Privacy Policy

This policy explains what information Rally collects and how we use and protect it. For a focused description of how we limit the use of the data we process, see our Data Terms.

1. Information we collect

When you use Rally we collect: account details (email, name, avatar), your sports profile and per-sport attributes, your city/region (not precise location by default), participation history, events you host or attend, connections you accept, and feedback you submit. We also collect standard technical logs (IP, user agent) for security and reliability.

2. How we use information

Your data powers matching, event discovery, facility recommendations, and safety features (like enforcing mutual-consent connections). We use your data only to provide and improve these features. We do not sell your personal information and we do not use it for third-party or interest-based advertising.

3. How information is shared

Profile details are visible only to accepted connections and, in a limited form, to community admins scoped to your city or sport. Event attendance is visible to other attendees. Facility information is public. Site admins can access records for support and abuse investigations.

4. Third-party service providers

We rely on a small number of vetted providers for hosting, database, and authentication infrastructure. They process data only on our instructions to operate Rally, are bound by confidentiality and data-protection obligations, and may not use your data for their own purposes.

5. Cookies

We use essential cookies for authentication and session state. We do not use third-party advertising cookies.

6. Data security

We protect data in transit and at rest using industry-standard encryption, restrict internal access on a need-to-know basis, and monitor for misuse. No system is perfectly secure, but we work to protect your data appropriately to its sensitivity.

7. International data transfers

Rally may process and store data in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

8. Retention

We retain account data while your account is active. Deleted accounts are removed within 30 days, except where retention is required for legal, safety, or fraud-prevention reasons.

9. Your rights

You can access, correct, export, or delete your data from your profile settings. Depending on your jurisdiction (EU/UK/California/etc.) you may have additional rights.

10. Children

Rally is not intended for children under 13. If you believe a child has created an account, please contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you in the app.

12. Contact

Questions? Email hello@rally.app.