Privacy Policy

The short version

Rally runs no advertising and no third-party analytics. Nothing you do in the app is sold, and nothing is shared with data brokers or ad networks. There is no sign in and no email address on file. The information stored exists to back up your training, to run the leaderboard, and to build the plan round your actual level.

What is collected

Your anonymous account

Rally has no sign in. The first time you open the app, it quietly creates an anonymous account for you on our database provider. That account has no email address, no password, no phone number and no link to your Apple ID or Google account. It is a random identifier that exists for two reasons: to back up your progress, and to put you on the leaderboard.

Because the account is tied to this install of the app rather than to you, deleting the app or moving to a new phone starts a new account, and the old progress is not recoverable. Your subscription is separate: it belongs to your Apple ID and comes back with Restore.

What you tell the app during setup

Your sport, your first name, your age, your self-rated level, how you play, what you want to improve, what has been holding you back, any injury you choose to tell it about, the body details you enter, and the court zones you picked. This is what the training plan and the coach are built from.

Your training history

Sessions and drills you complete, reps counted, XP earned, your current streak and rank, the matches you log (including the score and the aces, winners and unforced errors you record against them), the meals you log, and the written reports Swing Lab gives you. This is backed up to your anonymous account so it survives the app being updated or its local storage being cleared.

The leaderboard

The coach

When you message the coach, your messages and the recent conversation are sent to our server and passed to Anthropic to write the reply, along with your sport, level, play style, goal, focus areas, age, reported injury, training frequency, rank, streak and match record so the answer fits you. Our server does not store the conversation.

Swing Lab

When you pick or film a clip for Swing Lab, the video never leaves your phone. The app pulls eight still frames out of it on the phone, shrinks them, and sends only those stills to our server, along with the sport, the shot you named, and your level, play style and goal. The server passes them to Anthropic to read the swing, returns the report, and keeps nothing: it has no code that writes the frames or the report anywhere. The stills stay on your phone, and the written report is saved to your training history.

Food photos

When you scan a meal, the photo is sent to our server and passed to Anthropic to be read for calories and macros, along with your age, your goal and the meal slot so the note that comes back is useful. Our server does not store the photo. The resulting numbers are saved to your training history so your day adds up.

Rally asks for camera and photo library access only for food scanning and Swing Lab. It never reads your photo library on its own, only the photo or clip you pick.

How Anthropic handles it

Anthropic acts as our subprocessor for the coach, Swing Lab and food scanning. It processes what we send only to produce the reply, under its commercial terms, which do not allow it to train its models on data sent through its API. It may keep inputs for a limited period for safety and abuse monitoring under those terms.

The training and nutrition information Rally stores is fitness and wellness data you chose to enter. It is not a medical record, we are not a healthcare provider, and none of it is treated as protected health information under HIPAA. Rally does not read from or write to Apple Health.

Subscription status

Whether your subscription is free, active, or lapsed. Purchases are handled entirely by Apple, and RevenueCat records the subscription status against an anonymous identifier. We never see or store your card details, and we never see your Apple ID password.

What is not collected

• No advertising identifiers, no ad SDKs, no tracking across other apps or sites.
• No third-party analytics or crash-reporting SDK.
• No location data.
• No contacts, and no microphone access.
• No push notification server. Rally asks for notification permission during setup, but any reminder it sends is scheduled locally by your phone and never leaves it.

Who it is shared with

These are the only third parties involved, and each gets only what it needs:

• Supabase hosts the database and the anonymous account. It holds your backed-up training history and your leaderboard row.
• Anthropic is our AI subprocessor. It receives coach messages, Swing Lab still frames and food photos, with the small amount of context listed above, in order to answer them.
• RevenueCat records whether your subscription is active, keyed to an anonymous identifier.
• Apple processes every payment and holds your subscription.
• Vercel hosts the server that sits between the app and Anthropic, and hosts this website.
• Expo delivers app updates.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in United States state privacy laws.

How long it is kept

Your backed-up history and leaderboard row are kept until you delete your data. Deleting the app from your phone does not delete them from the server, but without the app there is no way back into that anonymous account, so use Delete My Data first if you want them gone.

Deleting everything

Deleting your data does not cancel your subscription, because Apple holds the subscription, not us. Cancel it in Settings on your iPhone: tap your name, then Subscriptions.

Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, correct it, delete it, or ask for a copy in portable form. You also have the right not to be discriminated against for exercising any of them. Email zachstricker55@gmail.com and we will respond within 30 days. The in-app delete is the fastest route and does not require you to contact anyone.

Children

Rally is not directed at children and is not intended for anyone under 13. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

Security

Data is transmitted over encrypted connections and stored with row-level security, so an account can only ever read and write its own backup and its own leaderboard row. No system is perfectly secure, and we do not claim otherwise.

International users

The services above are operated in the United States, so if you use Rally from elsewhere your information is transferred to and processed in the United States.

Changes

If this policy changes in a way that materially affects you, the date at the top will change and the app will tell you before the change takes effect.