Privacy Notice

• Your employer invited you to a Rallyday step league. Your employer gave us your name, work email and team.
• With your permission, Rallyday reads one number a day from Apple Health or Health Connect: your step total. Nothing else from Health.
• Your teammates see your steps for today. Other teams see only team totals. Your employer's administrator never sees your step numbers: they see your name, team, and whether your phone has synced. If your administrator also plays, they're a player like anyone else: they see their own team's steps for today, the same as you see yours.
• We never sell your data, never use it for advertising, and never let it be used for employment or insurance decisions.
• You can delete your account in the app at any time.

Full details below. Washington and Nevada residents: see also our Consumer Health Data Privacy Policy.

Rallyday is a product of Boop Technologies, LLC, a Washington limited liability company ("Rallyday", "we", "us"), 1207 N Landing Way #1061, Renton, WA 98057. Privacy questions and requests: privacy@joinrallyday.com. Everything else: support@joinrallyday.com.

This notice covers the Rallyday phone app, the Rallyday console that employers use to run a season, and the website joinrallyday.com (§ 12).

Rallyday runs team step leagues ("seasons") that a company (your employer) offers to its people. Here's how the roles divide:

• Your employer decides to run a season, appoints an administrator, and the administrator uploads the list of people to invite to Rallyday's web console: each person's name, work email address and team. Before invitations go out, your employer confirms to us that it may invite the people on its list and that it has told them about the season. Your employer has its own privacy policy for its own records.
• Rallyday runs the league: the app, the scoring, the notifications and the console. We decide how the app handles your step data, and this notice explains it. Your employer can't change these rules or turn on access to your step numbers; the app has no way to do it.
• Taking part is voluntary. You choose whether to join, and you can stop at any time (§ 9).

From your employer, before you join:

• Your name, work email address and team. We use these to create your sign-in and send your invitation.

From you, in the app:

• The name you choose to show (1 to 40 characters), and an optional profile photo. The app shrinks each photo to a small size and removes its hidden details (such as where it was taken) before sending it.
• Your agreement to these terms (what you agreed to, which version, and when).
• Changes you make to your team's look (its name, color and emblem).

From your phone, with your permission:

• Your daily step total, read from Apple Health (iPhone) or Health Connect (Android). We ask for step count only. The app reads today's and yesterday's totals several times a day, including in the background, and also re-reads the total from three days earlier to check that what we received was complete. We keep each reading we receive (the number, whether Health had any steps recorded, and when it was read and received). On iPhone, steps you typed into Health by hand are left out. We never receive individual Health records, routes, locations, heart rate or any other health information.
• Information about your phone: whether it's an iPhone or Android, its operating system version (on Android this includes the phone's maker and model), the Rallyday app version, and an identifier we create for your phone's Rallyday installation.
• How syncing is going: when the app woke up and why, whether reads and uploads worked, error codes, whether the phone was in low power mode, whether background refresh was on, whether the phone was locked, and the phone's time-zone setting. We use this only to fix sync problems.
• A notification address (a push token from Apple or Google, through Expo) and whether you allowed notifications.

If you report a person or team:

• Who reported, what was reported (the person or team), the reason you chose (their name, their photo, or something else), and when. Your administrator (while the season is on) and Rallyday see the report, to deal with it. Nobody is told who made it: not the person or team reported, and not your administrator. We keep who made it only to stop reports being misused. Reports are kept with the season's other records (§ 8). Changes your administrator makes because of a report (a name changed, a photo removed, a lock) are recorded in the console's log.

If you block someone:

• Who you blocked and when. Their photo is hidden from you (their name still shows, because it's a league), and they aren't told. You can unblock them at any time.

Automatically, when you sign in:

• Our sign-in provider records each sign-in session with your device's IP address and a description of the app or browser, to keep you signed in and secure.

When the app crashes:

• A crash report with the type of error, the part of the code it happened in, your phone's operating system and version, and the app's version. Crash reports don't include your name, email, account, steps, phone model or IP address, and aren't linked to you.

What we don't collect: passwords (you sign in with a code we email you), your location, contacts, photos other than the one you choose, advertising identifiers, or payment details. The app contains no advertising or analytics tools.

• To run the league: score each day at the next morning's cutoff (9:00 in the season's time zone, unless the Season rules set another time) from the steps that arrived before then, keep the standings, and show you your team, your games and the season.
• To send you sign-in codes, your invitation, reminders before the cutoff and the morning result.
• To show your administrator who has joined and whose phone needs attention (never step numbers; see § 5).
• To keep Rallyday working and secure: fix sync problems and crashes, prevent misuse, and keep one scoring phone per person.
• To answer you when you contact us.

We never:

• sell your data, or "share" it for advertising;
• use your step data for advertising, marketing, or building profiles about you;
• use your data, or let your employer use it through Rallyday, for decisions about employment, insurance, credit or lending;
• store your health data in iCloud;
• use your health data to train AI models, or give it to AI providers.

One thing to know about small teams: a team's total is shown to the other team. On a day when only you were counted for your team, that total is your total.

The administrator's name, and (if your employer chose this) their email address for replies, appear in your invitation.

We use these companies to run Rallyday. Each one handles your information only to provide its service to us, under its data-processing terms with us, which protect your information at least as well as this notice.

Apple Health and Health Connect stay on your phone, under Apple's and Google's own policies; Rallyday only reads your step total from them.

We may also disclose information when the law requires it (for example, a valid court order), to protect someone's safety, or to protect Rallyday's rights. If Rallyday is ever sold or merged, your information would move only under this notice's promises, and we'd tell you before anything about it changed.

• Step readings, sync details and notification records are kept for up to 12 months after your last season ends, then deleted; the season's published results stay (§ 8). We may delete them sooner.
• Sign-in session records last until you sign out, and are deleted with your account.
• Our providers' records (such as email delivery logs) are kept for the shorter of their own retention periods or what they need to provide the service.
• Backups of our database are kept for 7 days.

You can delete your account in the app (More › Account › Delete account), on the web at joinrallyday.com/delete-account, or by emailing privacy@joinrallyday.com.

• Straight away: you're signed out everywhere, your phone stops counting, your notification address and photo are removed, your name is hidden, and you're taken off your team from the next day.
• Then, within 7 days: your account, readings, phones, sync details, notification records, blocks and agreement records are deleted. We wait until every day you played has its final result, so no published result changes because you left, and until your request is in Rallyday's daily safety email. If a day's result is held for checking, it can take longer, and we'll finish as soon as it's settled.
• What stays, without your name or email: the season's published results for days you played, including your daily totals for those days (the raw total and the capped total that counted), under a season membership number that's no longer linked to you; your team history and invitation dates in that season (and the email service's message ids); reports you made or that were made about you; and a short record that the deletion happened (your account number, when, and how you asked), also listed in the morning email to Rallyday, so it can't be undone by accident. Your teammates stop seeing your past daily totals as soon as you ask. We won't try to re-identify any of it.
• Deleted information leaves our backups as they cycle, within 7 days.

• Say no: taking part is your choice. If you'd rather not, just ignore the invitation; you're only in the league if you join. To stop invitation emails, ask your administrator to take you off the list, or email support@joinrallyday.com.
• See your data: the app's Your steps shows every day's readings. For a copy of everything we hold about you, email us.
• Correct it: change your name in the app; ask your administrator to fix your team or email. (Your administrator or Rallyday may also change, remove or lock a name or photo that breaks the Terms' rules.)
• Withdraw permission: turn off Health access or notifications in your phone's settings at any time. A day without a sync never shows as zero; it shows as not synced.
• Delete it: § 8.
• Ask questions or complain: email us. We'll answer within 45 days.

These rights are for everyone, wherever you live. Some states give their residents specific rights (for example Washington, Nevada, California and Connecticut); we honor them the same way, and you can appeal a decision by replying to our answer. Washington and Nevada residents: our Consumer Health Data Privacy Policy explains the rights for health data, including how to appeal to your state's Attorney General.

• Everything travels encrypted (HTTPS). Our database provider encrypts stored data.
• When you connect your phone, the app makes a private key that proves your step uploads really come from that phone. The key is kept in the iPhone Keychain or Android's secure key store, on that phone only, and is never backed up. Our servers keep only a fingerprint of it, which can't be turned back into the key.
• Inside Rallyday, access to personal information is limited to the people who need it to run the service.
• No system is perfectly secure. If a breach affects your information, we'll tell you by email, the address you use to sign in, as the law requires.

Rallyday is for people 16 and older, invited by their employer. If you're 16 or 17, you need a parent's or guardian's permission to use it. Rallyday isn't meant for anyone under 16, and we don't knowingly collect information from them. If you think we have, contact us and we'll delete it.

On joinrallyday.com:

• The "Talk to us" form sends us your name, work email, company, expected number of participants and note, through Cloudflare and Resend, to our inbox (Google Workspace). We use it to reply and plan a season with you.
• Choosing a season size on the site keeps your choice in the page's address only. Buying a season online isn't open yet, and nothing is charged on the site. When it opens, we'll update this notice first.
• Analytics: Cloudflare Web Analytics counts visits without cookies. PostHog (US) shows us how the page is used: clicks, scrolling and a recording of the visit, with anything typed into forms masked before it leaves your browser. PostHog uses first-party cookies and keeps recordings for 30 days. If your browser sends "Do Not Track", PostHog doesn't record your visit. We use no advertising cookies or trackers.

If we change this notice, we'll update the effective date. If a change affects how we use your step data or who sees it, we'll tell you in the app before it takes effect and ask for your agreement again.

Boop Technologies, LLC (Rallyday) · 1207 N Landing Way #1061, Renton, WA 98057 · privacy@joinrallyday.com (privacy) · support@joinrallyday.com (everything else)