Privacy Policy

1. Who we are

Rally is operated by Nicholas D'agosto (“Rally,” “we,” “us”), based in the United States. We are responsible for the information described in this policy. You can reach us at privacy@gorally.net.

2. What we collect

In the app

• Account information. When you sign in with Apple or Google, we receive an account identifier, your email address and your name, if you share them. With Sign in with Apple you can hide your email, and we then receive a private relay address instead. Test accounts we set up sign in with an email address and password; we store only a secure hash of the password.
• Profile. The username and display name you choose, and the date you joined.
• Location at check-in. Your precise location, only at the moment you check in to a game. See Your location for exactly what we keep.
• Games you attend. The games you check in to, the team you support at each one, any rating you give, and the badges and milestones you earn from them.
• Chat. Messages you send in game chats, which other fans in that chat can see along with your username and display name. We also keep the reports you file, the people you block, and any moderation action taken on an account.
• Notifications.If you allow notifications, your device's push token, so we can send them to you.
• Technical logs. Our servers record basic request information, such as IP address, the page or feature requested, and the time, to keep Rally running, prevent abuse and fix problems.

The app has no advertising or third-party analytics SDKs, and doesn't access your contacts, photos, camera or microphone.

On gorally.net

• Waitlist.If you join the waitlist, your email address, which we use only to tell you about Rally, such as when it's on the App Store.
• Site analytics.We use Vercel Web Analytics and Speed Insights to count visits and measure page speed. They collect aggregated, anonymized data (such as pages viewed, referrer, browser, device type and country) and don't use cookies.

3. Your location

Rally uses location for one thing: confirming you're actually at the stadium when you check in to a game, which is what unlocks that game's fan chat. The app asks for your location only when you tap check-in. It never tracks you in the background.

• When a check-in succeeds, we keep your distance from the venue and the accuracy of the reading, but not your coordinates.
• For each check-in attempt, including ones that fail, we keep a short record to prevent cheating and fix problems. It holds the result, the distance and accuracy, and your coordinates rounded to about 100 meters. These records are deleted automatically after 30 days.

You can decline or turn off location access at any time in iOS Settings. You won't be able to check in to games without it.

4. How we use it

• To create and secure your account and keep you signed in.
• To verify check-ins, open game chats to the fans who are there, and build your game history, teams and badges.
• To show your username, display name and messages to other fans in the chats you join.
• To send notifications you've allowed.
• To keep Rally safe: to review reports, enforce blocks and bans, limit abuse and investigate problems.
• To run, fix and improve the app and this website, and to email waitlist members about Rally.
• To comply with the law and respond to lawful requests.

5. Who we share it with

We don't sell or rent your information, and we don't share it for advertising. We share it only with service providers that help us run Rally, and only for that purpose:

• Amazon Web Services, which hosts our servers and database in the United States.
• Apple, for Sign in with Apple and push notifications.
• Google, for Sign in with Google.
• Resend, which stores the waitlist and sends its emails.
• Vercel, which hosts this website and provides its analytics.

Game schedules and scores come from public sports data sources; we don't send them any information about you. We may also disclose information if the law requires it, to protect the safety of our users or the public, or as part of a merger or sale of Rally, in which case this policy would continue to apply to your information.

6. How long we keep it

• Your account and everything linked to it (profile, attendance, badges, chat messages, blocks and push tokens) is kept until you delete your account.
• Check-in attempt records are deleted after 30 days.
• Server logs, including IP addresses, are deleted after 30 days.
• Waitlist emails are kept until you unsubscribe or ask us to remove you.

7. Your choices and rights

• Delete your account in the app: Profile → Delete Account. This permanently deletes your account and the information linked to it, including your attendance, badges and chat messages. If you signed in with Apple, we also revoke Rally's access to your Apple ID.
• Location and notifications can be turned off at any time in iOS Settings.
• Waitlist: use the unsubscribe link in any email, or write to us.
• Access, correction and deletion. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, or to object to how we use it. Email privacy@gorally.netand we'll respond within 30 days. We won't treat you differently for exercising these rights.

8. Children

Rally isn't directed to children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has given us information, contact us and we'll delete it.

9. Security

We protect your information with encryption in transit (HTTPS), sign-in tokens stored in your device's Keychain, hashed passwords, and restricted access to our servers and database. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects it.

10. Changes

We'll update this policy as Rally changes. We'll post the new version here with a new effective date, and tell you in the app or by email before any significant change takes effect.

11. Contact

Questions or requests about your privacy? Email privacy@gorally.net.