Rally Privacy Policy
Last updated: February 13, 2026
Rally ("Rally," "we," "us," or "our") provides a mobile application to help users plan and coordinate live events. This Privacy Policy explains what information we collect, how we use it, when we share it, and your rights and choices.
Contact: rallyapp.app/support
1. Scope
This Privacy Policy applies to personal information processed through the Rally mobile application and related services (the "Service"). It does not apply to third-party websites, apps, or services that are not controlled by Rally.
2. Information We Collect
2.1 Information you provide directly
- Account and authentication data: phone number used for one-time passcode (OTP) sign-in.
- Profile information
- Event and planning content
- Event Participation data
- Communications: information you send when contacting us for support or account requests.
2.2 Information collected automatically
- Device/app information: platform, app version, generated device identifier, and push notification token.
- Usage analytics: in-app interaction events (for example authentication and event interaction events), internal identifiers (when applicable), timestamps, and event properties.
- Service and diagnostic data: operational logs and metadata generated by our infrastructure/providers, which may include IP address and request timestamps.
2.3 Data from permissions and device features
- Notifications permission: used to register your device for push notifications and deliver event-related notifications.
- Calendar permission: used only when you choose to add an event to your calendar.
- Clipboard access: when you open the "Join Invite" screen, Rally checks clipboard text to detect an invite link or code to help you join quickly.
- Maps and geocoding: when you search or select locations, location queries and place lookups are processed through our maps integration.
You can control permissions at any time in your device settings.
3. How We Use Information
We use personal information to:
- Create and manage accounts and authenticate users.
- Enable core features (event creation, invite access, RSVPs, ticket coordination, notifications, and profile display).
- Provide in-app and push notifications based on your preferences.
- Support mapping, place search, and geocoding for event locations.
- Maintain, troubleshoot, secure, and improve the Service.
- Enforce our Terms, detect misuse, and comply with legal obligations.
4. Legal Bases for Processing (EEA/UK)
If you are in the EEA or UK, we process personal data under one or more of these legal bases:
- Contract: to provide the Service you request.
- Legitimate interests: to secure, operate, and improve the Service.
- Consent: for permissions such as push notifications and calendar access where applicable.
- Legal obligation: to comply with applicable law.
5. How We Share Information
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
We may share information with:
- Infrastructure and backend providers (for example, Supabase) for authentication, database, server functions, and storage/processing.
- Maps and location providers (for example, Google Maps Platform APIs) for place lookup and geocoding support.
- Notification delivery providers (for example, Expo and platform push services such as APNs) to deliver notifications.
- Platform/device services you choose to use: calendar providers and native share targets when you explicitly add events to calendar or share invites.
- Legal/compliance recipients: law enforcement, regulators, courts, or other parties when required by law or to protect rights and safety.
- Successors in a business transfer: in connection with a merger, acquisition, financing, or asset sale.
6. Data Retention
We retain personal information for as long as needed for the purposes described in this policy, including to provide the Service, maintain security, and comply with law.
- Account/profile data: retained while your account is active.
- Event and participation data: retained until deleted by users or removed through account deletion workflows.
- Notifications: notification-related records are retained for a limited period consistent with operational needs and then deleted or de-identified.
- Analytics records: retained for product/security analysis and may be de-identified or aggregated over time.
- Logs and diagnostics: retained according to operational and security needs.
7. Account and Data Deletion
You can request deletion by:
- Using the in-app delete option: Profile -> Delete Account, or
- Contacting us via rallyapp.app/support.
When account deletion is processed, Rally removes or deactivates associated account data, including deleting your auth account/profile and removing event membership/participation records tied to your account. Events you own are soft-deleted (marked deleted and no longer available in the app experience). Some data may remain where required by law, for fraud/security prevention, dispute handling, or in de-identified/aggregated form.
8. Your Rights and Choices
8.1 General controls
- Update profile details in-app.
- Manage notification preferences in-app and at the device level.
- Request account/data deletion using the methods above.
8.2 EEA/UK rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, and objection to certain processing.
8.3 California privacy rights
California residents may have rights to know, access, correct, and delete personal information, and to receive information about data practices. Rally does not sell personal information or share it for cross-context behavioral advertising.
To exercise rights, contact: rallyapp.app/support.
9. Children's Privacy
Rally is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we collected such information, we will take steps to delete it.
10. Security
We use reasonable administrative, technical, and organizational measures to protect personal information. No system is completely secure, and we cannot guarantee absolute security.
11. International Processing
Depending on where you use Rally, your information may be processed in countries other than your own, including where our service providers operate.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and post the revised version.
Operational details may change over time without materially changing our core privacy practices.
13. Contact
For privacy requests or questions, contact: