Rally Privacy Policy
Rally is a dating app organised around activities. You say what you want to do — padel, dinner, a beach day — and you see people who want to do the same thing nearby. This policy explains what we collect, why, who we share it with, and how you get rid of it.
This policy covers the Rally mobile app and the services behind it. It is written by Kyle Lieberbaum (“Rally”, “we”, “us”), the controller of your personal data. You can reach us at hello@rallydating.app.
1. What we collect
You give us
| Data | Why |
|---|---|
| Email address | To create and secure your account. If you sign in with Apple using Hide My Email, we only ever see the relay address. |
| First name, date of birth, gender | To show you to other people and to enforce the 18+ rule. We store your date of birth and display only your age. |
| Who you want to see, age range, maximum distance | To decide whose profile you see, and whose you appear in. These are applied in both directions. |
| Photos | Your profile. Stored privately; see “How photos are protected”. |
| Bio and what you are looking for | Shown on your profile. |
| Activities, with your skill level, how soon you want to do them, the times of day that suit you, and any note | The core of the product: this is what you are matched on. |
| Messages you send, and plans you propose (place, time, note) | To deliver them to the person you matched with. |
| Reports you submit about another person | To review them and act. See “Reports and blocks”. |
We collect automatically
| Data | Why |
|---|---|
| Your approximate location (latitude and longitude) | To sort and filter people by distance. Collected when you allow it, and refreshed in the background only when you have moved more than about two miles and at most once an hour. |
| City, state and time zone, derived from that location | Shown on your profile instead of your coordinates, and used to interpret times sensibly. |
| Whether a plan happened, and how often you follow through | To show a “Shows up” badge, which only ever appears as a positive signal and only after at least three completed plans. Your underlying score is never shown to anyone, including you. |
| Notification token | To send you push notifications, if you turn them on. |
| Limited product events — that the app was opened, that a screen was used | To understand whether the product works. Deleted automatically after 90 days. |
| Crash diagnostics | To fix crashes. See “Crash reporting”, which explains what we strip out. |
2. What other people can see
Someone who matches your filters and shares an activity with you can see: your first name, your age, your photos, your bio and profile answers, your declared activities with their detail, your city, an approximate distance, and a “Shows up” badge if you have earned one.
They cannot see your email address, your date of birth, your precise location, your reliability score, your notification token, or anything you have told us in a report. Most of those are not merely hidden in the interface — they are withheld from the app at the database level, so no version of the app can ask for them.
3. Your reliability record
After a plan’s start time we ask both of you whether you met. We use those answers, and cancellations made at short notice, to maintain a private reliability score that affects how often your profile is shown. It is never shown to anyone as a number and never as a negative: the only thing another person sees is a positive “Shows up” badge, and only after at least three completed plans. Not answering is not held against you — only what someone actually reports counts.
4. Sensitive information
Two things we hold need calling out specifically.
- Who you want to see. Your gender preference can imply your sexual orientation, which is a special category of personal data under the UK and EU GDPR. We process it only to operate matching — never for advertising, profiling or any other purpose — on the basis of your explicit consent, given when you set it during onboarding. You can change it at any time in Settings.
- Your precise location. Handled as described below.
5. How your location is protected
Other people see your city and a rounded distance — “about 3 miles away” — never a precise figure and never a position. Distances are deliberately coarse so that nobody can combine several readings to work out where you are. When you and a match need a venue between you, the midpoint is calculated on our server and only that midpoint is used to search for places; neither person's location is sent anywhere.
We ask for location only while you are using the app. We never track you in the background. If you decline, you can still use Rally — you will be shown people using the last location you provided, or you can set one manually.
6. How photos are protected
Photos are stored in a private bucket, not on the open web. There is no public URL for your photos. Each time someone is allowed to see one, the app requests a short-lived signed link that expires. Deleting a photo removes both the record and the underlying file.
7. Why we are allowed to process this (UK/EU users)
| Purpose | Lawful basis |
|---|---|
| Running your account, matching, messaging and plans | Performance of a contract with you |
| Who you want to see | Explicit consent (Article 9(2)(a)) |
| Location for distance filtering | Consent, given through the operating system permission |
| Push notifications | Consent |
| Safety, moderation, preventing abuse and fraud | Legitimate interests, and legal obligation where one applies |
| Fixing crashes and keeping the service working | Legitimate interests |
Where we rely on consent you may withdraw it at any time, which does not affect processing already carried out.
8. Who else sees your data
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Rally shows no advertising. We use a small number of service providers, who act on our instructions and may not use your data for their own purposes:
| Provider | What it handles |
|---|---|
| Supabase | Our database, file storage and authentication. This is where your account lives. |
| Apple and Google | Sign-in, if you choose it. They tell us an identifier and an email address; we tell them nothing about your activity. |
| Expo | Delivering push notifications to your device. |
| Google Places | Venue suggestions. It receives a midpoint between two people and a search term — never an account, a name, or either person's own location. |
| Sentry | Crash diagnostics, stripped as described below. |
We may also disclose information if we are legally required to, or where we believe in good faith that it is necessary to protect someone's safety or to investigate abuse of Rally.
9. Crash reporting
When the app fails we send a diagnostic report. Because a crash on a dating app can happen next to a message or a photo, we configure this deliberately rather than accepting the defaults: we identify the session only by an account identifier, and we remove message contents, bios, notes, names, email addresses, coordinates, photo paths, addresses and tokens before a report is sent. Session recording is disabled entirely. Network breadcrumbs are stripped of query strings.
10. Reports and blocks
If you report someone, we keep the report, the reason you selected, anything you wrote, and a reference to the conversation or plan it concerns, so that we can review it. We review reports of objectionable content and abusive behaviour and act within 24 hours, which may mean removing content, or suspending or removing an account.
If you block someone, we record that block permanently so that we can keep the two of you apart. This survives deleting your account — it is the only thing that does — because the alternative would let someone reappear in front of a person who blocked them.
11. How long we keep things
- Your account and its contents — until you delete it.
- Product events — 90 days, then deleted automatically.
- People you passed on — until the pass expires, so you are not shown the same person forever.
- Reports — kept after review for as long as needed to run a safe service and to meet legal obligations.
- Blocks — kept indefinitely, as explained above.
12. Deleting your account
You can delete your account in the app: Me → Settings → Delete account. It is immediate and it is not a deactivation. Deleting removes your profile, photos (both the records and the stored files), activities, messages, matches, plans, likes and answers. Backups are overwritten on their normal cycle.
13. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent. Most of this you can do yourself in the app; for anything else, write to hello@rallydating.app and we will respond within the time the law allows.
If you are in the UK or EU you may also complain to your local supervisory authority. If you are in California, we do not sell or share your personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
14. International transfers
Rally is operated from the United States and our providers may process data in the United States and elsewhere. Where data leaves the UK or EEA we rely on the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.
15. Security
Access to data is enforced in the database itself rather than only in the app, so a person can only read their own record and those of people they have matched with. Sensitive fields — exact coordinates, email addresses, notification tokens and the reliability score — are withheld from the app entirely and are readable only by our servers. Photos are private and served through expiring links. No system is perfectly secure, but these are structural protections rather than promises.
16. Changes
If we change this policy we will update the date above, and we will tell you in the app before a material change takes effect.