Privacy Policy
Path to Scratch is designed so that we do not receive your swing videos, rounds, practice history, plans or fitness logs.
Who operates the app
Path to Scratch operates the Path to Scratch iPhone app and this website. Privacy questions can be sent to support@pathtoscratch.app.
Information that stays with you
Golf and fitness records
Practice sessions, test results, drills, workouts, plans, courses and rounds are stored on your device. If iCloud is available, Apple syncs those records through the private database for your Apple Account. We do not operate an account system or a company database containing those records, and we do not have an ordinary way to browse one user's private CloudKit records.
Swing videos
Swing videos remain on your device. Video import uses Apple's system photo picker. Saving uses add-only Photos access, which lets the app add a video without reading your photo library. The app does not upload swing videos to us.
Course search security information
Course search connects to a Cloudflare Worker operated for Path to Scratch. The Worker uses Apple App Attest to verify that a request came from a genuine installation of the app before it accesses the licensed course-data service.
For this purpose, the Worker retains:
- a random App Attest key identifier unique to that installation;
- the corresponding public key;
- an increasing request counter;
- the App Attest environment and registration time.
Apple designs App Attest credentials to be anonymous. They contain no name, email address, Apple Account or hardware identifier, are not shared between apps, and change if the app is reinstalled. We do not combine this security record with golf records, advertising data or other datasets.
The record is used only to authenticate course-search requests, prevent replay attacks and protect the licensed service from abuse. It is not used for advertising, marketing, analytics or tracking. Short-lived challenge records automatically delete shortly after their five-minute validity period. Installation security records automatically delete after 12 months without a successful course request, or earlier if the service's security records are reset.
Course search requests
The search words or course identifier you submit pass through the Worker to GolfCourseAPI so the requested results can be returned. Path to Scratch does not intentionally retain a history of those searches. Cloudflare and GolfCourseAPI process network requests as service providers and may process technical information such as IP addresses under their own legal and security obligations.
Website
This website does not use advertising, analytics, tracking pixels, third-party fonts or cookies. Cloudflare hosts and secures the site and may process ordinary request information, including IP address and browser information, to deliver and protect it.
Purchases
Apple processes subscriptions and free trials. We do not receive payment-card details. The app asks StoreKit whether the Apple Account has an active entitlement; Apple's handling of purchase information is governed by Apple's policies.
Tracking and advertising
We do not track you across apps or websites, build advertising profiles, sell personal information or share information for targeted advertising. The app does not request App Tracking Transparency permission because it does not perform tracking.
Managing your information
You can edit and delete practice records, rounds, plans, drills, courses and other saved entries in the app. Removing the app deletes its local container. Records synced through iCloud may remain in your Apple Account until removed through the app or through Apple's iCloud storage controls.
Because Path to Scratch has no user account and the App Attest record is anonymous, we generally cannot identify records by a person's name or email. Contact us if you have a privacy request or need help deleting app data.
Children
Path to Scratch is a general-audience golf app. It does not knowingly collect names, contact details, precise location, photos, videos or behavioral advertising data from children. If you believe a child has provided personal information to us, contact us so we can investigate.
Security
The app uses Apple's sandbox, private CloudKit databases, StoreKit transaction verification, HTTPS, Keychain storage and App Attest. No system is guaranteed to be perfectly secure, but the app is designed to minimize what leaves the device and to avoid holding information we do not need.
Changes to this policy
We may update this policy when the app or legal requirements change. The effective date at the top will be updated. Material changes will be communicated through the app or its App Store listing when appropriate.
Contact
Email support@pathtoscratch.app.