This is the privacy policy for Rally, an iOS and Apple Watch app for organising casual padel with friends. It explains what data the app handles and what we do — and don't do — with it.
The plain version: we store only what's needed to run your games and crews. We don't sell your data, show ads, or train anything on it.
Who we are
Rally is published by reiss.dev, the data controller. Reach us at reiss.barran@gmail.com for any privacy or data question.
What we store
Rally uses Sign in with Apple, so we receive an Apple user identifier and the name/email you choose to share. To run the app, our backend (hosted on Supabase, in the EU) stores:
- Your profile — display name, username, optional avatar, and your availability preferences;
- Your crews and who's in them;
- Games, RSVPs, and the court cost / “who paid” ledger;
- Match scores and the stats derived from them;
- Social content you create — reactions, comments, crew chat messages, and RSVP notes;
- A device push token, so we can send game notifications.
Phone contacts (optional)
If you choose “Find from contacts”, we compute a one-way hash (SHA-256) of phone numbers to match friends who already use Rally. We store the hash of your own number so others can find you — never your actual contacts or their numbers. You can skip this entirely.
Apple Health (optional)
If you allow it, Rally reads your padel/tennis workouts from Apple Health to show your time on court, distance, calories and heart rate. This is read-only, used for display, and not shared with anyone. You can revoke access any time in iOS Settings → Health.
Who can see your data
The point of Rally is sharing within your crew: your crew-mates see your name, avatar, availability, games, scores, and anything you post. We don't share your data with anyone outside that, except the service providers that make the app work — Supabase (backend hosting) and Apple (push notification delivery) — who process it on our behalf.
Calendar feed
If you subscribe to your Rally calendar, we serve your upcoming games as a calendar feed at a private, unguessable link. Anyone with that link can see those game times and places, so keep it to yourself — you can reset the link in the app at any time to revoke it.
What we never do
We don't sell your data, run advertising, or use your content to train machine-learning models.
Keeping and deleting your data
We keep your data while your account is active. Deleting your account (in the app, under You) removes your login and personal details; your name is wiped from past games, which remain in your crews' shared history without identifying you. You can also request access to, or deletion of, your data by emailing us.
Children
Rally isn't intended for anyone under 13 (or the minimum age in your country). We don't knowingly collect data from children.
Your rights
Depending on where you live (for example, under GDPR), you have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll help.
Changes
If we change this policy in a way that affects your data or rights, we'll surface it in-app before it takes effect.