Privacy Policy
Effective October 2, 2026.
Rally ("Rally", "we", "us") is operated by Zach Asbury in Maryland, USA. This policy explains what information the Rally iPhone app and the website letsrallytonight.com collect, how we use it, who we share it with, and the choices you have. By using Rally you agree to this policy. If you don't agree, please don't use Rally.
Questions or requests: letsrallytonight@gmail.com.
The short version
- We don't sell your personal information, and we don't sell or share location data, including combined or "anonymized" location data. No ads, no ad trackers, no analytics SDKs.
- Your exact location stays on your phone unless you choose to share it. By default our servers only receive a rounded area. Live location for friends is off until you turn it on, friend by friend.
- A lot of what you do on Rally disappears on its own: your rounded area within minutes, check-ins within 30 minutes, rally chats 24 hours after the rally, group messages after 24 hours.
- You can delete your account in the app.
1. Information we collect
Information you give us
- Account: your email address and name from Apple or Google when you sign in with them, or your email address and password if you sign up with email. A date of birth, used for our 18+ rule and to decide whether you can see 21+ events. We never ask for or collect ID documents.
- Profile: display name, @handle, a profile photo (required), and optional bio, interests, "ask me about", field of work, social handles, and up to 10 favorite artists.
- Your picks and preferences: the kinds of events you tap or swipe on, what you save or skip, what you tell us you're into, and settings such as map visibility and who can find you.
- Content: rallies you host (title, place, time, notes), your RSVPs, messages in rally, group and direct chats, bumps, plans, looking-for-group notes, and reports you send.
- Waitlist and website: if you join the waitlist we collect your email, age range, your area, where you like to go out, an optional Instagram handle, and referral information. We also note the nearest city, state and country to the connection you signed up on, to see where interest is. It is approximate, we do not keep your IP address or coordinates, and it is never shown to anyone else.
- Connected accounts (venue owners): if you are the verified owner of a place and choose to connect your Google Business Profile, Google sends us an access token that we keep encrypted, and we read your location's event posts and special hours. We keep each event's title, start and end time and a link back to your post, not your photos or the text of the post, and we never post, edit or delete anything on Google. We use this only to show those events on Rally and to show you your own hours. You can disconnect any time in the venue dashboard (Calendars) or in your Google account's security settings; disconnecting or deleting your account revokes our access and removes what we read from it. Rally's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
- Contact: anything you send us by email.
Information collected automatically
- Location (rounded): with your permission, your phone rounds your location to a map area of roughly 1 to 5 km before sending it, to show events near you, crowd counts and who is looking for a group. These areas are deleted within about 5 minutes of the last update.
- Arrival and "Here": when you reach the venue of an event you said you're going to, your phone sends a one-time area of about 150 meters. We compare it with the venue and don't store it. Your "Here" status ends when your phone stops confirming you're there.
- "On the way": if you're going to an event, Rally can notice you heading to it (from about an hour before it starts) and show you as on the way. Only an ETA in minutes is sent, never your location or route. With "Always" location this works in the background; otherwise you tap a button yourself.
- Live location for friends (optional, off by default): if you choose, friends you pick can see your actual position on the map for 1 hour, until the night ends, or until you turn it off. We store only your latest position, overwriting it on each update. It is deleted when no friend can see it, after 4 hours without an update, and when you turn on Ghost mode, set visibility to Nobody, block or unfriend someone, or delete your account.
- Device and service data: your push notification token, and standard server logs (such as IP address and request times) kept by our hosting provider to run and secure the service.
Information we derive
To pick events for you, Rally keeps scores for the kinds of events, places, times and price levels you tend to say yes to, pass on, or show up at. We keep these scores, not a trail of where you have been. Nothing in them is shown to other people.
What we don't collect
No advertising ID, no tracking across other apps or websites, no contacts, no microphone audio (chat is text only), no photos from your library besides the one you choose, no health data, no payment details.
2. How we use information
- To run Rally: sign you in, show events and people near you, run chats, RSVPs, check-ins and friends.
- To pick events for you and explain why in plain words.
- To keep Rally safe: enforce our rules, review reports, filter harmful text, prevent abuse and fraud, and comply with the law.
- To send notifications you allow (reminders, replies, event changes). You can turn categories off in the app or in iOS Settings.
- To respond to you, and to improve and fix Rally.
We don't use your information for advertising and we don't build profiles of you for anyone else.
3. Who can see what
- Everyone on Rally (except people who blocked you or whom you blocked) can see your display name, photo, @handle, bio, interests and top artists, and events you host. If you turn off "Let people find me," you won't appear in search (someone who knows your exact @handle can still find you).
- People who can see an event can see who is going, on the way and here, with ETA only for on the way.
- Friends can see events you're going to. They see your area only if you choose that, and your actual position only if you turn on live location for them.
- Nobody sees your date of birth, who you blocked, your reports, or the scores Rally keeps to pick events for you.
Messages and photos you post are visible to the people in that chat or on that profile. Other people can copy or screenshot what you share, and we can't control that.
4. How we share information
We don't sell your personal information. We share it only:
- With service providers who process it for us and may not use it for their own purposes: Supabase (database, sign-in, storage and servers), Resend (the one-time codes we email for sign-up and password reset), Apple (the App Store, Apple Maps place search, push notifications, Sign in with Apple, MusicKit), Google (Google Sign-In), and Cloudflare (our website). Apple Maps searches and Apple Music requests go from your phone straight to Apple under Apple's privacy policy.
- For legal and safety reasons: when we believe in good faith that disclosure is required by law, subpoena or court order, or is necessary to protect someone's safety, investigate a report, or protect our rights. We push back on requests that are overbroad. We keep very little, and we have no location history to hand over.
- In a business change: if Rally is sold or merged, your information may transfer to the new owner, who must honor this policy. We'll tell you first.
- With your direction: for example, when you share a rally link or choose to show your area to friends.
5. How long we keep information
| What | How long |
|---|---|
| Rounded area and map presence | About 5 minutes after the last update |
| Venue check-ins and "Here" | About 30 minutes after the last refresh |
| Live location | Latest position only; removed as described above |
| Rally chats | 24 hours after the event ends |
| Group messages | 24 hours after each message |
| Direct messages | Until either person deletes their account |
| Bumps | 7 days |
| Hourly crowd counts (no names) | 9 weeks |
| Account, profile, photo, interests, scores | Until you delete your account |
| Reports and safety records | Kept as long as needed for safety and legal reasons, even after an account is deleted, with the reporter's identity removed |
| Waitlist information | Until you ask us to delete it or the waitlist ends |
Copies in our providers' backups age out on their own schedule.
6. Your choices and rights
- In the app (Profile, then Privacy & settings): map visibility (Everyone, Connected only, Nobody), who can find you, live location and Ghost mode, notifications, blocked people, and "I feel unsafe."
- Device settings: turn off location, camera or notifications in iOS Settings any time. Some features won't work without them.
- Export your data: Privacy & settings, then Export my data.
- Delete your account: Privacy & settings, then Delete account. This removes your account, profile, photo, area, check-ins, hosted events, messages, friends, blocks and more, right away. Reports and safety records are kept, as described above.
Wherever you live in the U.S., you can ask us to tell you what personal information we hold about you, give you a copy, correct it, delete it, or stop any sale, sharing for ads or profiling (we do none of these). Email letsrallytonight@gmail.com. We'll verify the request comes from you, respond within 45 days, and won't treat you differently for asking. If we deny a request you can reply "Appeal," and we'll answer within 60 days. You can also contact your state attorney general. An authorized agent may make a request for you.
7. Children
Rally is for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe someone under 18 is using Rally, tell us and we'll delete the account.
8. Security
We use encryption in transit, access rules that limit each person to what they're allowed to see, rate limits, and rounding of location before it leaves your phone. Messages are encrypted in transit and at rest with our hosting provider but are not end-to-end encrypted. No system is perfectly secure, and we can't guarantee absolute security. If a breach affects your information, we'll notify you and authorities as the law requires.
9. Other people, and meeting in person
Rally helps people find events and each other, but we don't control or vouch for what users say or do, or for events, venues or other third parties. Users are responsible for what they share. You choose what to share and who to meet; use your own judgment and the safety tools in the app. Third-party apps and sites we link to (such as maps apps and event pages) have their own privacy practices.
10. Where your information is processed
Rally and its providers operate in the United States. If you use Rally from elsewhere, your information is transferred to and processed in the United States.
11. Changes to this policy
We may update this policy. If we make a meaningful change, we'll tell you in the app or by email before it takes effect, and the date above will change. We will never change it to start selling your personal information or location data. Continued use after a change means you accept it.
12. Limits on our liability
To the fullest extent the law allows, Rally and its operator are not liable for indirect, incidental or consequential damages arising from your use of Rally or from information you or others share, or from a security incident that happens despite reasonable safeguards. Nothing in this policy limits rights you have under law that can't be waived.
Contact
Zach Asbury (Rally), Maryland, USA
letsrallytonight@gmail.com