Rally (ABN 80 987 296 446) ("we", "our", or "us") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, and share your data when you use the Rally app, website, web app, mobile app, progressive web app, APIs, venue/business features, admin/moderation tools, and related services.
1. Information We Collect
a) Personal Information
- Name
- Email address
- Age or date of birth
- Account details such as username, first and last name, password authentication data, invite or beta access information, account status, role, and session information.
- Profile details you provide or choose to display, including country, state/region, city, bio, profile photo/avatar, pronouns, gender, drink preference, profile visibility settings, check-in visibility settings, notification preferences, close-friend settings, and sharing preferences for favourite venues or regular mates.
- Venue/business account details, if you create or manage a venue account, including business name, contact name, business email, password authentication data, phone number, claimed venue details, and venue account verification or reset-password information.
b) User-Generated Content
- Profile photos and uploaded images
- Check-in activity (venues, events, and locations)
- Social activity, such as who you are with, drink counts, and shared interactions within the app
- Check-in details such as selected venue, venue name/category/address /coordinates, whether the check-in is at home, drink type, drink count, delay settings, whether you are with guests, whether your table is joinable, tagged users, accepted or declined tags, join requests, cheers, comments, likes, leave/rejoin activity, and timestamps.
- Connection and social graph information, such as connection requests, accepted or declined connections, QR or invite-code connections, close friends, regular mates, favourite venues, notifications, and report/moderation activity.
- Support and report content, including issue descriptions, user reports, moderation report categories/details, current page, error codes/messages, app version, and other diagnostic information you submit.
c) Usage and Device Information
- Device type and operating system
- IP address, browser or device information, operating system, user agent, app version, pages or features used, session cookies, push-subscription details, Expo push tokens or web-push endpoint/key data, and general usage or diagnostic information.
- App interactions and usage data
d) Location and Venue Data
When you use location-based features, Rally may receive precise latitude and longitude from your browser or device to find nearby venues, calculate distances, and support venue search. If you check into a venue, we store the selected venue and venue snapshot information, which may include venue coordinates. Home check-ins are designed not to record or share a physical home location.
Map, venue search, geocoding, and static-map features may send location coordinates, map bounds, search terms, venue names or identifiers, and related request information to map and venue-data providers such as Geoapify, OpenStreetMap, OpenMapTiles, or Overpass. Those providers may process request data under their own privacy policies to deliver their services, control access, count usage, troubleshoot issues, secure their services, and apply usage limits.
When you suggest a venue, we store the submitted venue name, category, address or coordinates, evidence links or notes, account association, submission time and review outcome. Evidence and original submissions are available to authorised reviewers, not shown in social feeds. Do not include private addresses or other people's personal information.
For a pending-venue check-in, we also process a fresh device location, its accuracy and capture time to check proximity. We do not store that device location fix in the venue suggestion record. The proposed venue coordinates are stored with the suggestion and check-in. A pending check-in follows your usual audience and delay settings; its avatar may appear at the proposed venue for eligible viewers when location sharing is enabled. Pending venues do not contribute to public venue heat or popularity counts. Approval links the check-in to the approved venue. Rejection removes it from feeds and maps, retaining a private history entry. Evidence and review records are subject to our retention policy.
e) Cookies, Sessions, and Local Storage
Rally uses session cookies and similar technologies to keep you logged in, secure accounts, remember interface state, support service-worker/push-notification features, and operate the app. Some venue-account information may also be stored locally in the browser so venue users can access the venue dashboard.
f) Information From Third Parties
We may receive information from authentication providers, venue lookup and map data sources, invite/referral flows, connected users who tag or interact with you, venue accounts, service providers, and public venue-data sources such as Geoapify, OpenStreetMap, OpenMapTiles, and Overpass.
2. How We Use Your Information
- Create and manage your account
- Enable social features such as check-ins and activity feeds
- Display your activity to other users
- Improve app functionality and user experience
- Monitor usage and ensure responsible use of the platform
- Verify eligibility, support legal drinking-age restrictions, authenticate users, manage sessions, reset passwords, administer beta or invite access, and secure the service.
- Power nearby venue discovery, venue search, maps, heat maps, check-ins, social feeds, tags, join requests, comments, cheers, notifications, and venue dashboards.
- Send transactional emails, password reset emails, in-app notifications, web or mobile push notifications, service updates, event suggestions, and app announcements where your settings and applicable law allow.
- Review reports, investigate misuse, enforce our Terms, support users, protect users and venues, maintain audit logs, and comply with legal obligations or lawful requests.
- Create aggregated, de-identified, or statistical insights for Rally operations, venue partners, product improvement, venue features, and possible future commercial uses.
3. Sharing of Information
a) Within the App
- Content you post (such as check-ins, images, and social activity) may be visible to other users depending on your app settings
- Your name, profile photo, profile details, check-ins, tags, comments, cheers, connection activity, and venue activity may be shown to other users according to the feature, your privacy settings, other users' relationship to you, and app functionality. Privacy settings reduce visibility inside Rally, but cannot prevent other users from copying, screenshotting, or sharing information they can see.
b) With Service Providers
- We may share data with trusted third-party providers who help operate the app, such as hosting, database/session storage, object storage, authentication, email delivery, push notifications, venue lookup/map data, security, support, and diagnostics providers.
Current service-provider categories based on the app include cloud hosting and database providers, Replit/OIDC-related authentication and object storage, Resend for transactional email such as verification and password-reset messages, Expo push and web-push/browser notification services, and map, venue lookup, geocoding, static-map, and venue-data providers such as Geoapify, OpenStreetMap, OpenMapTiles, and Overpass. The exact provider list may change as the service evolves.
c) With Partner Venues (Aggregated Insights)
- We may provide venues and business partners with aggregated and de-identified or statistical insights derived from user activity
- These insights may include trends such as:
- Number of check-ins
- Popular times
- General user engagement
- Unique visitor counts, drink-type breakdowns, hourly or daily trends, average party-size estimates, venue popularity, and similar aggregated metrics.
- We do not provide venue partners with usernames, emails, contact details, or individual user profiles as part of standard venue analytics.
We do not sell your personal information to third parties or share it for cross-context behavioural advertising unless we update this Privacy Policy and provide any legally required choices.
d) Legal, Safety, and Business Transfers
We may disclose information if we reasonably believe it is required by law, necessary to protect users, venues, Rally, or the public, needed to investigate abuse or security incidents, or connected with a merger, acquisition, financing, reorganisation, or sale of all or part of the business.
4. Commercial Use of Data
Rally may use collected data to generate aggregated, de-identified, or statistical insights for Rally operations, product improvement, and venue/business features. This data is provided in a way designed to protect individual user identity wherever possible. Venue partners must not attempt to re-identify users from aggregated insights or use insights in a way that unfairly targets, profiles, or discriminates against individual users.
As of the effective date of this Privacy Policy, Rally does not offer paid user subscriptions or paid venue features. If Rally later introduces paid venue tools, subscriptions, advertising products, payment providers, or materially new commercial data uses, we will update this Privacy Policy and any required notices before those features launch.
5. Third-Party Services
We may use third-party services such as hosting, database, object storage, authentication, email, push notification, venue lookup, map data, support, security, or diagnostics providers. Those services may collect information according to their own privacy policies.
For map and venue features, these third-party services may receive information such as coordinates, map bounds, search queries, venue identifiers, request headers, IP address, timestamps, and usage information where needed to provide maps, venue discovery, geocoding, attribution, usage counting, security, and troubleshooting.
6. Data Security
We take reasonable administrative and technical measures to protect your data. However, no system is completely secure.
We aim to comply with applicable Australian privacy laws where relevant and with other privacy laws that apply to our processing of your information, including applicable access, correction, deletion, complaint, security, breach-notification, and cross-border transfer obligations.
7. Age Restrictions
Rally is currently intended only for users in Australia who are at least 18 years old. We do not knowingly allow underage users to register. If we learn that a user is under 18 or outside the currently supported launch country, we may refuse access, suspend, delete, or anonymise the account and associated personal information as appropriate.
8. Your Rights and Privacy Choices
- Access your personal data
- Request correction of inaccurate data
- Request deletion or anonymisation of your account and personal information, subject to legal, safety, fraud-prevention, moderation, audit, and technical limitations.
- Depending on where you live and which laws apply, you may also have rights to object to or restrict processing, withdraw consent, request portability, opt out of certain sale/share or targeted advertising uses if introduced, limit certain uses of sensitive personal information, and complain to a privacy regulator.
You can manage many privacy choices directly in Rally. Depending on the version of the app you use, these choices may include profile and check-in visibility settings, notification preferences, close-friend settings, connection-discovery settings, and whether to share regular mates or favourite venues.
Location Sharing controls whether other users can see your current presence in Rally, including in feeds, check-in details, maps, active status and related attendance notifications. Turning it off hides your current presence whether you host or join a check-in. Other participants may continue sharing their own presence, so the table may remain visible to people entitled to view it without identifying you as present.
Location Sharing is separate from device location permissions. When you use nearby venue search or pending-venue proximity checks, Rally may still process device location as described in section 1(d), subject to your device permissions. Check-in map markers represent the selected venue or proposed public venue; they do not track your phone's live GPS position. Home check-ins do not show a physical home address or map point.
Past check-ins remain subject to separate history-sharing settings, permitted audience and block restrictions. Turning off Location Sharing does not delete stored activity or change that separate history choice. For people otherwise allowed to view a check-in, Hidden contributes only permitted group counts, Anonymous appears as "someone", and Visible permits your name to appear to non-connections. Accepted connections can see your identity when sharing is otherwise allowed. These choices apply to hosts and accepted participants; Location Sharing off and blocks take priority over identity visibility choices.
Privacy changes apply to subsequent authorised requests and notification delivery attempts. They cannot recall information already viewed, copied or screenshotted, or notifications already delivered to a device.
You can delete your account from Settings in the app. Account deletion is designed to anonymise account/profile information, reset or delete saved settings and notification preferences, delete push tokens and push subscriptions, remove related session records, delete connection and close-friend relationships, delete private notification records, and end active check-ins, subject to the retention limits described below.
You can also manage device-level choices, such as location and push notification permissions, through your browser, device, or operating system settings. To exercise privacy rights or ask us to review, correct, delete, anonymise, or restrict information we hold about you, contact us at support@rallyaus.com.
9. Data Retention
We retain your information only as long as necessary to provide the app and comply with legal obligations. Under the current account-deletion flow, Rally is designed to anonymise account/profile fields, delete or reset saved settings and notification preferences, delete push tokens and push subscriptions, remove related session records, delete connection and close-friend relationships, delete private notification records, and end active check-ins. Historical check-ins and related activity may be retained without personal profile identifiers where needed for product, safety, analytics, legal, backup, audit, fraud-prevention, moderation, or operational purposes.
Active check-ins are designed to expire after 24 hours, and account deletion is designed to end active check-ins. Historical check-in, venue, comment, tag, cheers, analytics, report, moderation, audit, legal, backup, and operational records may be retained where needed, but account/profile identifiers, connection relationships, close-friend relationships, private notification records, push tokens, related session records, and saved account settings are deleted, reset, or anonymised under our processes.
10. International Transfers
Rally is currently launched for users in Australia. Your information may be stored, processed, or accessed in Australia, the United States, or other countries where we or our service providers operate. Where required, we will take reasonable steps or use appropriate safeguards for cross-border transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted within the app or at https://legal.rallyaus.com/privacy-policy.html. If changes are material, we may provide additional notice as required by law.
12. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us: