RallyShot Privacy Policy

Effective date: October 28, 2026

Overview

RallyShot helps badminton players import match video, review detected rallies, keep score, create highlights, and export finished videos. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

Information We Collect

• Account information. If you create or sign in to a hosted account, we process authentication metadata needed to operate the account. We also process your email address when you use email sign-in, when Apple or Google shares one, or when you optionally add a verified contact email. Apple may instead provide a private relay address or no email address. RallyShot does not receive or store your Apple or Google password.
• Approximate signup country. We may associate a coarse country estimate with your account to understand regional adoption. The estimate comes from signup network information and can be inaccurate, for example when you use a VPN or proxy. This feature does not collect precise device location.
• Video and match information. We process match recordings, thumbnails, rally boundaries, score edits, highlights, export settings, generated videos, and related metadata that you choose to create or upload.
• Support information. If you contact us through the app, we collect the message you submit and basic account, app version, build, device, and optional match context needed to investigate the request.
• Referral and reward information. If you use referrals, we process bounded referral account identifiers, an eight-character referral code, claim and qualification status, reward and fulfillment status, timestamps, app platform and build, and limited provider product or subscription-relationship identifiers. Customer-facing referral history does not show a friend's identity, name, email, export details, or exact activity time.
• Installation and abuse-prevention information. A capable app creates a random installation identifier for referral claim, export, and access-overlap checks. The API immediately protects it with a server-side HMAC and stores only the resulting digest, not a hardware fingerprint or advertising identifier. Short-lived HMACed velocity buckets have a window and declared expiration of no more than 24 hours; expired buckets are deleted when velocity processing runs. HMACed installation correlation attached to durable claim, completion, or access-blocker records may be retained as described below for reward accounting, security, fraud prevention, and audit.
• Referral landing information. The code-bearing referral page does not load Google Analytics. It sends only code-free aggregate landing events—page view, install intent, or open-app intent—with a new event ID, coarse locale, and platform family. It does not send the referral code with those events.
• Usage, diagnostic, and analytics information. We collect operational events such as authentication method, categorized authentication result, elapsed time, import, review, export, share, account, error, and performance activity to understand whether RallyShot is working reliably. Authentication analytics do not include provider tokens, nonces, provider identifiers, names, or email addresses.
• Crash and device diagnostics. When release monitoring is enabled, crash reports and device diagnostics may be collected to identify and fix stability problems.

How We Use Information

We use information to provide and improve RallyShot, including video import, rally review, scoring, export, account access, customer support, product analytics, abuse prevention, security, and reliability monitoring. We do not use RallyShot data for third-party advertising tracking.

Local And Hosted Processing

RallyShot is designed around local-first iPhone workflows. Review and export stay on your device unless you choose a hosted feature or otherwise submit information to RallyShot. For phone-local matches, sharing the source recording to improve rally detection is on by default; the sharing toggle remains visible on every new match, and you can turn it off there or change the default in Profile. Hosted features may store and process your content and account data on our service providers' infrastructure so the app can provide syncing, support, analytics, and processing features.

Sharing And Service Providers

We do not sell personal information. We may share information with service providers that help us operate RallyShot, including Apple and Google when you choose their sign-in option, plus cloud hosting, authentication, storage, analytics, crash reporting, and email providers. These providers are used to run the product and support the app, not to independently market to you.

Referral codes, account identifiers, provider proofs, and friend-pair information are excluded from product analytics and application logs. A code-bearing /r/ path may still appear in our hosting provider's access logs. The page uses a no-referrer policy so that path is not forwarded to the App Store or other destinations. During the disabled pilot setup, the retention period and full-path redaction for those hosting access logs remain a launch-readiness check; RallyShot will not activate the production pilot until that handling is verified and appropriately restricted.

Referral Retention

Short-lived HMACed velocity buckets have a window and declared expiration of no more than 24 hours, and expired buckets are deleted during later velocity processing. Referral claims, earned rewards, fulfillment records, bounded provider events, and administrator audit actions are durable records retained as needed to honor earned rewards, prevent duplicates and fraud, resolve support or billing disputes, and meet legal or operational-backup obligations. Fraud review may add a bounded reason and timestamp or revoke an unused reward; it does not silently rewrite reward history. Raw signed purchase payloads and private provider keys are not retained in the referral ledger.

Your Choices And Deletion

You can keep a new match's source recording on your iPhone by turning off its training-video sharing toggle before review, and you can set sharing to off by default for future matches in Profile. Hosted account users can delete their account from the in-app account menu. Account deletion removes hosted RallyShot metadata and analytics associated with the account and deletes the hosted authentication account, subject to limited retention where required for security, legal, fraud-prevention, reward accounting, or operational backup purposes.

For referrals, account deletion invalidates pending participation, removes private export-completion evidence, anonymizes the deleted account's identifiers in durable qualified history, and revokes that account's own referral rewards and access. It does not erase the other participant's earned reward. This separation lets us honor a reward already earned by someone else without retaining the deleted customer's identity in customer-facing history.

Android Availability Waitlist

If you request an Android availability notification, we process your email address, preferred website language, confirmation status, consent version and timestamps. We send a confirmation email before subscribing the address, and use the confirmed address for the Android availability notification you requested. You can unsubscribe through the link in the email or contact us for deletion. We use an email delivery provider to deliver these messages.

Pending confirmation links expire after 48 hours. Pending requests expire after 30 days and are deleted during subsequent waitlist processing. Confirmed requests remain until the notification is sent, you unsubscribe, or you request deletion. Limited consent, unsubscribe/suppression and delivery records may remain for abuse prevention, delivery troubleshooting and to honor your opt-out. Email addresses and confirmation tokens are excluded from website analytics; confirmation links use a URL fragment and the management page does not load analytics.

Children

RallyShot is not intended for children under 13. If you believe a child has provided personal information to RallyShot, contact us and we will take appropriate steps to remove it.

Changes To This Policy

We may update this Privacy Policy as RallyShot changes. If we make material changes, we will update the effective date and provide additional notice when appropriate.

Contact

Questions, privacy requests, or deletion help: rallyshot.app@gmail.com