Privacy Policy

Website notice updated: October 20, 2026. Optional website measurement with Vercel Analytics requires your website choice and is separate from agreement inside the app. We measure public pages and limited actions; we do not send what you enter in the challenge organizer. See Cookies and storage for the details and controls.

1. Who operates Rally

Franco Balestieri, operating as Rally in Argentina, is responsible for the personal information described here. Contact: francobales3@gmail.com. This policy covers the Rally app, rallyfitness.app and support requests. External services also have their own policies.

Agreement in the app

Using the updated Rally app requires accepting this policy and the Terms of Service. Before acceptance, you can select “View changes” to read the summary of usage analytics and the inputs that may be sent to OpenAI, and open the full documents. One explicit action authorizes both uses. We record the policy version, time and agreed purposes. Agreement to an older policy is not automatically treated as this agreement.

If you decline, you can sign out or delete your account from that screen. You can withdraw acceptance in Settings > Privacy. This stops analytics and new AI requests, and accepting again is required to continue using Rally. Withdrawing acceptance or deleting your account does not cancel a store subscription. Device permissions such as Apple Health, camera and notifications remain optional and are requested when relevant.

Older app versions may show separate choices. During the transition, those decisions retain their original scope; the updated app requires this explicit agreement before use.

2. Information and purposes

• Account and profile: email, login details, user ID, username, name, profile photo and preferences, to create and manage your account.
• Training and social activity: workouts, exercises, sets, repetitions, weights, duration, schedules, goals, body-weight entries, groups, rankings, invitations, posts, photos, comments and reactions you choose to use. These enable tracking, synchronization and social features.
• Technical and security data: app/device version, operating system, network/request information, errors and security logs, to operate and protect the service. Sentry receives crash/error diagnostics and technical context. Diagnostic data can contain identifiers and details of the action that failed; avoid including sensitive information in bug reports.
• Usage analytics: after your explicit acceptance, PostHog and Rally’s analytics storage receive feature and screen events, account and session identifiers and technical app/device data to understand usage and improve the experience. We do not send health details, workout metrics or free-text notes to this analytics pipeline. Operational and security records are used to operate and protect the service.
• Shared cards and links: when you share a workout, ranking or profile card, Rally saves a copy of what the card shows (your first name, username, profile photo, the workout photo if the card has one and the numbers on the card; ranking cards also show the first names and weekly points of the top three in that group or among your friends) and a preview image. Anyone with the link can see them on a public page at rallyfitness.app/s/, and people who receive the link can copy or reshare it. Rally counts opens, new friendships and group joins for each link without identifying the people who open it on the web. Rally stops displaying the page and serving the image of affected cards when someone shown on them makes their profile private, deletes their account, blocks the card owner or is blocked by them, or leaves the relevant group. Copies already downloaded or saved by another platform may remain.
• Advertising measurement (Meta): if you accept it on Rally's ads measurement screen (and, on iPhone, also allow tracking in Apple's prompt), the Meta SDK in the app sends Meta app events (app installs and opens, account registration, first workout and joining a group), the device advertising identifier and technical device data so we can measure Rally's ads. The first-workout event only says that a first workout happened; it carries no activity type, duration, metrics or health data, and it is used only to measure Rally's own ads. We do not send workout details, health data, your name or your email to Meta. Before you accept, the SDK may download its configuration from Meta when the app opens, which exposes technical data such as IP address, app version and device model, but Rally sends no events or identifiers. You can change this choice in Settings > Privacy.
• Subscriptions: RevenueCat, Apple and Google provide purchase, entitlement and renewal information. Rally does not receive your full payment card details.
• Notifications and support: a push token and notification preferences if enabled; information you send when contacting support. Only send information relevant to your request.

3. AI plans and OpenAI

Explicit acceptance of this policy authorizes Rally to send planning inputs to OpenAI through its backend when you request an AI workout plan. Acceptance alone does not send those inputs or generate a plan. Those inputs can include goals, experience, age range, sex, activity level, equipment, preferred sports, days and session length, language/time zone, injuries or movements to avoid, energy level, free-text notes and previous plan context. Health-related details you enter may be sensitive. Avoid entering names, contact details or information about other people in notes.

The purpose is to generate your requested plan. You decide when to request a plan; generating one is not required to work out. You can stop future sharing by withdrawing policy acceptance in Settings > Privacy, with the effect on access described above. Revocation does not retrieve information already processed. OpenAI states that API data is not used to train its models by default and that abuse-monitoring logs may be retained for up to 30 days, with exceptions. Rally does not promise zero retention. See OpenAI's API data controls.

4. Apple Health

On supported iOS devices, connecting Apple Health is optional and requires permission. Rally reads workout records, including activity type, start/end time, duration, available energy/distance and a source record identifier, to import workouts into your Rally history. Imported workouts are stored in Rally's Supabase backend. Workout summaries can affect rankings and be visible to others under the social features and visibility settings you use. Review those settings before importing.

Rally does not use HealthKit data for advertising or sell it. The AI planner does not directly send raw HealthKit records to OpenAI. You may separately enter health-related details in the AI form as described above. You can disconnect the integration in Rally and revoke access in Apple Health/device settings. Revoking access or deleting a workout in Apple Health does not automatically erase workouts already imported into Rally. Delete those records in Rally or contact us. Android currently has no equivalent health import.

5. Providers and sharing

• Supabase: account authentication, database, uploaded content, backend processing and operational records.
• OpenAI: generation of plans you request, using the inputs described above.
• PostHog: usage analytics after explicit acceptance of this policy.
• Meta Platforms: measurement of Rally's ads through the Meta SDK, only after your acceptance as described in section 2.
• Sentry: error reporting and diagnostics.
• RevenueCat, Apple App Store and Google Play: purchases, subscriptions and entitlements. Apple and Google also process data under their own policies.
• Expo, Apple and Google: delivery of push notifications when enabled, including push tokens and notification content.
• Vercel: website delivery and technical request/security records.
• Google Sheets / Google APIs: email address, source, signup time and consent record if you submit a Rally waitlist form; Google also processes email sent to our support address.

Your profile, shared workouts, group activity and ranking can be seen by the people allowed by your settings and the feature you use. They may copy or reshare content. We may disclose necessary information to comply with law, address abuse or protect rights. We do not sell personal information or use fitness/health data for third-party advertising.

6. Website storage and communications

The website stores your selected language in your browser as rally_lang. It does not currently load advertising or analytics trackers. Fonts are served by the website. See Cookies and local storage.

Public share pages (rallyfitness.app/s/...) show only the copy saved when someone shared a card. To display them, the website reads that copy from Rally's backend (Supabase) and adds one to the link's open counter; it does not set cookies or identify visitors. Tapping App Store or Google Play on these pages and on invitation pages copies the link to your clipboard so the app can offer to continue the invitation after you install it.

The current landing page links to app downloads. If a waitlist form is offered, signing up is optional and authorizes only the launch/availability updates described next to the form. You can request removal at francobales3@gmail.com. We do not treat a support request or app account as permission for promotional email. There is no automated marketing-email unsubscribe portal; use this contact address for removal requests.

7. Retention and deletion

Account, training and social information is retained to provide your account and chosen features. You can delete your account in Settings or request help by email. Deletion removes the account and associated data from Rally's active systems through its deletion process; it is separate from cancelling a paid subscription in the store.

Deletion is not a promise that every copy held by every provider disappears immediately. Provider follow-up may be necessary. Limited records may remain for transaction/accounting obligations, fraud/security, legal claims and backup recovery; providers may have their own required retention. Content someone else copied or reshared cannot be recalled by Rally. We do not claim a fixed backup-erasure period or a universal deadline without confirming what applies to your request. Revoking Apple sign-in access and deleting data held independently by Apple or Google may require actions in those accounts.

8. Choices, rights and international processing

Depending on applicable law, you may request access, correction, deletion or a copy of your data, object to or restrict processing, withdraw consent, or raise a complaint with your data-protection authority. Email francobales3@gmail.com from your account address, describe the request and avoid sending passwords. We may need to verify your identity. We review requests and explain applicable requirements or limitations; the website does not provide an automatic data-export tool.

You can manage profile visibility in Rally and camera, photos and notification permissions in device settings. Withdrawal of optional permissions affects the related features, not the lawfulness of earlier processing. Rally operates from Argentina and providers may process information in other countries, including the United States. Applicable rights and safeguards depend on the processing and jurisdiction; contact us for details about your request.

9. Security, age and updates

Rally uses access controls and encrypted network connections, but no service can guarantee absolute security. Rally is not intended for children under 13; additional local age and guardian-consent requirements may apply. Contact us if a child provided personal information. We update this policy's date when it changes and provide additional notice or seek a new choice where required.