Rally (ABN 80 987 296 446) ("we", "our", or "us") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, and share your data when you use the Rally app, website, web app, mobile app, progressive web app, APIs, venue/business features, admin/moderation tools, and related services.
1. Information We Collect
a) Personal Information
- Name
- Email address
- Age or date of birth
- Account details such as username, first and last name, password authentication data, invite or beta access information, account status, role, and session information.
- Profile details you provide or choose to display, including country, state/region, city, bio, profile photo/avatar, pronouns, gender, drink preference, profile visibility settings, check-in visibility settings, notification preferences, close-friend settings, and sharing preferences for favourite venues or regular mates.
- Venue/business account details, if you create or manage a venue account, including business name, contact name, business email, password authentication data, phone number, claimed venue details, and venue account verification or reset-password information.
b) User-Generated Content
- Profile photos and uploaded images
- Check-in activity (venues, events, and locations)
- Social activity, such as who you are with, drink counts, and shared interactions within the app
- Check-in details such as selected venue, venue name/category/address /coordinates, whether the check-in is at home, drink type, drink count, delay settings, whether you are with guests, whether your table is joinable, tagged users, accepted or declined tags, join requests, cheers, comments, likes, leave/rejoin activity, and timestamps.
- Connection and social graph information, such as connection requests, accepted or declined connections, QR or invite-code connections, close friends, regular mates, favourite venues, notifications, and report/moderation activity.
- Support and report content, including issue descriptions, user reports, moderation report categories/details, current page, error codes/messages, app version, and other diagnostic information you submit.
c) Usage and Device Information
- Device type and operating system
- IP address, browser or device information, operating system, user agent, app version, pages or features used, session cookies, push-subscription details, Expo push tokens or web-push endpoint/key data, and general usage or diagnostic information.
- App interactions and usage data
d) Location and Venue Data
When you use location-based features, Rally may receive precise latitude and longitude from your browser or device to find nearby venues, calculate distances, and support venue search. If you check into a venue, we store the selected venue and venue snapshot information, which may include venue coordinates. Home check-ins are designed not to record or share a physical home location.
Map, venue search, geocoding, and static-map features may send location coordinates, map bounds, search terms, venue names or identifiers, and related request information to map and venue-data providers such as Geoapify, OpenStreetMap, OpenMapTiles, or Overpass. Those providers may process request data under their own privacy policies to deliver their services, control access, count usage, troubleshoot issues, secure their services, and apply usage limits.
e) Cookies, Sessions, and Local Storage
Rally uses session cookies and similar technologies to keep you logged in, secure accounts, remember interface state, support service-worker/push-notification features, and operate the app. Some venue-account information may also be stored locally in the browser so venue users can access the venue dashboard.
f) Information From Third Parties
We may receive information from authentication providers, venue lookup and map data sources, invite/referral flows, connected users who tag or interact with you, venue accounts, service providers, and public venue-data sources such as Geoapify, OpenStreetMap, OpenMapTiles, and Overpass.
2. How We Use Your Information
- Create and manage your account
- Enable social features such as check-ins and activity feeds
- Display your activity to other users
- Improve app functionality and user experience
- Monitor usage and ensure responsible use of the platform
- Verify eligibility, support legal drinking-age restrictions, authenticate users, manage sessions, reset passwords, administer beta or invite access, and secure the service.
- Power nearby venue discovery, venue search, maps, heat maps, check-ins, social feeds, tags, join requests, comments, cheers, notifications, and venue dashboards.
- Send transactional emails, password reset emails, in-app notifications, web or mobile push notifications, service updates, event suggestions, and app announcements where your settings and applicable law allow.
- Review reports, investigate misuse, enforce our Terms, support users, protect users and venues, maintain audit logs, and comply with legal obligations or lawful requests.
- Create aggregated, de-identified, or statistical insights for Rally operations, venue partners, product improvement, and commercial venue features.
3. Sharing of Information
a) Within the App
- Content you post (such as check-ins, images, and social activity) may be visible to other users depending on your app settings
- Your name, profile photo, profile details, check-ins, tags, comments, cheers, connection activity, and venue activity may be shown to other users according to the feature, your privacy settings, other users' relationship to you, and app functionality. Privacy settings reduce visibility inside Rally, but cannot prevent other users from copying, screenshotting, or sharing information they can see.
b) With Service Providers
- We may share data with trusted third-party providers who help operate the app, such as hosting, database/session storage, object storage, authentication, email delivery, push notifications, venue lookup/map data, security, support, and diagnostics providers.
Current or likely service-provider categories based on the app include cloud hosting and database providers, Replit/OIDC-related authentication and object storage, email providers such as Resend or SendGrid if configured, Expo push and web-push/browser notification services, and map, venue lookup, geocoding, static-map, and venue-data providers such as Geoapify, OpenStreetMap, OpenMapTiles, and Overpass. The exact provider list may change as the service evolves.
c) With Partner Venues (Aggregated Insights)
- We may provide venues and business partners with aggregated and de-identified or statistical insights derived from user activity
- These insights may include trends such as:
- Number of check-ins
- Popular times
- General user engagement
- Unique visitor counts, drink-type breakdowns, hourly or daily trends, average party-size estimates, venue popularity, and similar aggregated metrics.
- We do not provide venue partners with usernames, emails, contact details, or individual user profiles as part of standard venue analytics.
We do not sell your personal information to third parties or share it for cross-context behavioural advertising unless we update this Privacy Policy and provide any legally required choices.
d) Legal, Safety, and Business Transfers
We may disclose information if we reasonably believe it is required by law, necessary to protect users, venues, Rally, or the public, needed to investigate abuse or security incidents, or connected with a merger, acquisition, financing, reorganisation, or sale of all or part of the business.
4. Commercial Use of Data
Rally may offer subscription-based services to venue partners. As part of this, we may use collected data to generate insights and analytics for those partners. This data is provided in a way designed to protect individual user identity wherever possible. Venue partners must not attempt to re-identify users from aggregated insights or use insights in a way that unfairly targets, profiles, or discriminates against individual users.
5. Third-Party Services
We may use third-party services such as hosting, database, object storage, authentication, email, push notification, venue lookup, map data, support, security, or diagnostics providers. Those services may collect information according to their own privacy policies.
For map and venue features, these third-party services may receive information such as coordinates, map bounds, search queries, venue identifiers, request headers, IP address, timestamps, and usage information where needed to provide maps, venue discovery, geocoding, attribution, usage counting, security, and troubleshooting.
6. Data Security
We take reasonable administrative and technical measures to protect your data. However, no system is completely secure.
We aim to comply with applicable Australian privacy laws where relevant and with other privacy laws that apply to our processing of your information, including applicable access, correction, deletion, complaint, security, breach-notification, and cross-border transfer obligations.
7. Age Restrictions
Rally is intended only for users who are of legal drinking age in their country or region. We do not knowingly allow underage users to register. You must also be at least 18 years old. If we learn that a user is under 18 or under the legal drinking age where they are located, we may refuse access, suspend, delete, or anonymise the account and associated personal information as appropriate.
8. Your Rights
- Access your personal data
- Request correction of inaccurate data
- Request deletion or anonymisation of your account and personal information, subject to legal, safety, fraud-prevention, moderation, audit, and technical limitations.
- Depending on where you live and which laws apply, you may also have rights to object to or restrict processing, withdraw consent, request portability, opt out of certain sale/share or targeted advertising uses if introduced, limit certain uses of sensitive personal information, and complain to a privacy regulator.
To exercise these rights, you may use the account deletion features within the app or contact us at support@rallyaus.com.
9. Data Retention
We retain your information only as long as necessary to provide the app and comply with legal obligations. Under the current account-deletion flow, Rally is designed to anonymise account/profile fields, delete or reset saved settings and notification preferences, delete push tokens and push subscriptions, remove related session records, delete connection and close-friend relationships, delete private notification records, and end active check-ins. Historical check-ins and related activity may be retained without personal profile identifiers where needed for product, safety, analytics, legal, backup, audit, fraud-prevention, moderation, or operational purposes.
Active check-ins are designed to expire after 24 hours, and account deletion is designed to end active check-ins. Historical check-in, venue, comment, tag, cheers, analytics, report, moderation, audit, legal, backup, and operational records may be retained where needed, but account/profile identifiers, connection relationships, close-friend relationships, private notification records, push tokens, related session records, and saved account settings are deleted, reset, or anonymised under our processes.
10. International Transfers
Rally aims to be available globally. Your information may be stored, processed, or accessed in Australia, the United States, or other countries where we or our service providers operate. Where required, we will take reasonable steps or use appropriate safeguards for cross-border transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted within the app or at https://legal.rallyaus.com/privacy-policy.html. If changes are material, we may provide additional notice as required by law.
12. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us: