Privacy Policy

About student-athletes (entered by coaches and schools for interscholastic competition): name, school, graduation year, gender (used for division assignment, competition, and rankings), competition division and level, and golf scores and results.

About account holders (coaches, administrators, players, and adults purchasing passes): name, email address, and login credentials. For paid passes, billing details are handled by our payment processor (Stripe) — we receive transaction records but do not store full card numbers on our servers.

Automatically, when you use the site (log data): device type, browser, IP address and the general location (city or region level) derived from it, pages visited, session activity, and access times. We use these to keep the Services secure, diagnose problems, enforce our account and pass sharing rules, and keep the Services running. We never use them to track students or to build advertising profiles.

We do not collect: social security numbers, financial account information, health or disability information, biometric data, or student home addresses or precise location.

• To provide the Services: accounts, rosters, live scoring, results, statistics, rankings, and season management.
• To process purchases and maintain transaction records.
• To communicate with you: transactional messages (receipts, account notices, service announcements) and, separately, occasional marketing messages to adult account holders that you can opt out of at any time. We never send marketing based on student-athlete data.
• To protect the Services: security monitoring, fraud prevention, and reviewing session activity to enforce our account and pass sharing rules.
• To improve the Services, including analyzing usage in aggregate.

• We do not sell, rent, or trade personal information.
• We do not share personal information with third parties for targeted advertising, and we do not run third-party advertising networks on the Services.
• We do not use student-athlete data for marketing, advertising, profiling, or any purpose unrelated to operating the platform. Student data is used to administer the sport — nothing else.

Competition results — leaderboards, scorecards, rankings, and standings showing a player's name, school, and scores — are displayed publicly, just as high school sports results have always been publicly reported.

We never publish student email addresses, phone numbers, home addresses, or birthdates — for anyone, masked or not.

If a parent or legal guardian objects to the display of their child's information, we offer masking and suppression options: the player's information is masked or suppressed from public display surfaces while team scoring integrity is preserved. Because scores are part of the official competition record, underlying records may be retained even when public display is suppressed.

Under the Family Educational Rights and Privacy Act (FERPA), a school may designate certain information — including a student's name and participation in athletics — as "directory information," and parents may opt out of its disclosure by notifying the school. We honor those opt-outs. School staff are responsible for identifying student-athletes whose families have filed a directory information opt-out with the school and for requesting masking for those students, as described in our Staff & Student Data Addendum. A parent or guardian may also contact us directly using the information in Section 13, and we will apply masking regardless of whether the school has notified us.

A parent or legal guardian (or an eligible student) may: (1) review the information we hold about their child; (2) request correction of anything inaccurate; and (3) request that their child's name be masked from public displays, in which case scores still count for the team but the name is masked. Contact your school's coach or athletic director, or email support@plusfour.golf. We respond to verified requests within 10 business days.

FERPA. For records that are education records under the Family Educational Rights and Privacy Act, PlusFour acts as a school official with a legitimate educational interest, under the direct control of the school with respect to the use and maintenance of those records. We use them only for the purposes the school authorizes, and we do not re-disclose them except as the school directs or the law requires.

Idaho Code § 33-133. We handle student data consistent with Idaho's student data privacy requirements, including the limits on secondary use and the security and destruction obligations described here. We restrict access to student data to authorized users who need it to administer the sport, we maintain administrative, physical, and technical safeguards, and we will enter into a written student data privacy agreement with a school or district upon request.

Every protection is enforced by our servers, not just hidden in the app: deny-by-default database access, role-based permissions (a coach only touches their own school), restricted personal fields, encrypted connections, server-side authorization checks on privileged operations, and a permanent audit log of every score change recording who changed what, when, and from what value to what value. A detailed description is available to schools on request. No system is perfect — if a breach affects personal information, we follow our breach response plan, provide any legally required notice, and notify affected schools without unreasonable delay.

Only the service providers that run the Services — Supabase (database hosting), Cloudflare (site hosting and delivery), Stripe (payment processing), and Resend (email delivery) — under contracts that limit them to that purpose, and the schools whose data it is. No one else. We disclose information otherwise only if the law requires it or when we believe disclosure is necessary to protect the rights, safety, or property of PlusFour, our users, or the public, and we will tell the affected school unless the law forbids it. If PlusFour is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Golf scoring records are kept as part of the historical competition record so students keep a continuous record across their high school careers. Account and billing records are kept while the account is active, and afterwards for as long as our tax and accounting obligations require. Session and log records are purged on a rolling twelve (12) month basis. When you close your account, we delete or de-identify personal information not needed for these purposes, though residual copies may persist in backups for a limited time.

Most athletes on the platform are minors. Their data is entered and managed by schools and coaches for interscholastic competition, and we apply the protections above to all of it. You must be at least 13 years old to create an account, and we do not knowingly create accounts for children under 13. Player accounts are created through the school and coach process. If you believe a child under 13 has created an account, or that information about a minor appears on the platform without required authority, please contact us and we will address it promptly.

We may update this Policy from time to time. Each version carries a version identifier and effective date. If we make material changes, we will notify you through the Services or by email and, where required, ask you to accept the updated Policy. If a change materially affects how student data is handled, we will notify participating schools before the change takes effect.

Questions, requests, or concerns about this Policy or your information:
PlusFour Golf, LLC · 1177 Call Place, Ste C · Pocatello, Idaho 83201 · support@plusfour.golf