Effective Date: January 2026
RallyRally ("we", "us", or "our") operates the RallyRally mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.
By using RallyRally, you agree to the collection and use of information in accordance with this policy.
When you create an account and use RallyRally, you may provide:
We do not collect:
As you use the App, we collect:
We collect anonymised, aggregated data to improve our service:
This data is anonymised using one-way hashing and cannot be linked back to you personally. This anonymised data is retained even after account deletion to help us improve the App.
We use your information to:
Your profile information (name, photo, videos, location, ratings, bio) is visible to other RallyRally users. You can control some visibility settings within the App.
For users aged 13-17, profile visibility is subject to the permissions granted by their parent or guardian. Parents may choose to display their own email address as the contact on their child's player card.
We use trusted third-party services to operate RallyRally:
| Provider | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Authentication, push notifications | Email, password (encrypted), device tokens |
| Cloudflare | Database, video storage, API hosting | All app data (stored securely) |
| Google Places | Location search during signup | Location queries |
| Resend | Email delivery | Email address, email content |
| AWS Lambda (Amazon) | Video processing | Uploaded videos (for transcoding) |
| RevenueCat | Subscription management | User identifier, subscription status, purchase history |
| Stripe | Payment processing (web) | Email, payment method details (handled by Stripe, not stored by us) |
| Apple App Store | In-app purchases (iOS) | Apple account info, purchase receipts (handled by Apple) |
| Google Play | In-app purchases (Android) | Google account info, purchase receipts (handled by Google) |
These providers process data on our behalf under strict contractual obligations.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not serve advertisements.
We may disclose your information if required by law, court order, or to protect the rights, safety, or property of RallyRally, our users, or the public.
Your data is stored on servers operated by Cloudflare, with infrastructure primarily located in regions that provide adequate data protection. We implement appropriate technical and organisational measures to protect your data, including:
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account remains active and as needed to provide the service.
You can delete your account at any time through the App settings. When you delete your account:
For teen accounts (users aged 13-17), either the account holder or their parent/guardian may request account deletion. Parental consent records are deleted along with the account.
Transaction records related to RallyRally Premium subscriptions may be retained for longer periods as required for:
These records are retained in accordance with applicable laws (typically 7 years for financial records). Payment method details remain with our payment processors (Stripe, Apple, Google) subject to their respective privacy policies.
Depending on your location, you may have the following rights:
To exercise these rights, contact us at [email protected].
If your child (aged 13-17) has a RallyRally account, you have the right to:
To exercise these rights, use the management link provided in your consent email, or contact us at [email protected].
RallyRally is operated from New Zealand. If you are accessing the App from outside New Zealand, your data may be transferred to and processed in New Zealand and other countries where our service providers operate. By using the App, you consent to this transfer.
We ensure appropriate safeguards are in place for international transfers, including using service providers that comply with applicable data protection frameworks.
RallyRally is available to users aged 13 years and older. Users aged 13-17 ("Teen Users") require verified parental or guardian consent before they can access the App's features. We do not knowingly collect personal information from anyone under 13. If we learn that we have collected data from someone under 13, we will delete it promptly.
When a user under 18 creates an account, they must provide a parent or guardian's email address. We then contact the parent or guardian to request consent. Until consent is granted, the teen user's access to the App is restricted.
The parent or guardian can:
Consent links are secured with unique tokens and expire after 7 days. If expired, the teen user may re-submit a consent request.
Parents and guardians can control the following permissions for their child's account:
These permissions can be updated at any time through the parent management portal.
We collect the same categories of information from teen users as described in Section 1, with the following additions:
We apply data minimisation principles to teen accounts and do not use teen users' data for any purpose beyond providing and safeguarding the service.
For teen users, we implement additional safeguards:
If you are in the EEA, our legal bases for processing are:
You have additional rights under GDPR including lodging a complaint with your local supervisory authority.
If you are a California resident:
We comply with the New Zealand Privacy Act 2020. You have the right to access your personal information and request corrections. If you believe we have breached your privacy, you may complain to the Office of the Privacy Commissioner.
We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. For users aged 13-17, we obtain verifiable parental consent before collecting and processing personal data. Parents may review, modify, or delete their child's information at any time by using their management link or contacting us at [email protected].
For users under 18 in the United Kingdom, we implement measures consistent with the UK Age Appropriate Design Code (Children's Code), including providing age-appropriate default settings, minimising data collection, and restricting features based on parental permissions.
The RallyRally mobile app does not use cookies. We use local device storage to keep you logged in and cache data for performance. This data remains on your device and is cleared when you log out.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the App. The "Effective Date" at the top indicates when the policy was last updated.
Continued use of RallyRally after changes constitutes acceptance of the updated policy.
If you join our waitlist before the App launches:
Your email address and location (city and country).
To let you know when RallyRally launches in your city, and to send occasional updates before then.
Just us. We use Resend to send emails, which means your email address passes through their system. We don't share your information with anyone else.
Until you unsubscribe, or until we launch and you create an account (at which point the full app privacy policy above applies).
Email [email protected] and we'll remove you.
If you have questions about this Privacy Policy or our data practices, contact us:
Email: [email protected]
Jurisdiction: New Zealand