Effective Date: May 14, 2026
Flush ("the App") is operated by Verdix LLC ("we," "us," or "our"), a California limited liability company. This Privacy Policy describes how we collect, use, and protect your information when you use Flush.
Account Information: When you create an account, we collect your name, email address, and optionally your golf handicap. We use Supabase for authentication and data storage.
Phone Number (Optional): You may optionally provide a mobile phone number during signup or in your profile. We collect your phone number for two purposes: (a) to allow other Flush users to find and invite you by phone number (your number is normalized for matching; your raw phone number is never displayed to other users or shared with them), and (b) to send transactional SMS messages related to your account, as described in Section 5 below. Providing a phone number is optional and you may remove it from your profile at any time. Flush does not read or upload your device's contacts or address book.
Push Notification Token (Optional): If you enable push notifications, we collect and store a device-specific push token issued by Apple Push Notification Service (APNs) on iOS or Google Firebase Cloud Messaging (FCM) on Android. This token is a unique identifier that allows us to send notifications to your specific device. The token does not contain any personal information beyond the device identifier itself. You may revoke push notification access at any time through your device's system settings or in the Flush app under Settings → Notifications. When access is revoked, your push token is invalidated and removed from our systems.
Notification Preferences: If you enable push notifications, we store your preferences for which notification categories you wish to receive, your selected quiet hours, and your timezone. These preferences are used solely to determine when and which notifications to send to your device.
Notification Activity Log: When we send you a push notification, we log the notification's category, the time it was sent, whether it was successfully delivered, and (if you tap the notification) the time you opened it. This log is associated with your account and is used to measure notification quality, prevent spam, enforce throttling limits, and improve the relevance of future notifications. You may request a copy or deletion of this log at any time by contacting us at the email address in Section 11.
Golf Data: We collect scores you enter, game formats you play, course information, and round history. This data is used to provide scoring, statistics, and game format calculations.
Scorecard Images: When you use the scorecard scanning feature, your camera captures an image of the physical scorecard. This image is processed by AI (Claude by Anthropic) via a secure server-side proxy to extract scores. We do not store the raw images after processing is complete.
Location Data: If you enable the Course View feature, we access your device's GPS to identify nearby golf courses and provide hole-by-hole navigation. Location data is used in real-time only and is not stored on our servers.
AI Interaction Data: When you use Condor (our AI caddie), your questions and the AI's responses are logged to improve the service. Questions are automatically categorized (e.g., swing fix, club selection, course strategy) to build a personalized coaching profile. This data is associated with your account.
OCR Correction Data: When you edit scores after a scorecard scan, we log the difference between the AI's read and your correction. This data is anonymized and used to improve scanning accuracy over time. No personally identifiable information is attached to OCR correction logs.
Analytics Data: We collect basic usage analytics including screen views, feature usage frequency, session duration, and app interactions. This data helps us understand how users engage with Flush and prioritize improvements.
Device Information: We may collect device type, operating system version, and app version for debugging and compatibility purposes.
We do not sell your personal information. We do not share, sell, or rent your phone number or push notification token to third parties for marketing or promotional purposes. We share data only with the following service providers, and only for the purposes described:
Within the app, certain data is visible to other Flush users: your display name, handicap, round scores (in shared rounds), challenge results, and leaderboard standings. Your email address, phone number, push notification token, raw scorecard images, and AI conversation history are never shared with other users.
We use industry-standard security practices including encrypted connections (HTTPS/TLS), Row Level Security policies on all database tables, and server-side API key management. AI API keys are stored as server-side secrets and never exposed to client devices. Push notification tokens are stored encrypted at rest and transmitted only over authenticated, encrypted connections.
If you choose to provide a mobile phone number, you consent to receive transactional SMS messages from Flush. These messages include verification codes, round notifications, and Tour Pool reminders. We do not send marketing or promotional SMS.
Message frequency varies based on your activity, typically 0–8 messages per week. Message and data rates from your mobile carrier may apply. Flush does not charge for SMS messages.
You may opt out of SMS at any time by replying STOP to any message. You may text HELP for help or contact us at the email address in Section 11. You may also remove your phone number from your profile in the Flush app to stop all SMS.
We do not sell, rent, or share your phone number with third parties for marketing or promotional purposes. Your phone number is shared only with Twilio Inc., our SMS delivery provider, solely for the purpose of routing the messages you have consented to receive. See Section 3 for details.
If you enable push notifications, Flush sends notifications to your device in five categories: Account & Security (transactional notifications such as new-device sign-in alerts and settlement requests), Your Group (round invites, completed rounds, group standings, and nudges from teammates), Tour Pool (pick lock reminders, tournament results, and season standings updates), Streaks & Condor (streak save reminders, weekly insights, and miss-pattern updates), and Product Updates (new features, Season Wrapped, and league launches).
You control which categories you receive in the Flush app under Settings → Notifications. By default, the Product Updates category is off; you must opt in to receive product updates. All other categories are on by default and can be disabled at any time. The Account & Security category cannot be disabled while the app is in use, as these notifications are required to keep your account secure.
You may set quiet hours during which Flush will not send non-urgent notifications. Quiet hours default to 10:00 PM through 7:00 AM in your local timezone. Account & Security notifications bypass quiet hours when necessary; all other categories respect them.
We aim to send no more than one push notification per day on average across all categories. Notification frequency in any individual category is subject to throttling rules designed to prevent spam.
You may disable all push notifications at any time by toggling the master switch in Settings → Notifications, or by revoking notification permission in your device's system settings. You may also delete your account, which immediately removes your push token and notification activity log from our systems.
Your account data and golf history are retained as long as your account is active. Your phone number, if provided, is retained until you remove it from your profile or delete your account. Your push notification token, if provided, is retained until you disable notifications, change devices, or delete your account. Your notification activity log is retained for 24 months after the notification was sent, after which it is permanently deleted. You may request deletion of your account and all associated data at any time by contacting us at the email below. OCR correction data is retained indefinitely in anonymized form for accuracy improvement.
You may request access to, correction of, or deletion of your personal data at any time. California residents have additional rights under the CCPA, including the right to know what data we collect and the right to opt out of data sales (we do not sell data). To exercise these rights, contact us at the email below.
Flush is intended for users aged 17 and older. We do not knowingly collect data from anyone under 17. If we learn that we have collected data from a user under 17, we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. Continued use of Flush after changes constitutes acceptance of the updated policy.
For privacy questions or data requests:
Verdix LLC
Marina del Rey, California
privacy@getverdix.com
© 2026 Verdix LLC. All rights reserved.