Privacy Policy

Bunker, for iPhone. Last updated 14 September 2026.

Bunker is made by Michael Ackley, one person rather than a company. This policy says what the app collects, who ever sees it, and how to get rid of it. It is short because the app does little: there is no advertising, no analytics, no third-party tracking of any kind, and nothing here is ever sold.

If you never sign in, nothing leaves your phone

Bunker works fully without an account. Your courses, rounds, shots and scores are stored on the device and the app makes no network requests for them. There is nothing for this policy to cover until you choose to sign in.

What is collected when you do sign in

Your account. Your email address, a display name, and a handle other players can use to find you. If you sign in with Google or with Apple, that provider tells Bunker your email address and, usually, your name. Bunker never sees your password for those accounts. If you use Apple’s Hide My Email, Bunker only ever holds the relay address.

Your golf. Every round you record: the course, the date, which tees, your score on each hole, any note you write, and the position of each shot as you tapped it on the map.

Your social activity, if you use it. Who you have asked to be friends with and who has accepted, the rounds you have chosen to post, the emoji reactions and comments you leave, anyone you have blocked, and any report you file.

What is never collected

Your location. Bunker does not use GPS, does not request location permission, and has no way to know where you are. Shot positions are places you tapped on a drawn map, not places your phone was.

Also never collected: your contacts, your photos, your health or fitness data, any advertising identifier, and any record of what you do in other apps. Bunker contains no advertising SDK and no analytics SDK.

Who else ever sees it

Supabase. Authentication, the database and the backup all run on Supabase, which stores this data on Bunker’s behalf and does not use it for anything else.

Google or Apple, but only if you use their sign-in button, and only to the extent of telling Bunker who you are.

Google Fonts. Bunker loads three typefaces from Google’s font service, which means Google receives your device’s IP address when the app first draws text. Nothing about you or your golf is sent with it. This is a leftover from the app being a web build first, and it is on the list to remove by shipping the fonts inside the app.

Apple, through the App Store, in the ordinary course of distributing an app.

Your data is not sold, not rented, not used to train anything, and not shared with anybody else.

What other players can see

Your rounds are private until you post one. A posted round is visible only to people you have accepted as friends, and a friendship only exists once both of you have agreed to it. Nobody can put themselves in your feed by knowing your handle.

Other players can see your display name and handle, any round you have posted, and any comment or reaction you leave on a round. A comment you write on a friend’s round can be seen by their other friends, including people you do not know, and your display name goes with it.

Blocking is invisible to the person blocked. Nobody is told they have been blocked and nobody can obtain a list of who has blocked them.

Getting rid of it

One round. Delete it from the list on the Course tab. It is removed from the phone and from the backup, along with any comments and reactions on it.

Everything. Course tab, then Delete account. This deletes your profile, every round, every friendship and request, every comment and reaction you have written, any blocks you have made and any reports you have filed, and it clears the copy on the phone. It is immediate and it cannot be undone. No part of the app requires you to email anybody to be deleted.

Data is kept until you delete it, or until you ask me to.

Children

Bunker is not directed at children and should not be used by anyone under 13. It is a social app in a small way, and nothing in it is designed with children in mind.

Security

Every round, comment and friendship is protected at the database by rules that allow a player to read their own rows and their accepted friends’ posted rounds, and to write only their own. All traffic is encrypted in transit. No system is perfectly secure, and this one is maintained by one person, which is worth knowing when you decide what to put in a note on a round.

Changes

If this policy changes, the date at the top changes with it, and the previous version stays in this page’s history on GitHub.

Contact

Questions, requests, or anything you think is wrong here: michaelack27@gmail.com.