Privacy Policy

1. Introduction

Rally ("we," "our," or "us") is a social planning app that helps friends coordinate events, share availability, and communicate in groups. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our mobile application and website.

By using Rally, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address (from your sign-in provider or entered manually)
• Username (chosen by you or generated from your email)
• Phone number (optional, used for friend discovery)
• Date of birth (optional)
• Profile picture (optional)

Authentication

We support sign-in through Google, Apple, and Facebook. When you sign in with these providers, we receive your name, email address, and profile photo URL as provided by the service. We do not receive or store your passwords from these providers.

Messages and Content

When you use Rally's group chat features, we store:

• Text messages you send in group chats
• Group names, descriptions, and membership
• Events you create (titles, descriptions, times, locations)
• RSVP responses to events

Device Data

Location. With your permission, we collect your approximate location (rounded to ~110 meters) to help with group coordination and place recommendations. Location is collected only while the app is in use ("When In Use" permission). You can disable location access in your device settings at any time.

Calendar. With your permission, we read your device calendar to determine your availability. We only upload busy/free time blocks to our servers — we do not upload event titles, descriptions, attendees, or other event details.

Contacts. With your permission, we access your device contacts to help you find friends on Rally. Phone numbers are converted into one-way cryptographic hashes (SHA-256) before being sent to our server for matching. We do not upload raw phone numbers or contact names to our servers.

Analytics

We use PostHog to collect anonymized usage analytics such as feature usage, navigation patterns, and error reports. This helps us improve the app. We do not use analytics data for advertising.

3. How We Use Your Information

We use your information to:

• Provide and operate Rally's features (messaging, event planning, availability sharing)
• Help you find and connect with friends
• Show group availability and suggest meeting times
• Power Scout, our AI assistant (see Section 5)
• Send you notifications about group activity, mentions, and events
• Improve the app through analytics
• Respond to support requests and feedback

4. How We Store Your Information

Your data is stored on Supabase, a cloud database platform. Profile pictures are stored in Supabase Storage. All data is transmitted over HTTPS encryption.

Data retention:

• Your account data is retained as long as your account is active
• When you delete your account, your profile, group memberships, events, and availability data are permanently deleted
• Messages you sent in group chats are retained but anonymized (your name and ID are removed) to preserve conversation continuity for other group members

5. Scout AI Assistant

Rally includes an AI assistant called Scout that can respond when mentioned (@Scout) in group chats. When Scout is activated:

What is sent to our AI provider:

• The text content of recent messages in the group chat (including messages from other group members)
• Group member names and the group name/description
• Approximate location coordinates of group members (to provide location-aware recommendations)

What is NOT sent:

• Messages from chats where Scout is not mentioned
• Your password, email, phone number, or date of birth
• Your calendar event details
• Your contacts

Our AI features are powered by OpenAI. Data sent to OpenAI via their API is not used to train their models. For more information, see OpenAI's API data usage policy.

Important: When any member of a group mentions @Scout, message content and location data from all group members in that chat may be shared with OpenAI to generate a response. By participating in a group chat with Scout enabled, you acknowledge this data sharing.

6. Third-Party Services

We share data with the following third-party services to operate Rally:

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

7. Your Rights and Choices

You can:

• Delete your account at any time from the Profile screen. This permanently removes your personal data.
• Disable location access in your device settings
• Disable calendar access in your device settings
• Disable contacts access in your device settings
• Mute group notifications to control what notifications you receive
• Request a copy of your data by emailing us

To exercise any of these rights, contact us at admin@rallyapp.io.

8. Children's Privacy

Rally is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Cookies and Tracking

Our website (rallyapp.io) uses Vercel Analytics to understand traffic patterns. The mobile app does not use cookies. We do not use advertising trackers or cross-site tracking.

10. Security

We use industry-standard measures to protect your data, including HTTPS encryption for all data transmission, secure authentication via Supabase, and access controls on our infrastructure. However, no method of electronic transmission or storage is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or on our website. Continued use of Rally after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: admin@rallyapp.io