Privacy policy

Account and player information

We store your authentication email and account identifier, name, and the profile information you provide: skill level, playing preferences, time zone, city, favorite courts, and optional scheduling link, contact email and phone number. If you sign in through Apple or Google, our authentication provider receives the identity information returned by that provider, which may include your email, name and profile-photo URL. RallyUp does not currently offer profile-photo uploads.

Player names and skill information help people judge games and identify participants. Optional contact email and phone number are shown to other players only when you enable their sharing settings. Your authentication email is separate from your public contact email.

Games, groups and messages

We store games, courts, schedules, availability and join responses, invitations, group names and descriptions, memberships, chat and player announcements, match results and ladder history. Public games are discoverable by other players; group and game content is shared with people who have access. Information you put into messages or game notes is visible to those readers.

For guest game invitations, we store the guest name, optional email address, invitation status and availability. A guest name and chat are shared with people who can access that game. Invitation emails include the organizer name, game details and invitation link; a guest email address is not shown as public game information.

If you block or report someone, we store the account IDs involved, the report reason and any details you choose to provide so we can apply blocks and review reports.

Private support conversations

When you message RallyUp, we store your message, optional screenshot, timestamps, delivery identifiers and read state in one private conversation. You and authorized RallyUp support operators can access it; other players cannot. Screenshots are verified and re-encoded without embedded image metadata. Please avoid including passwords, sign-in codes or other people’s private information.

You can choose to include an existing technical reference when diagnostics are enabled. It contains random session and document references, the app version when available, and the app platform to help us find a related error. Your support text and screenshots are excluded from app diagnostics, analytics, session replay and external alert copy. Owner email alerts contain only a generic notice and an authenticated inbox link.

Support push notifications have a separate setting. Turning them off leaves replies available in your conversation. We do not send recurring support check-ins or reminders to return without a new message.

Location and place searches

You can choose a city manually. With your permission, your browser or device can supply precise coordinates to help find your city and nearby courts or games. Coordinates can be sent to RallyUp and Geoapify to resolve places and search for courts. Search text, place identifiers and language may also be sent to Geoapify. We store selected city coordinates and favorite or game courts; this is not continuous background location tracking. Hosting infrastructure can infer a country from your IP address.

Shared informational tennis plans

For tennis arranged elsewhere, you can save a court, playing time, timezone, optional player names and notes in an unlisted link. Anyone with that link can read these details without signing in. Listed names are text supplied by the organizer, not confirmed attendance or linked accounts. Share only information your group is comfortable showing to anyone who receives the link.

Removing a plan or deleting its creator account removes it from the live service and stops the link working. Previously downloaded calendar events or copies held by recipients remain with them. Calendar downloads are snapshots and do not automatically update. Court coordinates are sent to Google Weather and NOAA when retrieving weather; names and notes are not sent with those requests. Opening external map or court-source links also shares information with those services.

Notifications and local storage

We store notification preferences, delivery records and, when you enable mobile push, device tokens and installation identifiers. Google Firebase and Apple's push service deliver mobile notifications. You can change notification preferences in RallyUp or disable push in your device settings. Your device also stores sign-in cookies and application caches. Signing out clears account-scoped application caches.

Diagnostics and performance

When enabled, Sentry and Google Firebase help identify errors, crashes and performance problems. Vercel Speed Insights measures browser performance. Application-generated diagnostic payloads are limited to technical details such as platform, app version, generalized routes, error categories and timings; application filters exclude chat content, account identifiers, credentials and tennis records from those payloads. These providers may also collect technical information through their software. Session replay is disabled.

Service infrastructure may separately process IP addresses, request metadata, authentication events and security logs. Those operational records are distinct from filtered app diagnostics.

When product analytics is enabled, PostHog helps us understand signed-in visits, game views, attempts to join or post, committed game changes, reported results and return use. These events use a random account-linked identifier and opaque game identifiers, with fixed categories and times. The account mapping stays private in RallyUp; the owner can inspect aggregate metrics and a player's own activity timeline. We do not send names, emails, RallyUp account IDs, chat, game notes, schedules, locations, raw URLs or browser IP addresses in these analytics payloads. This account-linked analytics is separate from diagnostics. Autocapture and session recordings are disabled.

How we use data and service providers

We use information to run accounts, find suitable games, coordinate play, maintain groups and rankings, send service messages, secure the service and diagnose problems. We do not sell personal information or use it for advertising.

Providers include Supabase for authentication, database and realtime services; Vercel for hosting and browser performance; Geoapify for place services; Sentry and Google Firebase for diagnostics and mobile push; PostHog for product analytics when enabled; Apple for sign-in and push; and Resend for service email delivery. Google also processes information when you choose Google sign-in. Providers process information needed for their services and may operate outside your country.

When automated-abuse checks are enabled, Cloudflare Turnstile processes browser and network signals to verify a request. RallyUp evaluates hosting-provided country and IP information against security rules. We keep short-lived verification and action records tied to your account and session, and rolling join counts to limit misuse. Our application logs do not include verification tokens or raw IP addresses. A country signal alone does not suspend your account. Contact us if you need help with a restriction.

Deleting your account and retention

Delete your RallyUp account on the web, or choose Delete account in the app's profile menu. A recent sign-in and confirmation are required. You do not need to send an email or reinstall the app.

Successful deletion removes your account, profile, contact details, preferences, memberships, ordinary authored messages, account invitations and push registrations from the live service. It also removes guest invitation records claimed by your account, including their stored guest names, email addresses, availability and plan confirmations. Games and matches you created and their associated content are deleted. Guest invitation records that have not been claimed by an account can remain with the game after their link expires; contact us for assistance with those records. Other members' groups remain: ownership passes to another member where possible, your authorship is removed, and names and descriptions of groups you created are cleared. Empty owned groups are archived. Apple authorization is revoked before deleting Apple-linked accounts.

Deleting a player account removes its support conversation and messages from the live database. When a support operator deletes their account, replies in other players’ support conversations remain with neutral RallyUp authorship; their screenshots become removed-image placeholders and technical references are cleared. Screenshot access ends with deletion or withdrawal. Physical image removal is queued and retried, so stored bytes may remain temporarily while cleanup completes. Unsent screenshot reservations expire after 24 hours.

Blocks are removed when you unblock someone or either account is deleted. Reports you submitted are removed when your account is deleted; reports about a deleted account may remain without that account ID.

For product analytics, account deletion stops local capture and removes the account mapping. A private removal job retains the opaque identifier and provider deletion references until PostHog removal is verified, including a later check for delayed events. Provider removal can take time and unresolved work remains queued; it is not instantaneous or guaranteed by a fixed query-retention period.

Other players' games, results and messages may remain without your account participation; games and matches already underway that you are playing in are canceled. Deletion cannot recall content already copied by others or delivered by email or push. Unlinked installation records remain to prevent stale push registrations. Backups and provider security or diagnostic logs are not immediately erased by account deletion; retention depends on the provider and its configured settings. Contact us for details about retained information.

Live account deletion completes when the app confirms success. If confirmation does not appear, sign in again to check your account before retrying. We do not promise immediate deletion from backups or third-party systems.

Your choices and contact

You can edit your profile, change contact sharing, select a city without device location, change notification preferences, or delete your account. For access, correction, deletion assistance or privacy questions, contact hello@rallyup.gg.