Privacy Policy

Effective date: April 13, 2026

Rally ("we", "us", "our") operates the Rally mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our app.

Information We Collect

• Account information: Email address, display name, and password (stored as a salted hash — we never store or see your plain-text password).
• Profile information: Self-reported skill level (tennis and/or pickleball), sport preferences, and optionally a profile photo.
• Location data: Your approximate location (latitude/longitude) when you grant location permission. Used to find nearby players and courts. We do not track your location in the background — location is only accessed when the app is in use.
• Match data: Match history, outcomes (played / cancelled), and post-match feedback (skill calibration and reliability).
• Chat messages: Messages sent within an active match. Messages are relayed in real time and automatically deleted when the match is cancelled or completed.
• Push notification tokens: Your device's Expo push token, used to deliver notifications when the app is closed. Deleted on logout.

How We Use Your Information

• Matchmaking: Your location, skill level, sport preference, and activity status are used to find compatible players near you.
• Court discovery: Your location is used to show nearby tennis and pickleball courts.
• Notifications: Push notifications inform you of match events (found, accepted, confirmed, cancelled) and new messages.
• Reliability & skill calibration: Post-match feedback from opponents is used to calibrate skill ratings and reliability scores. These scores are internal — we do not publicly display raw numbers.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only in these limited circumstances:

• Other players: Your display name, skill level, and profile photo (if set) are visible to players you are matched with. Your email address is never shared.
• Service providers: We use Expo's push notification service to deliver notifications to your device. Expo receives your push token but not your personal information.
• Legal requirements: We may disclose information if required by law or to protect our rights.

Data Retention

• Account data: Retained while your account is active. You may request deletion at any time by contacting us.
• Chat messages: Automatically deleted when a match is cancelled or completed.
• Location: Stored as part of your profile for matchmaking. Updated each time you open the app. Not tracked in the background.
• Match history: Retained for your personal history (last 20 matches). Not publicly visible.

Data Security

All communication between the app and our servers uses HTTPS (TLS encryption). Passwords are hashed with bcrypt. Authentication uses short-lived JWT tokens. Our servers are hosted in the EU (Hetzner, Germany).

Your Rights

You may:

• View and update your profile information at any time within the app.
• Delete your push notification token by logging out.
• Request a copy of your data or request account deletion by emailing us.

Children's Privacy

Rally is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

Third-Party Data

Court location data is sourced from OpenStreetMap, used under the Open Database License (ODbL). © OpenStreetMap contributors.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.

Contact Us

If you have questions about this privacy policy or your data, contact us at:

privacy@rallytennis.uk