FLUSH Privacy Policy

Verdix LLC

Last Updated: April 2026

Verdix LLC ("Verdix," "we," "our," or "us") operates the FLUSH mobile application ("FLUSH" or the "App"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use FLUSH. By creating an account or using the App, you agree to the practices described in this policy.

Verdix LLC is a California limited liability company headquartered in Marina del Rey, California.

1. Information We Collect

1.1 Account Information

When you create a FLUSH account, we collect:

We do not collect your real name, phone number, physical address, or payment information. FLUSH does not process payments or maintain any financial account infrastructure.

1.2 Location Data

FLUSH requests access to your device's GPS solely to detect the nearest golf course when you initiate a round. Location data is used in real time for course identification and hole-by-hole GPS features (yardage, green position, tee box selection). We do not track your location in the background, record location history, build location profiles, or transmit raw GPS coordinates to any third party. Location access is requested only when you actively use GPS-dependent features and can be revoked at any time through your device settings.

1.3 Scorecard Photos

When you use the scorecard scanning feature, FLUSH captures a photograph of your physical scorecard. This image is transmitted to our AI processing service (Anthropic) for optical character recognition (OCR) to extract scores. The raw image is processed in memory and is not stored permanently on our servers or in our database. Only the extracted score data (numerical hole-by-hole scores, player names as written on the card) is retained.

1.4 Scores, Game Results, and Unit Calculations

We collect and store your golf scores, game format selections (e.g., Nassau, Skins, Wolf, Match Play), and the results of game format calculations expressed in units. Units are abstract numerical values used to represent game outcomes. FLUSH is a scorekeeper and game format calculator; unit calculations are informational outputs, not financial instruments.

1.5 OCR Correction Data

When you correct a score that was misread during scorecard scanning, the difference between the OCR output and your correction is logged to improve scanning accuracy. This correction data is anonymized: it is associated with a randomly generated session identifier, not your user account. We retain correction data in aggregate to train and improve OCR accuracy across all users.

1.6 Condor AI Query Data

When you interact with Condor, our AI coaching assistant, your questions and Condor's responses are logged for coaching improvement purposes. Query logs are associated with anonymous session identifiers and are auto-classified by topic category (e.g., swing correction, club selection, course strategy, rules, mental game). The system may detect references to common shot patterns (e.g., slice, hook, thin contact) to improve coaching relevance. No query data is sold to third parties or used for advertising.

1.7 Device and Usage Information

We automatically collect limited technical information necessary for app functionality and crash diagnosis:

We do not collect your device's advertising identifier (IDFA) or participate in any advertising tracking frameworks.

1.8 Information We Do Not Collect

FLUSH does not collect: payment card numbers, bank account information, Social Security numbers, biometric data, contacts or address book data, health data, browsing history, data from other apps on your device, or any financial transaction information. No money flows through FLUSH.

2. How We Use Your Information

We use your information for the following purposes:

DataPurpose
Email, display nameAccount authentication, group identification, app communications
GHIN numberHandicap display within your groups (optional)
GPS locationReal-time course detection and hole-by-hole yardage during active rounds
Scorecard photosOne-time OCR processing to extract scores; image discarded after extraction
Scores and game resultsScoring history, game format calculations, group leaderboards, statistical analysis
OCR correctionsAggregate accuracy improvement of scorecard scanning (anonymized)
Condor queriesCoaching quality improvement, miss-pattern detection for personalized tips (anonymized)
Device/crash dataBug diagnosis, app stability, performance optimization

3. Legal Bases for Processing

We process your personal information on the following legal bases:

4. Third-Party Service Providers

We share limited data with the following service providers, solely for the purposes described:

4.1 Supabase (Database and Authentication)

Your account information, scores, game results, OCR correction data, and Condor query logs are stored in Supabase, a hosted PostgreSQL database service. Supabase provides our authentication infrastructure and enforces row-level security policies. Supabase's privacy practices are governed by their privacy policy at supabase.com/privacy.

4.2 Anthropic (AI Processing)

Scorecard images are transmitted to Anthropic's Claude Vision API for OCR extraction. Condor coaching queries are processed through Anthropic's language model API. Anthropic processes data according to their API data usage policy, which prohibits using API inputs and outputs for model training. Anthropic's privacy practices are governed by their privacy policy at anthropic.com/privacy.

4.3 Apple (Distribution)

FLUSH is distributed through the Apple App Store. Apple may collect certain device and usage analytics as described in Apple's privacy policy. We do not control Apple's data collection practices.

We do not share, sell, rent, or trade your personal information with any other third parties. We do not use third-party advertising networks. We do not embed third-party analytics SDKs that track you across other apps or websites.

5. Data Retention

We retain your data according to the following schedule:

Data TypeRetention Period
Account informationUntil you delete your account or request deletion
Scores and game resultsUntil you delete your account or request deletion
Scorecard photosNot retained; processed in memory and discarded immediately after OCR extraction
GPS location dataNot retained; used in real time only, never stored
OCR correction dataRetained indefinitely in anonymized, aggregated form
Condor query logsRetained indefinitely in anonymized form for coaching improvement
Crash/device logs90 days from collection

6. Data Security

We implement the following security measures to protect your information:

No system is perfectly secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

7. Your Rights and Choices

7.1 Access and Deletion

You may request a copy of all personal data we hold about you, or request deletion of your account and associated data, by emailing privacy@getverdix.com. We will respond to verified requests within 30 days. Upon account deletion, we will delete your account information, scores, game results, and group memberships. Anonymized data (OCR corrections, Condor query logs) that cannot be re-identified will be retained.

7.2 Location Permissions

You may disable location access at any time through your device's Settings. Disabling location access will prevent GPS course detection and hole-by-hole yardage features but will not affect scoring, game format calculation, or other core functionality.

7.3 Camera Permissions

You may disable camera access at any time through your device's Settings. Disabling camera access will prevent scorecard scanning but will not affect manual score entry or other features.

8. California Consumer Privacy Act (CCPA) Disclosures

If you are a California resident, you have the following rights under the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) and the California Privacy Rights Act amendments:

8.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share it. The categories we collect are described in Section 1 of this policy.

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions under the CCPA. To exercise this right, email privacy@getverdix.com with the subject line "CCPA Deletion Request."

8.3 Right to Opt-Out of Sale

We do not sell your personal information to third parties. We have not sold personal information in the preceding 12 months. Because we do not sell personal information, there is no need to opt out. If our practices change, we will update this policy and provide a "Do Not Sell My Personal Information" mechanism before any sale occurs.

8.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge different prices, provide a different quality of service, or suggest that you will receive a different level of service for exercising your rights.

8.5 Authorized Agents

You may designate an authorized agent to make a CCPA request on your behalf. We will require verification of both the agent's authority and your identity before processing such requests.

8.6 Categories Disclosed for Business Purposes

In the preceding 12 months, we have disclosed the following categories of personal information to service providers for business purposes: identifiers (email, display name) to Supabase for authentication; scorecard images to Anthropic for OCR processing; coaching queries to Anthropic for AI response generation.

9. Children's Privacy

FLUSH is rated 17+ and is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@getverdix.com and we will delete that information within 30 days. Users between 13 and 17 must have parental or guardian consent to use the App. FLUSH enforces a date-of-birth verification at account creation to comply with age-gating requirements.

10. Cookies and Local Storage

FLUSH is a native mobile application and does not use browser cookies. We use the following local storage mechanisms on your device:

We do not use tracking pixels, web beacons, fingerprinting, or any cross-app/cross-site tracking technology.

11. International Data Transfers

FLUSH is operated from the United States. If you access FLUSH from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using FLUSH, you consent to this transfer. Our service providers (Supabase, Anthropic) also process data primarily in the United States. We do not currently offer data residency options in other jurisdictions.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy within the App and updating the "Last Updated" date at the top of this page. For material changes that affect how we collect or share personal information, we will provide at least 30 days' notice through the App or via email before the changes take effect. Your continued use of FLUSH after the effective date of an updated policy constitutes your acceptance of the revised terms.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to file a privacy complaint, contact us at:

Verdix LLC
Marina del Rey, California
privacy@getverdix.com

For CCPA-specific requests, please include "CCPA Request" in your subject line. We will acknowledge receipt within 10 business days and provide a substantive response within 45 days.