Rally Privacy Policy

Last updated: June 2026

What we collect

• Phone number — account creation, SMS verification, and sign-in
• Birthdate — collected once at signup to verify you meet our 17+ age requirement
• Username, optional email, and profile photo — your public identity in the app
• Sports, equipment, and difficulty preferences — to personalize challenges and Discover events
• Challenge photos and videos — optional proof; visibility is friends-only or public
• Challenge text, reactions, ratings, and custom challenge messages
• Friend connections, blocks, and safety reports
• Completion stats and streaks, including friend streaks and DND pause periods
• App preferences — theme, notifications, hard mode, and DND mode
• Location — only when you turn on Location services; used for nearby events on Discover
• Push notification tokens — to deliver challenge and friend alerts
• Video-recording consent timestamp — when you accept proof upload during onboarding
• Session tokens — stored securely on your device to keep you signed in

How we use data

• Authenticate you and restore your account when you sign back in
• Generate and deliver fitness challenges matched to your preferences
• Display completed challenges in your friend feed or, if you choose public visibility, the public feed
• Show curated local fitness events on Discover (opens third-party booking sites)
• Calculate streaks, leaderboards among friends, and activity history
• Moderate reported content and enforce community safety

Third parties

• Google Firebase — phone verification SMS at sign-in
• Cloudinary — photo and video storage and delivery
• Expo / Apple — push notifications
• Event providers — when you tap an event on Discover, you leave Rally for their site

Retention and deletion

• Delete your account anytime in Profile → Delete account; this removes your profile, friends, challenges, uploaded media, and related data
• Block users to prevent all interaction
• Report videos or users for moderation review
• Withdraw video-recording consent by not uploading proof; contact support for data questions

Children and age verification

Rally is rated 17+ on the App Store and is not intended for users under 17. At signup we ask for your birthdate and reject accounts that do not meet this minimum. We do not knowingly collect data from anyone under 13 (COPPA). Returning users sign in with their phone number only. On supported iOS versions, we may use Apple's age-range APIs when available to help confirm eligibility.

Questions? megha@underight.ai