Privacy Policy for Vector Golf
Last updated: 2026-10-05
Vector Golf is an Android golf app operated by Need for Quality AB (NFQ AB), Sweden. We are responsible for the personal data described here. Contact us at vectorgolf@nfq.se or Venusvägen 12, 291 70 Kristianstad, Sweden.
You can use the app without signing in. Connecting a Google account is optional and enables synchronisation of your golf profile and rounds between your devices.
1. Information we process
- Account information: when you choose Google sign-in, Google and Firebase Authentication provide account identifiers and basic profile information, such as your name and email address. Your Google name can prefill your golf profile; you can edit it. We do not receive your Google password or import your Google contacts.
- Golf profile and preferences: your chosen name, handicap (HCP), rating table, preferred play style and metric or imperial units.
- Round information: ongoing and completed rounds, course and tee details, dates, scores, playing partners' details you enter, and the statistics calculated from those rounds. Only enter another person's details when you are entitled to do so.
- Sync information: account and device identifiers, round ownership, revisions and preserved copies needed to reconcile changes between devices. A sync device identifier is generated by the app; it is not your advertising ID.
- Location and geographic queries: with Android location permission, your position can be used on the map and for weather and shot planning. Coordinates chosen on the map may also be sent to weather, map, tile and elevation providers. Network requests disclose technical information such as your IP address to the receiving provider.
- Usage and advertising information: When you enable Usage measurement in Settings, Firebase Analytics processes app usage and device/technical information, including app-open events. In the updated app this optional collection starts disabled until you choose to enable it. Google AdMob may process device information, advertising identifiers, ad interactions and related diagnostics under Google's policies.
- Support information: the messages and contact details you send us, including information needed to verify a privacy or account-deletion request.
Android location permission is controlled separately on each phone. Your operating system's permission decision is not synced to another phone as a permission grant.
2. Purposes and legal bases
We process your profile, rounds, preferences and account information to provide the features you request, including optional sign-in and synchronisation. The legal basis is performance of our agreement to provide the app's services. Location processing for the features you request uses the same basis and requires the relevant Android permission.
We have a legitimate interest in securing the service, preventing abuse, handling support and improving its reliability. We use technical information for those purposes and limit it to what is necessary. Optional app usage measurement uses your consent. You can enable or disable it in Settings → Usage measurement. The choice is stored on this phone outside operating-system backup and is not synced with your account; a new installation or another phone starts without this consent. Turning it off stops future Analytics collection, while scorecards, golf statistics and account sync continue to work. It does not erase previously collected server data. Analytics advertising purposes remain disabled by this choice. Google AdMob advertising uses a separate consent flow and remains subject to the choices offered there. These Analytics controls apply to the updated app version; older versions may collect app usage at startup. You can object to processing based on legitimate interests by contacting us. Legal obligations may require us to process or retain specific records.
3. Local storage and account sync
Guest profiles and rounds are stored on your device. When you first connect an account, eligible guest profile and round data can be imported into that account. Account data is stored using Firebase Authentication and Cloud Firestore so that you can access it from another signed-in device. Multiple phones can be signed in; an ongoing round has one editing device at a time to prevent conflicting score changes.
Signing out does not delete the account. Separate guest data and account caches may remain on the device. Uninstalling the app or clearing its storage removes local app data; it does not delete a synced account on the server. Signing in again can restore remaining cloud data. Device transfer and operating-system backup behaviour depend on the device and its settings; local-only guest data has no guaranteed cloud recovery.
Your synced rounds are private to your account. This version does not publish them in a social feed or make them visible to other app users.
4. Service providers and transfers
We use Google/Firebase for authentication, database storage, analytics and administration, Google AdMob for advertising, and weather, map, tile and elevation providers for geographic features. These providers receive the information required for their services and may have their own privacy obligations. We do not sell your personal data.
The geographic services used depend on the feature, region and availability:
- Weather: SMHI, the Norwegian Meteorological Institute (MET Norway), and the US National Weather Service (NWS).
- Maps and golf features: TomTom map tiles and OpenStreetMap data queried through the Overpass API at overpass-api.de.
- Elevation: Terrarium elevation tiles hosted on Amazon Web Services (AWS), and Lantmäteriet where its elevation service is configured and available.
These requests can reveal your IP address and the requested coordinates or map area to the receiving provider. A requested location may be your device position or a place you select on the map. MET Norway logs IP addresses together with coordinates included in direct API requests and stores its API access logs in Oslo, Norway. Location processing by this provider therefore includes stored logs, rather than only temporary processing to return a forecast. Retention and privacy rights for provider logs are governed by the provider's applicable policies.
Further geographic-provider information: SMHI personal data information, MET Norway privacy policy, MET Norway API terms and TomTom privacy information.
Providers may process information within and outside the European Economic Area. Where personal data is transferred outside the EEA, applicable safeguards such as an adequacy decision or standard contractual clauses are required. Contact us for information about relevant safeguards.
Further information: Firebase privacy and security, Google Privacy Policy and Google advertising information.
5. Account deletion and retention
To delete your Vector Golf account, open Settings → Account & sync → Request account deletion to reach our request page. Support verifies your identity before deletion. You can also request deletion on our website without reinstalling the app.
Opening the request page or sending an email does not immediately delete or block your account. After verifying the account holder's identity, support starts deletion and blocks access to that account's synced data. Support deletes the account's profile, HCP, preferences, ongoing and completed rounds, associated sync and recovery data, and Firebase Authentication account. Statistics derived from deleted rounds are removed with them. If processing is interrupted, support must resume it; there is no automatic background deletion service. Support confirms completion to you.
Updated app versions remove that account's local cache and recognised imported copies of its rounds when they can confirm deletion online. Opening the request page alone does not remove local data. Older versions may require you to clear app storage manually. An offline device may retain a local copy until then. You can remove its local data immediately through Android's app-storage controls. Independent guest data, other accounts' data, unidentified old guest recovery material and files you exported outside the app are separate and are not automatically erased by account deletion.
A minimal deletion marker, containing the account identifier and processing status, is retained until processing has completed. Completed markers contain the completion time and are removed during a manual maintenance review after 30 days, normally within a further 30 days. Pending markers are retained until cleanup is completed. The marker blocks delayed devices from recreating the deleted data during processing and supports reliable cleanup.
Account deletion does not delete your Google account. It does not automatically erase data separately processed by advertising or analytics providers, their operational logs, or any existing infrastructure backup. Such data is governed by the provider's applicable retention rules and your privacy rights. It is not restored into active app use as part of the account-deletion flow. Contact us if your request also concerns these records.
Account data is retained while the account remains available until you delete it or request erasure. Local data remains until you remove it or the app completes applicable account cleanup. We retain support and security records only as long as necessary to resolve the matter, protect the service or meet a legal obligation. If an exception requires retention of personal data in response to your erasure request, we will explain the reason and applicable period.
6. Your choices and rights
- Use guest mode without connecting a Google account.
- Edit your golf name and HCP in the app.
- Deny or revoke location permission through Android settings.
- Enable or disable optional Google Analytics usage measurement in Settings → Usage measurement.
- Manage supported advertising choices through the consent options offered in the app and your Google or device settings.
- Request access, correction, erasure, restriction or portability of your personal data, and object where applicable. You may withdraw consent without affecting processing already carried out.
Send privacy requests to vectorgolf@nfq.se. We may need to verify your identity. We respond without undue delay and normally within one month. If the law permits an extension for a complex request, we will explain it within that month. You can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or your local data protection authority.
7. Security, children and changes
We use access controls and encrypted connections to protect data. No storage or transmission method can eliminate all risk. Do not send us passwords, authentication codes or identity documents unless a proportionate verification method has first been agreed with support.
Vector Golf is not directed to children below the age required by applicable law. Contact us if you believe a child has provided personal data inappropriately.
We may update this policy as the app changes. The latest policy and its update date are published on this page. For questions, contact vectorgolf@nfq.se.