Privacy Policy
Effective date: 2026-06-26 · Last updated: 2026-07-03
1. Who we are
FOREPAID, LLC, a limited liability company organized under the laws
of Minnesota ("FOREPAID," "we,"
"us," "our"), operates (a)
www.forepaid.app and all corresponding subdomains, web pages and
websites associated with the foregoing URL (the
“Site”), (b) the FOREPAID mobile application (the
“App”), and (c) any other content, applications,
systems, features, functionality, software, information, products and
services offered by us that link to this Privacy Policy (collectively,
the “ Services ”).
2. Scope of this policy
This privacy policy (“Privacy Policy”) describes how
we collect, use, share, and protect information in connection with your
access to and/or use of the Site, App, or Services. It applies to:
- Information you give us directly (for example, your profile, the
scores you enter, the people you add to a round);
- Information collected automatically by the App or Site (for example,
device identifiers, basic usage events, push-notification tokens);
and
- Information we receive from third parties when you authorize it (for
example, your USGA-attested Handicap Index® if you connect a
GHIN account once our USGA partnership is live).
FOREPAID is intended for adults aged 18 or older. We do not knowingly
collect personal information from anyone under 18. If we discover that
we have collected personal information from a person under 18, we will
take steps to remove that information from our systems. If you believe
we inadvertently collected information from a person under 18 years of
age, please contact us.
3. What we collect
Information You Provide Voluntarily. We collect the
information that you voluntarily provide to us. Examples of information
that may be provided by you that we collect include:
- Account information, including email address, phone
number, first and last name, your selected gender (male / female /
non-binary / prefer not to say), and other similar information that we
may require that you provide in order to access or use the
Services.
- Profile information, including
handicap mode (GHIN-Verified or Honor self-reported), your Handicap
Index® (when GHIN-Verified is live) or your self-attested
playing number (Honor), home course, profile photo and other similar
information that you provide us when using the Services.
- Payment information, including payment handles,
such as, your Venmo handle, Cash App tag, Zelle contact, or other
similar information needed to facilitate the settlement of wagers with
other players. We never store payment card numbers, bank accounts, or
balances. These handles are visible to the other players in any round
you settle.
- Round information, including courses you play,
scores entered for you (by you or by another player in your round), the
people you add to a round, the wagers you select, wager amounts, the
settlement results, or other information that you provide to us about
the round. Any player in your round can enter or edit any other player's
score on the shared scorecard. Every entry and edit is attributed to the
user who made it (shown as a small initial badge on the scorecard cell),
and contested edits surface a yellow warning on every phone in the round
until the score-owner confirms or reverts the change. The full edit
history is retained as an audit trail for the lifetime of the round.
Round information is shared with every player in that round.
Participants may also share a public web scorecard URL or an exported
summary image with others at their discretion. Round data is not
otherwise visible to non-participants.
Information We Collect Automatically. When you
access and/or use the Services, we automatically collect certain
information through cookies, web beacons and other technologies and
store it in our log files. This information includes anonymous
identifiers, operating system and version, your Internet protocol (IP)
address, pages you view on our Site, search terms you entered to arrive
at our Site and other information regarding your access to and/or use of
the Services. We may combine this information with other information
that we have collected about you, including, where applicable, your
username, name, and other Personal Information. We do not build
advertising profiles. Examples of information that may be automatically
collected by us include:
- Device identifiers information, including Apple
push notification (“APNS”) devices token for push notifications, app
version, iOS version, or other similar information about the device that
you use to access or use the Services.
- Usage information, including events associated with
your rounds, the screens that you visit, Russ audio events, or other
information about your use of the Services. Usage information is used to
improve the Services, including without limitation, to diagnose service
or technical problems. Russ audio event information is stored during the
round and visible to all players, including each Russ text-to-speech
call with its surface (where in the App it fired), the round it belongs
to, the trash-talk level, and the character count of the generated
audio. Russ event activity is never visible outside the round.
- Server log information, including standard request
logs or other automated, time-stamped records at our hosting provider
(for example, timestamp, IP address, and response status) that track
events, user actions, and system health while the Services are in use.
We use server log information for security, technical problem-solving,
abuse-prevention, or other similar purposes.
Information We Obtain From Third Parties. From time
to time, we receive personal information about you from third party
sources, but only where we have received assurances from these third
parties that they have either received your consent or are otherwise
legally permitted to disclose your personal information to us. Examples
of the type of information that may be automatically collected by us
include:
- Email Verification information, including your
verified email address, its validity status, and other information that
can be used to confirm that an email address is real, active, and
capable of receiving mail. When you sign in to the App, we email a
one-tap link to the email address that you provided in connection with
setting up your FOREPAID profile. Tapping the link returns a confirmed
email address and a session identifier to the app. We never store a
password.
4. How we use it
We may use information that we collect about you, including personal
information, for among other things, the following purposes:
To provide the Services to you, to communicate with you about
your use of the Services, to respond to your inquiries, to fulfill your
requests, and for other customer service purposes.
- To use in connection with the Services, including to keep score,
settle wagers, calculate handicap-adjusted net scores, generate Russ
narration, send round-related push notifications (i.e., invites, invites
accepted, scores posted, settle-up reminders, and other notifications)
and route settle-up deep links. When you invite someone to a round, the
recipient sees your first name and the round details (course, players
already added) so they can decide whether to join. We only send
round-related notifications after you have granted us permission in your
mobile device settings.
- To verify your identity and prevent fraud and abuse.
- To improve the Services, including to diagnose crashes, identify the
most-used features, refine Russ's voice quality.
- To meet legal obligations, including for tax reporting for
subscription revenue, response to lawful requests, or in connection with
complying with other lawful obligations that may be imposed on us.
5. The advertising and
data-broker promises
We do not sell your personal information. We do not share it with
advertisers. We do not use it to target ads to you on FOREPAID or
anywhere else. We do not maintain data-broker relationships. If we ever
change this, we will tell you in advance and you will have the right to
opt out before any sharing occurs.
6. Who we share with —
service providers only
FOREPAID is built on a small set of vetted service providers
("processors") who handle data (including the personal information of
FOREPAID users) on our behalf in connection with performing tasks.
Except as stated in this Privacy Policy or unless we inform you
otherwise, our processors do not have any right to use the personal
information that we share with them beyond what we deem necessary to
assist us in performing such tasks. The processors that handle data on
our behalf include the following:
- Supabase acts as our primary data processor and
performs tasks, such as, interacting the Postgres database, data
authentication, file storage, execution of globally distributed
serverless functions, such as, Edge Functions. Supa is hosted, and the
tasks that it performs, are performed in the United States.
- Apple Push Notification Service (APNS) delivers the
push notifications you opt into.
- ElevenLabs generates the Russ voice narration. The
script we send contains player first names, score events, and money
totals from the round. It does not contain GHIN numbers, email
addresses, or payment handles. Generated audio is short-lived (delivered
to the app and not retained by ElevenLabs beyond standard logging). We
log each call's surface, round, trash-talk level, and character length
in our own database for cost and quality monitoring (see "Usage events"
above); we do not share the script text or the audio with anyone other
than you and the players in your round.
- Vercel hosts the forepaid.app marketing and
invite-bouncer pages. Vercel receives standard web server logs and
related information, including text, images and embedded media. No
personal data is sent to Vercel from the user’s mobile device operating
system, including iOS app).
If we add a new processor, we will update this list. If the change is
material, we will notify you in the app before it takes effect.
7. Settlement deep-links and
money
FOREPAID never holds, escrows, custodies, or transmits your money.
When a round settles, the app generates a deep link that opens Venmo,
Cash App, or Zelle with the recipient and amount pre-filled. The actual
settlement transactions happens inside those apps, governed by their own
terms and privacy policies. FOREPAID has no insight into whether the
payment occurred — we only know whether the round participant marked the
line item as "paid" inside FOREPAID.
8. Where we store data
Our primary database is hosted in the United States (Supabase, East
US region in northern Virginia). Push tokens and analytics events are
also stored in the United States. If you are located outside the United
States, your information will be transferred to and processed in the
United States, where data-protection law may differ from your home
jurisdiction.
9. How long we keep it
Generally, any personal information that you provide to us is
retained so long as it is necessary to provide the Services and to
fulfill the specific purpose for which it was collected. Retention
periods vary depending on the type of data:
- Account and profile data is retained for so long as
your account is active. If you delete your account, we delete this data
within 30 days.
- Round and score data is retained for the lifetime
of the round's participants, so that historical rounds you played in
remain in your foursome's records even after one player leaves. Personal
identifiers tied to a deleted account are de-linked from those
historical rounds within 30 days; the round itself stays, with the
departed player shown as "(removed)."
- Settlement ledger entries and related data is
retained as required by US tax and wagering recordkeeping law (typically
7 years). These contain only dollar amounts and pair-wise debts; no GHIN
numbers or payment handles.
- Server log data is retained for 90 days, then it is
either aggregated or deleted.
10. Your rights and choices
Depending on your location and applicable data protection laws, you
may have the following rights regarding your personal information:
- Access: request a copy of the personal information
we hold about you.
- Correct: update or correct your information at any
time directly in the app (Profile screen) or by emailing us.
- Delete: delete your account from the Profile
screen, which triggers the 30-day deletion described above.
- Notifications: turn push notifications on or off in
iOS Settings → Notifications → FOREPAID at any time.
To exercise any of these rights, email privacy@forepaid.app. We will
respond within 30 days.
11.
California, Colorado, Virginia, and other state rights
Residents of California (CCPA / CPRA), Colorado (CPA), Connecticut
(CTDPA), Virginia (VCDPA), and other states with consumer-privacy
statutes have specific rights, including the right to know what
categories of personal information we collect, the right to request
deletion, the right to correct, the right to opt out of "sale" or
"sharing" (we do neither), and the right to non-discrimination for
exercising any of these rights. To exercise any of these rights, email
privacy@forepaid.app.
12. International users (GDPR)
FOREPAID is offered in the United States. If you access it from
outside the US, you do so on your own initiative and are responsible for
compliance with local law. Where the GDPR applies, our legal bases for
processing are (a) performance of a contract (providing the FOREPAID
service to you), (b) legitimate interests (improving the product,
preventing abuse), and (c) consent (where you opt in to push
notifications or marketing).
13. Security
We use HTTPS for all client–server traffic, row-level security in our
Postgres database to scope every read and write to the user's own
records, and encrypted-at-rest storage for credentials and sensitive
information. No system is perfect; if you suspect your account has been
compromised, contact us immediately at security@forepaid.app.
14. Changes to this policy
We may update this policy as the product evolves. When we do, we will
revise the "Last updated" date at the top. If a change is material, we
will notify you in the app before it takes effect.
Questions, requests, or concerns: hello@forepaid.app
Privacy-specific: privacy@forepaid.app
Mailing address:
FOREPAID, LLC
c/o Registered Agents Inc
202 N Cedar Ave, STE #1
Owatonna, MN 55060