On Tour is built and operated by Technicolour from Australia, for players across Australia and New Zealand. This policy covers the ontour.golf website and the On Tour mobile app (iOS and Android). At launch, On Tour is only available to players in Australia and New Zealand.
We take your privacy seriously because a golf crew group chat shouldn’t feel like it’s been sponsored by an ad network. This policy sets out what we collect, why, who we share it with, and what you can do about it. It’s written in plain English, and complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs).
The short version
- We collect the minimum information we need to run On Tour.
- We don’t sell your personal information, and we don’t share it with advertisers.
- Content you post inside a crew or round stays inside that crew or round.
- You can access, correct, or delete your information at any time — just email privacy@ontour.golf.
- We’ll tell you if this policy materially changes.
Information we collect
From the waitlist (today)
When you join the waitlist, we collect your email address so we can email you before launch and send a welcome message. We use SendGrid (a Twilio service) to store and send those emails.
The marketing site uses Vercel Analytics and Vercel Speed Insights, which collect basic, aggregated usage data (such as page views, approximate location from IP, device type, and performance timings). These tools don’t use cookies and don’t build profiles about individuals.
When you sign up for the app (at launch)
- Account details: email address, display name, and an optional profile image — either uploaded directly or generated from a selfie (see AI-generated profile image below).
- Authentication identifiers and session tokens so you stay signed in.
- Your settings and preferences inside the app.
Content you create in the app
- Rounds, events, and RSVPs you schedule or respond to.
- Scorecards and scoring history linked to rounds you’ve played.
- Photos, videos, comments, and messages you share with your crew.
Purchases and payments
The core On Tour app is free to use. Some optional commerce features let you buy physical merchandise, vouchers, bookings, or real-world golf services from On Tour or our partners. These purchases are not for native digital app features.
- Payment details: card and wallet details are collected in secure payment flows run by Stripe or Shopify. We do not store raw card numbers on our servers.
- Order details: we keep records such as order IDs, item details, voucher codes, payment status, receipts, and refund or support notes so we can fulfil purchases and meet tax obligations.
- Shipping and fulfilment: where you buy merchandise, Shopify and the relevant fulfilment providers may collect delivery details needed to complete the order.
AI-generated profile image
On Tour lets you generate an AI profile image from a selfie or photo of your face. Because a face photo is personal information under the Privacy Act, we handle it with extra care.
- What we collect: the source photo you choose to upload, used solely to generate your On Tour profile image.
- How it’s processed: the photo is sent to Segmind, which runs the AI image model (Google’s Nano Banana) that generates your avatar. The resulting image is stored and served via Cloudinary.
- Overseas processing: Cloudinary stores data in the United States, and Segmind processes data outside Australia and New Zealand. Before disclosing your photo to them, we take reasonable steps under APP 8 and IPP 12 (NZ) to make sure they handle it consistently with the APPs and IPPs.
- Source photo deletion:the original photo you upload is deleted from our systems immediately after your profile image is generated. A daily backend sweep also runs as a backstop to remove any source photos that weren’t cleared in the immediate cleanup.
- What we keep: only the generated profile image is retained, as your On Tour avatar. You can replace or remove it at any time from your profile settings, or by emailing privacy@ontour.golf.
AI-generated tour logos
On Tour also lets you generate an AI logo for a tour. The prompt sent to the image model is text only — no photos are uploaded as part of this feature.
- What we send:the name of the tour you’re generating a logo for, used as the prompt.
- How it’s processed: the prompt is sent to Ideogram, which generates the logo. The resulting image is stored and served via Cloudinary.
- Overseas processing: Ideogram and Cloudinary process and store data in the United States. Before disclosing personal information to an overseas provider, we take reasonable steps under APP 8 and IPP 12 (NZ) to make sure they handle it consistently with the APPs and IPPs.
- Use for model training: Ideogram may use the prompts you submit and the images it generates to improve its AI models.
- What we keep:the generated logo is retained as your tour’s logo. You can replace or remove it at any time from your tour settings.
AI-powered Caddie chat
On Tour includes an AI assistant called Caddie that answers golf-related questions and helps with the app. When you send Caddie a message, your message and a small amount of context about the current tour (for example, the tour name, your handicap, recent rounds) are sent to the AI provider so it can produce a relevant response.
- Who processes it: messages are sent to Groq, which runs the Llama language model that generates Caddie’s replies.
- Overseas processing: Groq processes data in the United States. Before disclosing personal information to an overseas provider, we take reasonable steps under APP 8 and IPP 12 (NZ) to make sure they handle it consistently with the APPs and IPPs.
- What not to send:don’t share sensitive personal information, financial details, or account credentials in Caddie chats. Only use it for golf and app questions.
- What we keep: Caddie conversations are not stored on our servers. The chat history lives only in the current session and is cleared when you leave the Caddie screen.
Permissions you grant the app
Some features need operating-system permissions. These are optional and you can turn them off at any time in your device settings. On Tour only asks for them when a feature actually needs them.
- Location— to help you find nearby courses, ranges, simulators, shops, and coaches.
- Camera and photo library— to upload photos and videos to your crew feed, and to take or choose a selfie if you generate an AI profile image.
- Notifications— to let you know about RSVPs, messages, and round updates.
Device and usage information
We collect your device model, operating system version, app version, basic usage events, and crash diagnostics so we can fix bugs and improve the app. We also collect push-notification identifiers if you enable notifications.
How we use your information
- To run On Tour — sign-in, RSVPs, scoring, sharing with your crew.
- To suggest nearby golf places and keep location features working.
- To send transactional messages (waitlist confirmation, important account notices) and, with your consent, product updates.
- To improve reliability, fix bugs, and build new features.
- To keep On Tour safe — detect abuse, fraud, and policy breaches.
- To meet our legal obligations.
Who we share it with
We use a small number of service providers to run On Tour. They only get access to what they need to do their job, and they’re contractually required to protect it.
- SendGrid (Twilio)— transactional and marketing email delivery for the waitlist and the app.
- Vercel— hosting, analytics, and performance monitoring for the marketing site.
- Supabase— authentication, database storage, realtime updates, and session management for the mobile app.
- Railway— hosting for On Tour backend APIs.
- Apple and Google— app distribution, platform sign-in, device services, and store review.
- Google Maps— maps and location-based course, venue, and nearby-place features.
- Stripe— secure card and wallet payment processing for optional real-world purchases such as partner deals, vouchers, bookings, or services.
- Shopify— hosted checkout, order management, and fulfilment for optional physical merchandise purchases.
- Segmind— AI image generation, used only when you choose to generate a profile image from a selfie.
- Ideogram— AI image generation, used to generate tour logos from the tour’s name.
- Groq— AI language model provider, used only while you’re chatting with the in-app Caddie assistant. Caddie conversations are not stored on our servers.
- Cloudinary— image storage and delivery for profile images, tour logos, and other media inside the app.
- PostHog— product analytics so we can understand app usage, reliability, and feature performance.
- Sentry— crash reporting, diagnostics, and performance monitoring.
- OneSignal— push notifications, in-app messages, and live activity notification delivery.
- Cloud infrastructure providers— for storing and serving app data at launch.
We may also disclose information if we’re required to by law, or where necessary to enforce our Terms of Use, investigate abuse, or protect people from serious harm.
We do not sell your personal information, and we don’t share it with third-party advertising networks.
Where it’s stored
We prefer Australian or New Zealand-region data centres wherever a provider offers them. Some of our service providers process or store data outside Australia and New Zealand, including the United States and other regions used by Supabase, Railway, SendGrid, Vercel, Cloudinary, Stripe, Shopify, PostHog, Sentry, OneSignal, Ideogram, Groq, and Segmind. Before disclosing personal information to an overseas provider, we take reasonable steps under APP 8 and IPP 12 (NZ) to make sure they handle it consistently with the APPs and IPPs.
How long we keep it
We keep your personal information for as long as your account is active, or as long as we need it for the purposes described above. Waitlist emails stay on our list until you unsubscribe or ask us to remove you. Source photos uploaded to generate an AI profile image are deleted immediately after processing, with a daily sweep as a backstop.
When you delete your account (in the app, or by emailing us), we remove your personal information from our live systems within 30 days— in practice most of it is removed immediately when you confirm the deletion. Encrypted database backups roll off within 14 days, after which your data is permanently gone from our backups as well.
Two kinds of records may be kept longer:
- Financial and tax records(receipts, order history for merchandise purchases, payment logs) — kept for up to 7 years as required by the Australian Taxation Office and equivalent New Zealand rules.
- Third-party analytics and diagnostics(Sentry crash logs, PostHog product events) — these follow each provider’s own retention policy, typically between 30 days and 12 months. They don’t identify you by name after account deletion, but the event records themselves age out at the provider’s schedule rather than ours.
Security
We use encryption in transit, access controls, and reasonable security practices to protect your information. No online service is perfectly secure, so we can’t guarantee against every possible attack — but we’ll always tell you if something happens that we’re required to disclose under the Notifiable Data Breaches scheme.
Your choices and rights
Under APPs 12 and 13 you have the right to:
- Ask us what personal information we hold about you.
- Ask us to correct it if it’s wrong.
- Ask us to delete it (subject to any legal retention obligations).
- Opt out of marketing emails at any time (every marketing email has an unsubscribe link).
To exercise any of these rights, email privacy@ontour.golf. We’ll respond within a reasonable time — usually within 30 days.
If you just want to delete your account, the quickest path is inside the On Tour app (App and Support → Delete My Data), or visit our delete account page for step-by-step instructions.
Children
On Tour is intended for players aged 16 and over. We don’t knowingly collect personal information from anyone under 16. If you think a child has signed up, contact privacy@ontour.golf and we’ll remove the account.
Third-party content inside the app
On Tour may link to or display content from third parties (for example, course information, maps, or links to golf retailers). Those providers have their own privacy policies and we’re not responsible for how they handle your information — have a look at their terms before using them.
Changes to this policy
We may update this policy from time to time. When we do, we’ll update the “Effective” date at the top of the page. If a change is material, we’ll also let you know by email or in the app.
Complaints
If you think we’ve mishandled your personal information, please email privacy@ontour.golf in the first instance so we can fix it. If you’re not satisfied with our response:
- In Australia, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
- In New Zealand, you can lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.
Contact
On Tour is operated by Technicolour (based in Australia, serving Australia and New Zealand). For anything privacy related, email privacy@ontour.golf.