. If you never mark a shot, none of this applies to you and nothing about the rest of the app changed.
- Range event interest. If you mark that you are interested in an event at a range, we store that you did so — your account, the event, and the time you marked it. We use it to show you which events you marked, to give the range an aggregate count of how many golfers are interested (never your name), and to send you a notification if that event is cancelled or its date or time changes; you can withdraw your interest at any time in the app, which deletes the record and ends those notifications for that event. It is never used as a marketing list.
- Notifications and messages from ranges. If you allow notifications, we store a push notification token for your device so that we can deliver them. We keep your notification settings — which channels are on, weekly limits, quiet hours and your time zone — and, for each range, whether you have agreed to hear from it, on which channel, and how you agreed. When a range sends a message through us, we keep a record for each golfer it was addressed to: the channel, the message as sent, which version you received if the range tried more than one, whether it was delivered, and — where the message lets us tell — whether you opened it or tapped its link, with the times. Messages shown inside the app are kept for you, along with whether you have read or dismissed them. We use all of this to deliver messages, to apply your consents, limits and quiet hours, to measure how messages perform, and to stop the ones you have turned off.
- Diagnostic and crash data (via Sentry). To keep the app stable we use Sentry to collect crash reports, error diagnostics, and performance data. As of the effective date above, Sentry may also record the IP address associated with a diagnostic event. We are removing IP capture in an upcoming release (temporary until app v1.1); it is used only for debugging and never for advertising.
- Device and technical information. Our servers receive your IP address with every request, and we use it to keep the service secure and to limit abuse — for example, by capping how often requests can be made. We may also collect limited technical information about your device, such as its model, operating system, app version, and language and region settings, to keep the app working and to diagnose problems.
- Maps on Android. On Android, the maps in the app are drawn by Google Maps, and Google’s mapping software inside the app sends some information from your device to Google, as section 5 describes. We do not receive that information.
- Usage events, and how you use the app. The app records a fixed list of steps: opening it for the first time; opening it, or coming back to it after it was in the background; which of its screens you view, named from a fixed list (for example the range list, a range’s page, a practice session, your shot history or your bag) and never by anything the screen shows; starting, finishing or cancelling a sign-in or sign-up, with the method you chose and, if it failed, why; starting, moving through and finishing onboarding; being asked to sign in, what prompted it, and whether you went on; and opening a range’s events. With each it records when it happened, whether someone was signed in, and the range or event concerned. Each event names the install ID it came from. When you sign in or sign up, we link the install to your account, so the events it sent, including those from before you signed in, are linked to you. Recording starts the first time the app is opened, before you are asked your age. Our servers also record, from what they already keep, that you created an account; that a practice session started or ended, including a guest’s; that you recorded a shot or placed a mark; and that you added, removed or changed one of your clubs. With these they record only the range, whether the practice was at a target or on the fairway, how a session ended, and a few yes-or-no details, such as whether it was a guest’s session or whether a club is in a bag: never where you were, where a ball came down, any distance, which club it was or what you called it, or your date of birth. These events go to our servers, and copies go to PostHog, including those recorded before you are asked your age. PostHog is an analytics provider that processes them only on our behalf (section 5). When we try out a change to the app on some installs and not others, the copies also say which version an install was given. PostHog knows each install and each account by a pseudonym we make from its ID with a secret key, never by the install ID or account ID itself, and it never receives your name or email address. It never receives your IP address, because the copies are sent from our servers and not from your phone, and its location lookup is turned off; nor does it receive any detail of your device, your location, where your shots were, or your date of birth. We use these events to count installs and guests, to see where people give up on signing up, to learn which parts of the app are used and how often, to see whether people come back to it, and to show a range how often its events are viewed. There is no setting in the app that turns them off; section 11 describes what you can do instead. We may later record more about how you use the app — other features you use, taps, how long you spend in it, and the errors you run into — to understand how the app is used, to test changes, and to fix and improve it, with our own tools, with PostHog, or through another provider that processes it only on our behalf, whom we would name in section 5 first. We do not use any of this to track you across other companies’ apps or websites.
- Marketing attribution. We may use Apple’s privacy-preserving attribution tools — such as SKAdNetwork, AdAttributionKit, and the attribution Apple provides for ads on the App Store — to learn which of our marketing campaigns lead to installs and subscriptions. Apple designs these to limit what they reveal about any one person.
- Our website. When you visit mapmyrange.com, our hosting provider, Vercel, processes your IP address and the pages you request in order to deliver the site. Everything the site needs to display, including its fonts, comes from Vercel, so until you accept analytics cookies, viewing the site contacts no one else. The site asks whether you accept analytics cookies. Only if you accept, it loads Google Analytics, which records your visits, the pages you view and the links you click, such as our shop and App Store buttons, and sets cookies whose names begin
_gaso that it can recognise your browser when you come back. They expire 13 months after your last visit. Google uses your IP address to estimate your approximate location and says it does not log or store the address. If you decline, or do not answer, the site loads nothing from Google and sets no analytics cookie. We have turned off Google Analytics’ advertising features, so what it records is not used for advertising and does not follow you across other websites. Google keeps the record of each visit for 2 months; after that we see only totals.
3. What we do NOT do
- We do not sell your personal data for money, and we never share it with data brokers.
- We do not share your precise location, your shot data or marks, or your date of birth with advertising platforms, and we never use your location for advertising.
- We use your device’s Advertising Identifier (IDFA), or do anything else Apple treats as tracking, only if you allow it when your iPhone asks for your permission through App Tracking Transparency.
- On Android, the app does not access or use your device’s advertising ID.
4. How we use your data
- To create and secure your account and sign you in.
- To verify your age and apply privacy protections for younger golfers.
- To provide the golfer app’s core features: measuring range distances and saving your shot history.
- To let you use the app as a guest, and to keep a guest practice session when you sign in or sign up during it.
- To check that an install is the genuine app on a genuine device, which keeps the guest figures ranges see honest and keeps ranges inside residential communities away from automated requests.
- To count installs, guests and sign-ups, and to see where people give up on signing up.
- To analyse your own practice — how far you actually hit each club, how consistent you are, and how your shots group around a target. This is why we keep where you were standing for each shot.
- To tell you what a shot “plays like” — adjusting the measured distance for the slope up or down to the target and for how much of the wind was along the line you were hitting. Both of those are worked out from where you were standing.
- If you mark shots: to show you how the shots you marked group around the target you were aiming at. This is why we keep the mark you placed and the coordinates behind it.
- To send you service notifications you asked for — for example, if a range event you marked interest in is cancelled or moved.
- If a range you visit is on Pro outreach: to group the outcomes you recorded into unnamed cohorts (for example, golfers whose woods lag their irons) so that range can invite you to a lesson, clinic, or fitting. They see a count and a pseudonymous alias — not your name — and they do not get a ranked scoreboard of who is worst. Frequency caps, quiet hours, and the consent you gave that range still apply. The message itself will not quote your hit rate.
- To deliver messages from ranges you have agreed to hear from, and to apply your consents, limits and quiet hours to them.
- To diagnose crashes and improve reliability and performance.
- To understand how the app is used, to test changes to it, and to develop new features.
- If you accept analytics cookies on our website: to count its visits and see which of its pages and links people use.
- To measure and improve our marketing — including which campaigns bring people to the app — and, as section 5 describes, to show our ads to people likely to be interested in Map My Range.
- To keep the service secure, and to detect, prevent and respond to fraud, abuse and security incidents.
- To respond to your support and privacy requests.
- To comply with the law, respond to lawful requests, and enforce our Terms of Service.
We may combine the information described in section 2 for these purposes, within the limits in section 3.
5. Who we share it with
We share personal data only in the ways this section describes.
Service providers. These providers process personal data on our behalf, to make the app and the website work and to help us understand how they are used:
- WorkOS — authentication and account management (email, name, account ID).
- Amazon Web Services — hosting for our servers and database, and delivery of the email we send you (SES).
- Sentry — crash reporting, error diagnostics, and performance monitoring.
- Expo — delivery of push notifications to your device. Expo passes each one to Apple’s push notification service on iPhone, or to Google’s Firebase Cloud Messaging on Android, whose software in the app keeps an identifier for the app on your device so that notifications can reach it.
- Mapbox and Open-Elevation — looking up the ground elevation at a coordinate so we can tell you what a shot “plays like” uphill or downhill. A coordinate is sent for that lookup. The result is cached for up to 30 days against the coordinate alone, with no account or device identifier attached to it.
- Vercel — hosting our website.
- Google Analytics — counting visits to our website and the pages and links used, only if you accept analytics cookies, with its advertising features turned off.
- PostHog — product analytics, in the United States: copies of the usage events described in section 2, under a pseudonym rather than your install ID or account ID.
We may add providers of the same kinds, and when we do, we will name them here.
Google Maps, on Android. On iPhone, the maps in the app are Apple Maps, which are part of iOS. On Android, they are drawn by Google Maps, and Google’s mapping software inside the app sends Google, directly from your device: your IP address; an identifier the software creates for itself; your device’s make, model and operating system; crash reports from the map; the part of the map being shown, which at a range is roughly where you are; and, when you move or zoom a map, those movements. Google uses this to provide its maps and to measure and improve its own services, under its own terms and privacy policy rather than on our behalf, and your use of Google Maps in the app is subject to the Google Privacy Policy. We do not receive any of it, and we do not send Google your account, your shots or marks, or your date of birth.
Apple and Google, to check an install. When the app registers its install ID, it asks Apple’s App Attest on iPhone, or Google Play Integrity and the phone’s secure hardware on Android, to confirm that it is the genuine app on a genuine device. After that, the app proves each request it sends us by signing it on the phone with the key it made at registration, without asking Apple or Google again. These are the platforms’ own services: the app asks them directly, and on Android our servers ask Google to read its answer and read Google’s public list of revoked keys. Google says Play Integrity uses what it collects to make that check.
The ranges you practise at. A range is an independent business, not our service provider, and it never sees your name, whatever your age. While you have a practice session open at a range, that range’s staff can see when the session started and how long it has run, how many shots have been recorded, and when the golfer left the range’s boundary, but nothing that says whose session it is. A range on our Pro plan can also download a list of the sessions at that range, each with its start and end times, length and shot count, and again nothing that says whose it was. If a range uses the Pro outreach that section 4 describes, it sees the golfers who practise there under a pseudonymous alias, the same at that range every time and unrelated to any alias at another range. Beside each alias it sees the date of their last visit but not the time, how many times they have visited, a broad grade for each club family, and which of the cohorts in section 4 they fall into. So that a campaign reaches the golfers a range chooses, the range’s dashboard also receives an internal identifier for each golfer on that list. It is a random code that means nothing outside our service, and the dashboard never displays it. If we know you are under 16, no range sees you under an alias at all. A range that knows its regulars may still recognise you from your visits. Ranges also see figures that combine many golfers, such as how many visited each day. What a range does with what it sees is governed by its own practices, not by this policy.
What ranges see about guests. A range sees counts of the people who used the app there without an account: how many, beside how many signed in; how many guest sessions there were; how often a guest came back; how many made an account during a session there; how many guests are on the range now; guests in its busiest hours; and how often each of its events was viewed in the app, by anyone. Any count below five is shown only as “fewer than 5”, and so is any figure worked out from one. A range never sees an install ID, a guest’s own sessions or times, or where else a guest practised.
Advertising platforms. We may share limited information with advertising platforms, such as Meta, Google, TikTok and Apple, to show our ads and to measure and improve our marketing:
- Hashed email addresses, for audience matching. We may upload a hashed copy of your email address — the result of a one-way cryptographic function — so that a platform can match it against its own users: to show our ads to people who already use Map My Range, to leave them out of ads meant for new users, or to find people similar to our users. A hashed email address is still an identifier, not anonymous data, and we treat it as personal data. We do not do this today: we upload no email address, hashed or otherwise, to any advertising platform, and the app contains no advertising software.
- Campaign reports. Platforms send us reports on how our campaigns performed, in aggregate.
We do this only as far as the law and your device allow: on iPhone, only if you allow tracking when your iPhone asks; never for anyone we know to be under 18; and never with your location, your shot data or marks, or your date of birth. You can opt out at any time by emailing privacy@mapmyrange.com; from then on we stop including you, and we remove you from any audience we have already shared. We do the same when you delete your account. You can also limit some of this through the privacy controls that each platform, and your device, offer.
Aggregated statistics. We may publish or share statistics about how Map My Range is used — for example, how many ranges use it, or how many shots golfers have recorded — combined across many golfers, so that no statistic describes you.
Legal requirements and safety. We may disclose personal data if we believe in good faith that the law, a regulation, a subpoena, a court order or other legal process, or a lawful request from a public authority requires it; or that disclosure is necessary to enforce our Terms of Service, or to protect the rights, property or safety of Windegrated Solutions, LLC, our users, the ranges on our service, or others, including to detect and prevent fraud, abuse and security problems. Where the law allows it and it is practical, we will tell you before we disclose your personal data in response to legal process.
Business transfers. If Windegrated Solutions, LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal data may be transferred as part of that transaction. Whoever receives it will be bound by this policy for the data transferred, unless you are given notice of a change and the chance to delete your account before the change takes effect.
At your direction. We share personal data when you ask us to, or agree that we may.
6. Data retention and deletion
We keep your personal data for as long as your account is active. When you delete your account, we permanently delete your personal data — including your profile, date of birth, golf shots, the position you were standing in for each of them and everything we worked out from it, any shots you marked together with the coordinates behind those marks, bag and club data, session history, your range event interests, your notification settings, consents and message records, and any usage information linked to your account — within 30 days.
Deleted data can remain for a short time in the encrypted backups we keep to recover from failures. Every backup expires within 30 days of the deletion, so the 30 days above include them.
Two things survive that deletion and we would rather say so than let the promise be true by luck. First, the ground-elevation lookups described in section 5 are cached against the coordinate on its own, with no account or device attached, so there is no per-account entry to remove; each cached entry expires within 30 days regardless. Second, we keep a record that the sign-in credential attached to this account was deleted: the identifier our sign-in provider, WorkOS, gave your account — an opaque string, not your email address, your name, or anything you typed — together with the date. We keep it so that a sign-in still held on a device cannot silently recreate the account we just deleted, which is what would otherwise happen. We also ask WorkOS to end every sign-in session your account had and then to delete your account there, and we keep asking until it confirms both. We delete the record 30 days after WorkOS confirms both, when no sign-in can recreate anything any more. Until then it is never used to identify you, to contact you, or to rebuild anything.
Separately, and whether or not you delete your account, an event interest record is deleted automatically about 30 days after the event it refers to, because at that point it can no longer tell you anything. And if your access to shot marking ends, your marks are deleted 90 days later, as section 2 describes.
If you remove a practice session in the app, we delete its shots, the position you were standing in for each of them and any marks on them, while the record that you practised at that range — when, for how long and how many shots you hit — stays with your account, so the range’s figures stay accurate, until you delete your account, even if the business that runs the range later closes its account with us.
If the business that runs a range you practised at closes its account with us, your practice history there stays in your account, with the range’s name and its targets, so it reads as it did before. What we held for that range about you is deleted: your consent to hear from it, its messages to you, and your interest in its events.
What we hold without an account. Usage events are kept for 13 months from when each happened, and after that only as daily totals that name no install and no account. Guest practice sessions are kept for 13 months from when each started, and after that only as daily counts for the range, with no install in them. The record that registered an install, described in section 2, is deleted 13 months after the install last checked in, and whatever is still recorded against the install goes with it. Resetting your analytics ID (section 11) deletes the install’s record at once, with its usage events, its practice visits and its links to any account; days already added into daily totals keep those totals. Deleting your account deletes the events of every install your account was used on, including events sent before you signed in, and events sent while another account was signed in on the same phone.
Copies in PostHog. The copies of usage events that PostHog holds for us (section 5) are deleted along with ours when you reset your analytics ID, when a date of birth under 13 is entered, and when you delete your account, as sections 9 and 11 describe. Our 13-month limit does not reach them, so PostHog may keep a copy for longer than we keep ours. Deleting a single practice session, shot, mark or club does not delete the usage event in PostHog recording that it happened, which carries nothing of what was deleted.
You can delete your account yourself, in the app, under Profile → Delete Account. Our Delete Your Account page has the steps in full.
7. Your rights under the GDPR (EU, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the following rights over your personal data:
- Right to Access — obtain a copy of the personal data we hold about you.
- Right to Rectification — have inaccurate personal data about you corrected.
- Right to Erasure — ask us to delete your personal data.
- Right to Portability — receive your data in a structured, machine-readable format.
- Right to Object — object to or restrict certain processing of your data, including processing for marketing.
- Right to Withdraw Consent — where we rely on your consent, withdraw it at any time, without affecting what we did with it before you withdrew it.
- Right to Complain — lodge a complaint with your local data protection authority.
Our legal bases. We process your personal data because it is necessary to perform our contract with you (your account, the app’s features, and any paid features); because it is in our legitimate interests, balanced against your rights (keeping the service secure, preventing fraud and abuse, diagnosing faults, understanding and improving the app, measuring our marketing, and protecting younger golfers); with your consent (your device’s location, notifications, messages from ranges, analytics cookies on our website, and advertising audiences where the law requires consent); and to comply with our legal obligations.
International transfers. We are based in the United States, and our service providers process data mainly in the United States. If you use Map My Range from outside the United States, your personal data is transferred to, and stored and processed in, the United States. Where the law requires it, we rely on appropriate safeguards for those transfers, such as the European Commission’s Standard Contractual Clauses.
To exercise any of these rights, email privacy@mapmyrange.com.
8. Your rights under the CCPA (California)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the CCPA):
- Right to Know — what personal information we collect, use and disclose, and how (described in this policy), and to obtain a copy of it.
- Right to Delete — request deletion of the personal information we hold about you.
- Right to Correct — request correction of inaccurate personal information we hold about you.
- Right to Opt Out of Sale or Sharing — we do not sell your personal information for money. Uploading a hashed email address to an advertising platform, as section 5 describes, may count as “sharing” for cross-context behavioral advertising under California law, and you can opt out of it at any time by emailing privacy@mapmyrange.com.
- Sensitive personal information — we use your precise location to provide the features you use, and not to infer characteristics about you.
You may make a request yourself or through an authorized agent. We verify each request, and an agent’s authority, before acting on it. We will not discriminate against you for exercising any of these rights. To make a request, email privacy@mapmyrange.com.
9. Children
Map My Range is not directed to children under 13, and you must be 13 or older to use it, with or without an account. When you set up an account we collect your date of birth and block accounts for users under 13. You can use parts of the app as a guest without being asked your age. If a date of birth under 13 is entered while setting up an account, we delete the usage events that install has sent, and everything PostHog holds for it, and the app sends no more, so nothing more about it goes to PostHog. That does not reach guest use: practice sessions recorded against the install as a guest, before or after, and the record that registered the install, are kept as section 6 describes. If we know you are under 16, we leave you out of range outreach campaigns, and we never include anyone we know to be under 18 in an advertising audience. If you believe a child has provided us data in error, contact us and we will delete it; if the child used the app without an account, resetting the analytics ID on that phone deletes its usage events, their copies in PostHog, and the practice visits recorded on it.
10. Security
We protect personal data with encryption in transit (HTTPS/TLS) and at rest. Beyond encrypting our database and its backups as a whole, we separately encrypt, field by field, your email address and the coordinates we keep of where you stood and where you placed marks. We never store your password; WorkOS does. Access to our production systems is limited to the people who need it. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
11. Your choices
- Location. You can allow or stop the app’s access to your location at any time in your device’s settings. The features that measure from where you stand need it, so they stop working without it. Ending your practice session stops the app’s use of your location while your phone is locked.
- Notifications and messages from ranges. You can turn push notifications off in your device’s settings, and choose, range by range, whether a range may reach you by push notification or email, in the app’s notification settings under Profile.
- Range events. You can withdraw your interest in an event at any time, which deletes the record.
- Analytics ID. Under Profile in the app, Reset analytics ID deletes this phone’s usage events, and the practice visits recorded on it while you were not signed in, from our servers, and a new analytics ID starts fresh. It also deletes their copies in PostHog, and the PostHog profile of any account that sent events from this phone, with everything in that profile, including what that account sent from other phones. Deleting your account deletes your PostHog profile in the same way, and the profile of any other account that sent events from a phone your account was used on. There is no setting that stops the app sending usage events; resetting the ID, or deleting your account, is how you remove them. Uninstalling the app removes the ID from your phone, but what we already hold is kept for the periods in section 6.
- Cookies on our website. The site sets no analytics cookie until you accept. You can change your answer at any time with Cookie settings at the foot of every page; declining deletes the Google Analytics cookies the site set.
- Advertising. You can opt out of advertising audiences at any time by emailing privacy@mapmyrange.com. On iPhone, you can refuse or withdraw tracking permission in Settings, under Privacy & Security, then Tracking.
- Your account. You can review and update your account details in the app, and delete your account at any time, as section 6 describes.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be communicated in the app or by email where appropriate.
13. Contact us
Questions about this policy or your data? Email privacy@mapmyrange.com. For anything to do with an account, including deleting one, email support@mapmyrange.com.
Windegrated Solutions, LLC