Privacy

• When a member introduces you: your name, and what the member wrote about why you belong and how they know you.
• When you say yes to an invitation: your email address and a phone number or other way to reach you, and a random code stored in your browser so that only you can open your application.
• Your application: the answers you choose to give, such as your birthday, your home city and clubs, how you like to play, what you eat and any allergies, how you like to travel and stay, your partner's name, an anniversary, clothing sizes, and a few words about yourself. Only a small number of questions are required.
• Vetting: short notes from the members who play a round and share a meal with you, the committee's votes, and any comment a member sends the committee about your application.
• As a member: your name and member number, your Alola golf number and the scorecards behind it, the games, dinners and journeys you say you are joining, what you post in the Clubhouse and in circles (words, photos and videos), what you tell the committee privately, and the notifications we send you.
• If you turn them on: the address your phone gives us for alerts, and the Telegram or WhatsApp account you connect.
• From the public site: if you ask to be introduced, the name, city, home club, contact and note you give us.
• Settings kept on your device: the reading language you choose, and a sign-in cookie so you stay signed in.

We do not use advertising or tracking cookies, and we do not buy data about anyone.

• To consider your introduction and run the membership process.
• To run the club: games, dinners, journeys, circles and the Clubhouse.
• To look after you properly when you travel with us or visit a partner, for example a welcome that gets your name, your table and your allergies right.
• To send you the club's notifications, by the channels you have chosen.
• To keep the club safe and the app working.

We use your data on the basis of your consent, which you give when you say yes to an invitation and when you fill in your application. You may withdraw it at any time (section 7).

• The committee sees your application, the vetting notes and the votes.
• Members see only what the application marks as seen by members: your name, the day and month of your birthday (never the year), your home city and clubs, and the three things you love. While your application is open, members see that your name has been put forward.
• Circles are private to the members in them. The Clubhouse is private to members. Nothing posted in the app is public.
• Partners (clubs and hotels) receive nothing from us. You book with them yourself and give them what you choose.

We never sell or rent personal data.

A small number of service providers process data on our behalf, only as needed and under confidentiality obligations:

• Supabase hosts the database and stored photos, in Singapore.
• Vercel serves the website and app.
• Google Workspace carries the club's email.
• Anthropic provides the AI used to read a scorecard photo into numbers and to translate the app into your language. A member's message is translated only when a reader taps Translate, and is not stored by us for that purpose.
• Apple, Google and other browser makers deliver phone alerts; Telegram or WhatsApp only if you connect them.

Some of these providers may process data outside Singapore. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA.

• If an introduction is withdrawn or not taken further, we delete the application answers within 12 months, keeping only a note that it happened.
• While you are a member, we keep your data for as long as you remain one.
• When you leave, we delete or anonymise your data within 12 months, except what the law requires us to keep.
• A scorecard photo is read and then discarded; only the numbers are kept.

Access is limited by role and enforced in the database, not only in the app. Applications can only be opened from the browser that answered the invitation. Photos and videos are stored privately and shown through short-lived links. No system is perfect; if we ever find that your data has been exposed, we will tell you and the Personal Data Protection Commission as the PDPA requires.

You may ask to see the personal data we hold about you and how it has been used, ask us to correct it, withdraw your consent, or ask us to delete it. Members can change most of their answers themselves in the app, under You. Withdrawing consent may mean we can no longer consider your introduction or keep your membership. We will reply within 30 days.

For anything about your data, write to our Data Protection Officer at m@alola.com. If you are not satisfied with our reply, you may contact Singapore's Personal Data Protection Commission.

Read this with our Terms and How we play.