Privacy Policy

Information We Collect

We collect information you provide directly:

• Account details: name, email address, username, and profile photo
• Profile information: bio, city, and account type (Attendee or Organizer)
• Activity: RSVPs, comments, rally creation, and organization memberships
• Payment information: processed via Stripe — we never store card numbers

We collect automatically when you use the app:

• Precise location (GPS) — treated as sensitive personal information, collected only while you actively browse nearby rallies or check in, and never in the background
• Push notification tokens to send you rally reminders and updates
• Device type and OS version for crash diagnostics

How We Use Your Information

• Provide the Rallyo service: show local rallies, process RSVPs, facilitate organizer payouts
• Send notifications about rallies you've joined or organized
• Verify attendance at rallies using GPS when you check in
• Improve the app and fix bugs
• Comply with legal obligations

Information Sharing

We do not sell your personal information. We share data only with:

• Supabase — our backend database and authentication provider (hosted in the US)
• Stripe — for organizer payout processing. Stripe's privacy policy applies to payment data
• Apple / Google — push notification delivery via their respective services
• Other users — your name, handle, profile photo, and public RSVPs are visible to other Rallyo users. Private accounts limit visibility to approved followers

Location Data

Rallyo requests your location only when you are actively using the app — specifically when browsing nearby rallies or checking in to an event. We do not access your location in the background. Location is used to calculate distances and verify rally attendance. You can deny location permission at any time in your device Settings; some features will be limited.

Data Retention

We retain your data for as long as your account is active. Raw GPS check-in points are kept only as needed and purged within 90 days of an event; we may keep aggregate, de-identified attendance counts for reporting. If you delete your account, your personal information is removed within 30 days and your connected Stripe payout account is deactivated — except where retention is required by law (for example, transaction and tax records Stripe is legally required to keep).

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information via Settings → Edit Profile
• Delete your account and all associated data anytime in Settings → Delete Account
• Opt out of marketing communications
• Request a copy of your data

To exercise any of these rights, contact us at privacy@rallyoapp.com.

Children's Privacy

Rallyo collects your date of birth at sign-up and does not permit anyone under 13 to create an account. We do not knowingly collect personal information from children under 13; if we learn we have, we delete it. Users between 13 and 17 cannot use paid features. If you believe a child under 13 has provided us with personal information, please contact us immediately.

We also do not sell or share your personal information, and we do not use sensitive personal information (such as precise location) for any purpose other than providing the Rallyo service. California residents may request to know, access, correct, delete, or limit use of their information at privacy@rallyoapp.com.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of Rallyo after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@rallyoapp.com.