Privacy Policy
Last updated 29 October 2026
RallyDate is a dating app, so you trust us with personal things. This policy explains, in plain language, what we collect, why we need it, who sees it, how long we keep it, and the control you have.
1. Who we are
RallyDate (the iOS and Android app, and this website) is provided by RallyDate (legal entity name to be confirmed), Postal address to be confirmed (“RallyDate”, “we”, “us”). We decide how and why your personal data is used, which makes us the data controller. For anything privacy-related, email support@rallydate.app with “Privacy” in the subject.
This policy applies to everyone who uses RallyDate. It works together with our Terms of Service and Community Guidelines.
2. What we collect
Information you give us
| Category | Examples |
|---|---|
| Account | A unique account identifier and the email address Apple or Google shares when you sign in (this may be an Apple private relay address). We never receive your Apple or Google password. |
| Profile | First name, date of birth (shown to others only as your age), gender, pronouns, who you're interested in, the age range and distance you want to see, what you're looking for, work and bio. |
| Photos | The 2 to 6 profile photos you choose. The app resizes and compresses them before uploading. |
| Sports and rhythm | Your sports (including ones you add yourself), how often you play each one, when you like to train, and optional highlights such as personal bests or competitions, and the prompts you answer. |
| Activity | Likes and passes, matches, photo messages, chat messages, reactions, date ideas, chats you archive or delete, and the people you block. |
| Verification | If you choose to verify, the selfie you take in the app. It is stored privately, never shown to other members, and used only by our team to compare with your profile photos. |
| Safety reports | Reports you make (the reason and any details you add), and a copy of the reported profile, message or photo message so our team can review it even after it is deleted or the chat is unmatched. |
| Support | What you send us by email, and our replies. |
Information collected automatically
| Category | Details |
|---|---|
| Approximate location | With your permission, the app reads your position once and immediately rounds it to about 1 km, keeping only those rounded coordinates and your city name. You can type a city instead. We never store your precise position or track your location in the background. |
| Notifications | If you allow notifications, a push token for your device so we can tell you about matches and messages. |
| Device and technical data | Basic information our servers need to run and secure the service: IP address, device type, operating system and app version, timestamps and error logs. |
What we don't collect
We don't access your contacts, your photo library beyond the photos you pick, your precise or background location, or data from health and fitness apps. RallyDate has no advertising and no third-party tracking, so it does not track you across other companies' apps or websites.
3. Sensitive information
Some profile details can reveal sensitive information. Your gender, pronouns and who you're interested in may reveal your sexual orientation or gender identity, and your photos show what you look like. You choose to share these so we can introduce you to the right people. We use them only to run RallyDate, never for advertising.
Where the law requires it (for example in the EU and UK), we process this information on the basis of your explicit consent, which you give by adding it to your profile. You can withdraw that consent at any time by editing or removing it, or by deleting your account.
4. How we use it, and why
| Purpose | Legal basis (EU/UK) |
|---|---|
| Create and run your account, and confirm you are 18 or older | Contract; legal obligation |
| Show your profile to people nearby, and show you people who fit your preferences | Contract; explicit consent for sensitive information |
| Deliver likes, photo messages, chats, date ideas and notifications | Contract; consent for push notifications |
| Keep members safe: review reports, verify selfies, apply daily limits, prevent spam and fraud, and act against accounts that break our rules | Legitimate interests (a safe community); legal obligation |
| Fix problems, secure our systems and improve features | Legitimate interests |
| Answer support requests and tell you about important changes | Contract; legitimate interests |
| Comply with the law, respond to valid legal requests and defend legal claims | Legal obligation; legitimate interests |
We use your data only for these purposes. If we ever want to use it for something new and unrelated, we'll ask for your consent first. We do not use your data, photos or messages to train artificial intelligence models, and we do not send them to third-party AI services.
5. How matching works
RallyDate orders the profiles you see automatically. It first applies your preferences (who you're interested in, age range and distance), then ranks people by how closely your sports, how often you play, your training times and your intentions line up. Your likes and passes decide who you see next. This ranking does not produce legal or similarly significant effects about you, and you can change your preferences or profile at any time to change what you see.
6. What other members see
- Your profile: first name, age, photos, sports and rhythm, training times, intention, work, bio, prompts, highlights, pronouns, your city, a distance range such as “< 5 km”, and a verified badge if you have one.
- Never shown: your date of birth, email address, exact location or verification selfie.
- Messages and photo messages can only be read by you and the person you're talking to, and by our safety team when one of you reports them.
- Blocking someone hides you from each other everywhere in RallyDate. Pausing your profile stops new people seeing you.
Anything you share with another member can be remembered, screenshotted or passed on by them, so only share what you're comfortable with.
7. Who we share it with
We do not sell your personal data, and we do not share it for advertising. We share it only as follows.
Service providers
Companies that process data on our behalf, under contracts that let them use it only to provide their service to us:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in sessions and real-time chat |
| Cloudflare | Our API servers, and storage for photos and selfies |
| Apple and Google | Sign in with Apple and Google Sign-In, and delivering push notifications to your device |
| Expo | Passing push notifications to Apple and Google |
| Vercel | Hosting this website |
Every provider that receives personal data from us must give it the same or equal protection as this policy, and keep it confidential and secure.
Other cases
- Legal and safety: when we believe in good faith that the law requires it, to respond to a valid legal request, to protect someone from serious harm, or to report child sexual abuse material to the authorities (see our Child Safety Standards).
- Business transfers: if RallyDate is merged, acquired or sold, your data may move to the new owner, who must respect this policy. We'll tell you before that happens.
- With your permission: in any other case, only if you ask us to.
8. International transfers
Our providers may store or process data in countries other than yours, including the United States. When data from the EU, UK or Switzerland is transferred, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (with the UK addendum), together with the security measures in section 12.
9. How long we keep it
| Data | How long |
|---|---|
| Profile, photos, sports, matches and messages | While your account exists. What you delete yourself (a photo, a chat) is removed straight away. |
| Verification selfie | Until you delete your account |
| Push token | Until you turn notifications off, sign out or delete your account |
| Technical logs | Up to 30 days, unless needed to investigate a security problem |
| After you delete your account | Your profile is hidden immediately and everything else is permanently erased, normally within minutes and always within 30 days |
| Safety reports and moderation records | Kept after deletion, with your identity removed from reports you made, so we can keep preventing abuse. Records of serious violations (such as a ban) may be kept longer to stop the person coming back, and only as long as necessary. |
| Support emails | Up to 2 years after the conversation ends |
We may keep specific information longer when the law requires it or while a legal claim is open.
10. Deleting your data and withdrawing consent
- Delete your account in the app: Profile → Settings → Delete account. This erases your profile, photos, selfie, likes, matches and messages. For the full details, and how to ask by email if you can't open the app, see Delete your account.
- Delete or change parts of your profile at any time in the profile editor.
- Pause your profile in Settings to stop appearing in Discover without deleting anything.
- Withdraw permissions for location, photos, camera and notifications in your phone's settings at any time. RallyDate keeps working without them; you can type your city instead of sharing your location.
11. Your privacy rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy in a portable format;
- correct data that is wrong, or delete it;
- restrict or object to how we use it, including use based on our legitimate interests;
- withdraw consent at any time, without affecting what we did before;
- not be treated differently for using these rights.
EU, EEA and UK: you can also complain to your local data protection authority, though we'd appreciate the chance to help first.
United States (including California): in the last 12 months we collected the categories of data in section 2 (identifiers, personal characteristics, approximate location, photos, messages and technical data) for the purposes in section 4. We have not sold or “shared” personal information for cross-context behavioural advertising, and we use sensitive personal information only to provide the service, so there is nothing to opt out of. You may use an authorised agent, and you can appeal if we turn down a request.
To use any of these rights, email support@rallydate.app from the email address of the Apple or Google account you sign in with. We may ask you to confirm it's you, and we reply within 30 days (45 days where US state law allows).
12. Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Database access is protected by row-level security, so each member can only read what they're allowed to. Uploads go through short-lived signed links, photos are stored under random addresses that can't be guessed, verification selfies are never publicly accessible, and only a small number of authorised staff can use moderation tools. No system is perfectly secure: if you find a vulnerability, please tell us at support@rallydate.app.
13. Adults only
RallyDate is only for people aged 18 and over. We ask for your date of birth at sign-up and don't let anyone younger continue. We do not knowingly collect data from minors: accounts reported as underage are suspended straight away and deleted if confirmed. See our Child Safety Standards.
14. This website
This website uses no advertising or analytics cookies and doesn't ask for personal data. Our host keeps standard server logs (such as IP address and pages requested) to deliver and protect the site. If you email us, we use your message only to reply.
15. Changes to this policy
We may update this policy as RallyDate changes. If a change is significant, we'll tell you in the app before it takes effect, and ask for your consent where the law requires it. The date at the top shows the latest version.
16. Contact us
RallyDate (legal entity name to be confirmed)
Postal address to be confirmed
Email: support@rallydate.app