Privacy Policy

Rally ("Rally", "we", "us") builds workout tracking tools for athletes, coaches, and the squads they train with. Rally is operated by Foli Corporation, which is responsible for your data under this policy. This Privacy Policy explains what information we collect when you use the Rally iPhone and Android apps, the Rally desktop app, and this website, how we use it, who we share it with, and the choices you have.

1. Information we collect

Information you give us

• Account details: name, email address, password (held by our sign-in provider, never by us), profile photo, and any profile fields you fill in, such as bio, date of birth, height, and body weight.
• Training data: workouts, sets, weights, reps, times, distances, runs, notes, personal records, training maxes, the programming you follow, and the races and squads you join.
• Messages and posts: direct messages, squad messages, announcements, and resources you share in a squad.
• Files you import: workout files, spreadsheets, or photos of programming you upload so Rally can turn them into workouts.
• Questions to Turbo: what you ask Rally's AI training analyst, and its answers.
• Communications: support requests and the early-access form on this website.

Information from services you connect

If you choose to connect another service, such as Garmin Connect or Apple Health, we receive the data you allow that service to share with Rally. Depending on the service and the permissions you grant, this can include activities and workouts (type, start time, duration, distance, pace, route), heart rate, steps, calories, sleep, and other health and fitness measurements. We only request data that Rally uses to show your training and analyze it for you. See section 4 for how we handle it.

Information we collect automatically

• Device and usage data: device type, operating system and app version, and basic diagnostics we use to keep the app working.
• Push notification tokens: if you turn notifications on, so we can send them to your device.
• Purchases: a record of subscriptions you buy. Apple or Google process the payment; we never see your card details.
• Cookies and local storage: used to keep you signed in and remember preferences. We do not use advertising cookies.

2. How we use your information

• To run Rally and sync your training across your devices.
• To show your squads and followers the training you share with them.
• To compute personal records, trends, leaderboards, and estimated 1RMs.
• To answer your questions to Turbo and turn imported files into workouts.
• To send notifications and transactional email about your account.
• To respond to support requests, fix problems, and keep Rally secure.

We do not sell your personal data, use it for advertising, or share it with data brokers.

3. AI features

Turbo and Rally's workout import use large language models from Anthropic. When you ask Turbo a question or import a file, we send the relevant training data, including data from connected services when your question needs it, to Anthropic to generate the answer. Anthropic processes that data on our behalf and does not use it to train its models. Turbo only runs when you use it.

4. Data from connected services

Data we receive from Garmin Connect, Apple Health, or another service you connect is used only to provide Rally's features to you: showing your activities, analyzing your training, and answering your questions. In particular:

• We never sell it or use it for advertising.
• We only share it with people you choose to share your training with, such as your squads, and with the service providers in section 5 that help us run Rally.
• You can disconnect a service at any time in Rally's settings or in that service's own settings. When you do, we stop receiving data from it and delete the data we received from it within 30 days.
• Data from Apple Health is never used for advertising or marketing, as Apple requires.

5. How we share your information

• People you train with: training data you share in a squad or race is visible to its members, and messages are visible to the people you send them to.
• Service providers that process data on our behalf and only to run Rally: Convex (database and backend), Clerk (sign-in), Anthropic (AI features), Expo (app updates and push notifications), Apple and Google (sign-in, notifications, and purchases), Vercel (website hosting), and Resend (email).
• Legal reasons: when the law requires it, or to protect Rally, our users, or the public.
• Business transfers: if Rally is sold or merged, your data would move with it under this policy, and we would tell you first.

Our service providers are mostly in the United States, so your data may be processed outside your country. Where the law requires it, we rely on safeguards such as standard contractual clauses for those transfers.

6. Security

Data is encrypted in transit and at rest by our providers, and access to production data is limited to the people who run Rally. No system is perfectly secure, but we will tell you without undue delay if a breach affects your data.

7. Data retention

We keep your data while your account is active. When you delete your account we delete your training data and replace your profile with "Deleted User" straight away, and remove remaining copies, such as backups, within 30 days, except where the law requires us to keep something. How to delete your account.

8. Your choices and rights

• Edit your profile and training data inside the app.
• Leave a squad to stop sharing future training with it.
• Turn notifications off in the app or your device settings.
• Disconnect any connected service at any time.
• Delete your account in the Rally desktop app, or by emailing us (see Delete your account).

Depending on where you live, including the UK, the EU, and California, you may have the right to access, correct, delete, or export your data, and to object to or restrict how we use it. Email us to exercise any of these rights and we will reply within 30 days. You can also complain to your local data protection authority.

Where these laws apply, we process your data to provide the service you signed up for, for our legitimate interest in keeping Rally secure and working, and, for health data from connected services, with your consent, which you can withdraw by disconnecting the service.

9. Children

Rally is not intended for children under 13, or under the minimum age for online services in your country. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If the changes are material we will tell you in the app or by email before they take effect.

11. Contact

Questions about privacy, or a request about your data? Email Foli Corporation at hello@rallyfit.app.