Privacy Policy

Last updated: 4 November 2026

Rallyd Ltd ("we", "our", or "us") operates Rallyd for iPhone and Android phones, with additional features on Apple Watch. This policy explains what data we collect, why we collect it, and how we protect it.

1. Data We Collect

We collect the following categories of data:

• Account information: Your name, email address, and profile photo (if you choose to add one). This is collected when you sign in with Apple or Google.
• Match data: Scores, match results, player assignments, and timestamps for matches you record using the app.
• Health and fitness data: Heart rate, active calories, step count, and workout duration collected via Apple Watch during matches. This data is accessed through Apple HealthKit with your explicit permission.
• Motion data: Accelerometer data processed on-device to detect shots during matches. This data is not transmitted to our servers.
• Crash and performance diagnostics: Crash reports and app-performance measurements through Firebase Crashlytics and Firebase Performance Monitoring. These can include installation identifiers, device and operating-system information, stack traces, and network-performance information.
• Purchases: If you buy a subscription through Google Play, we process the purchase token, subscription product, status and expiry, and its association with your Rallyd account to verify purchases and restore paid access. Apple processes App Store purchases. Payment-card details are handled by the store, not received or stored by Rallyd.

2. How We Use Your Data

• To provide the core scoring and stats functionality of the app
• To display your profile, match history, and statistics
• To power social features (activity feed, leaderboards, friend connections)
• To record workout data to Apple Health (with your permission)
• To verify subscription access, restore purchases and prevent purchase-token misuse
• To fix bugs and keep the app fast through crash and performance diagnostics

3. Health Data

Rallyd uses Apple HealthKit to read heart rate, active energy, and workout data during matches. We also write completed workouts back to Apple Health. Health data is:

• Only accessed with your explicit permission
• Never sold to third parties
• Never used for advertising
• Stored securely in Firebase Firestore alongside your match data

4. Data Storage and Security

Your data is stored in Firebase (Google Cloud Platform) with industry-standard encryption in transit and at rest. Match data is also stored locally on your device for offline access. We retain account data while your account is active, subject to the deletion arrangements below. Firebase diagnostic data has separate retention practices described in its privacy information.

5. Data Sharing

We do not sell your personal data. Your data may be visible to other Rallyd users in the following ways:

• Your display name and profile photo are visible to other users
• Match results are visible to friends who follow you (in their activity feed)
• If you opt in to leaderboards, your ranking and win rate are publicly visible
• Shared match links show match results to anyone with the link

6. Your Rights

Under UK GDPR, you have the right to:

• Access your data — view your profile, matches, and stats within the app
• Correct your data — edit your display name and profile information
• Delete your data — use account deletion in Settings or request deletion without the app, subject to the shared-record retention described below
• Withdraw consent — revoke HealthKit permissions at any time via your iPhone Settings
• Opt out — disable leaderboard participation at any time in Settings

7. Account Deletion

You can delete your account from Settings within the app, or request account and associated-data deletion on the web without reinstalling Rallyd. We verify account ownership before carrying out a request. Deletion cannot be undone.

Deletion removes private profile details such as your email and profile photo, your username claim, solo-owned matches, your own feed activity and social connections, Rallyd's Google Play purchase-verification records, and your sign-in account.

Shared matches and competitions remain so other players retain their history. A limited historical profile retains your account identifier, display name and original account-creation date, with a deleted-account flag; it no longer contains your email, photo, preferences or username. Shared records and this historical profile have no automatic expiry. Other players' own comments and reactions may also remain. Contact us if you want to discuss removal of your name from historical records.

Deleting your Rallyd account does not automatically cancel an App Store or Google Play subscription. Manage cancellation through the store that bills you. Apple and Google retain their own transaction records under their respective policies. You can request account deletion regardless of whether you have already cancelled your subscription.

8. Children's Privacy

Rallyd is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Third-Party Services

Rallyd uses the following third-party services:

• Firebase (Google) — authentication, data storage, crash reporting, and performance monitoring. Firebase Privacy Policy
• Apple HealthKit — health and fitness data access. Data handling governed by Apple's policies.
• Apple Sign In / Google Sign In — authentication providers.
• Apple App Store / Google Play — subscription payment processing, purchase verification and subscription management. Google Privacy Policy and Apple Privacy Policy.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this policy or to exercise your data rights, email us at carl@rallyd.app.