Your data, and what Rally does with it.
Effective 10 July 2026 · Applies to Rally for iOS
Rally is a shared-list app. To keep a list in sync between you and the friends you invite, it stores your account, the lists and plans you create, and — with your permission — your location. Rally does not sell your data, show ads, or track you across other apps.
Who we are
Rally is published by Astav Technologies Private Limited (“Astav”, “we”, “us”). You can reach us at rajat@astav.tech.
What we collect
Account information
When you create an account we store your email address, a password (held only as a salted hash by our authentication provider — we never see it), and the display name you choose so friends recognise you in a list.
Content you create
The lists, plans, notes and places you add — including each place’s name, address and map coordinates — and an activity history of actions in a list (who added, checked, edited, or removed an item; who joined or left; list renames). This is the core of the product and is shared with the other members of that list.
Location
If you grant the optional “when in use” location permission, Rally uses your device location to find places near you and to centre the map. When you search for a place, your search text and approximate location are sent to Google to return suggestions (see “Third parties” below). Decline the permission and Rally still works — you’ll just search without nearby results. We do not store a history of your location on our servers.
Technical information
Standard connection information (such as your IP address) is processed by our hosting provider to deliver the service and guard against abuse. Rally contains no analytics SDKs, no advertising, and no third-party trackers.
How we use it
- To run your account and sign you in.
- To create shared lists and keep them in sync in real time across their members.
- To show your plans on a map and record a list’s activity timeline.
- To respond to you when you contact support.
Who can see your content
A list’s contents and activity are visible only to the members of that list. People join a list using an invite code — only share a code with people you want in the list. You can leave a list at any time; when the last member leaves, the list and its history are deleted.
Third parties
We use a small number of processors to run Rally:
- Supabase — database, authentication and real-time sync (our backend). Your account and content are stored here on our behalf.
- Google Maps Platform — place search (Places) and map display (Maps SDK). Place searches and map usage are subject to Google’s Privacy Policy.
- Apple — app distribution and, if you contact us, standard device information you choose to share. See Apple’s Privacy Policy.
We do not sell your personal data or share it for advertising.
Keeping and deleting your data
We keep your data for as long as your account exists. You can delete your account from within the app (Settings → Delete account), or email us at rajat@astav.tech and we’ll do it for you. Deleting your account removes your profile and the content you authored; a shared list is removed once its last member leaves.
Security
Data is encrypted in transit (HTTPS/TLS), and passwords are stored only as hashes. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.
Children
Rally is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we’ll remove it.
International processing
Our providers may process and store data on infrastructure located outside your country. By using Rally you consent to this processing.
Changes
If a future version of Rally changes how data is handled, we’ll update this page and revise the effective date above.
Contact
Astav Technologies Private Limited · rajat@astav.tech