Privacy Policy

1. Introduction

Rally turns your fitness class bookings into plans your friends can see and join. You share one link, and everyone sees who is going. This policy explains what information Rally collects, why it is collected, how it is shared, and what choices you have. It covers the Rally website and any Google account you choose to connect to it. If you do not agree with this policy, please do not use Rally.

2. Information Rally collects

Account information. When you log in, Rally collects your email address so it can send you a magic login link. Rally does not store a password for you.

Google data, only if you connect it. If you choose to connect Google, Rally reads two things, and only reads them. Through Gmail read-only access, it reads booking confirmation emails, including the sender, subject, and booking details needed to turn a booking into a plan. Through Calendar read-only access, it reads your upcoming class events, including titles, times, and locations, so they can show up as plans. Rally never sends email from your account, never changes your calendar, and never reads email that is not a booking confirmation. You can revoke Rally's access at any time from your Google account permissions page, and Rally will stop syncing new data from that point.

Plans and RSVPs. Rally stores the plans you create (studio, class, date, time, location, and notes) and the RSVPs on them, so your crew can see who is going.

Technical information. When you visit Rally, our hosting provider may automatically log technical information such as your IP address, browser type, and the pages you visit. This is used for security, reliability, and operations only.

Cookies. Rally uses cookies only to keep you logged in. There are no advertising cookies and no cross-site tracking. You can control cookies in your browser settings, but blocking essential cookies will prevent you from staying logged in.

3. How Rally uses information

Rally uses your information to:

• provide the service, including plans, RSVPs, and plan links;
• log you in with magic links;
• turn your booking confirmations and class events into plans, if you connect Google;
• communicate with you about your account, such as login links;
• keep Rally secure and reliable, and fix problems.

Rally does not run ads, and Rally does not sell your personal information.

4. How Rally shares information

People with a plan link. Anyone with a plan link can view that plan and RSVP to it. Do not put sensitive information in a plan.

Service providers. Rally shares information only with the providers that run Rally: Supabase (database and login), Vercel (hosting), and Google APIs when you connect Google. These providers may only use your information to provide their services to Rally.

Legal requirements. Rally may disclose information if required by law or to protect the safety, rights, or property of Rally and its users.

Business transfers. If Rally is transferred to another owner, your information would transfer as part of the service, and this policy would continue to apply unless you are told otherwise.

5. Your choices and rights

You can disconnect Google at any time from your Google account permissions page, and delete a plan from its page. You can delete your account and your data yourself: tap your name, open Account, and choose Delete my account. You can also email us at the address below.

Depending on the state where you live (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with privacy laws), you may have the right to access, correct, delete, or get a copy of your personal information, and to opt out of its sale, targeted advertising, or profiling. Rally does not sell or share your personal information, does not use it for targeted advertising, and does not profile you. To use any of these rights, email us. We will respond within the time your state's law requires, and if we deny a request you can appeal by replying to our answer. We will not treat you differently for using your rights.

6. Data retention

Plans stay up until the person who created them deletes them. Account information is kept while your account is active. When you delete your account, we delete it from active systems, although copies may remain in backups for a limited time before they are overwritten.

7. Security

Rally uses encrypted connections, and our providers encrypt stored data. Access to the database is limited to the systems that run Rally. No system is perfectly secure, so please do not share sensitive information through Rally.

8. Third-party links

Rally links to studios and other third-party sites, such as Solidcore, Barry's, and ClassPass. Their privacy policies govern your use of their sites, and Rally is not responsible for them.

9. Children

Rally is not directed at children under 13, and does not knowingly collect information from children under 13. If you believe a child has provided information to Rally, email us and we will delete it.

10. International users

Rally is operated from the United States. If you use Rally from outside the United States, your information may be stored and processed in the United States.

11. Changes to this policy

If this policy changes, the updated version will be posted here with a new date, and significant changes will be highlighted. Continued use of Rally after a change means you accept the updated policy.

12. Contact

Questions about this policy, or requests about your data? Email us at heyrallycrew@gmail.com.