Privacy Policy

Effective date: 2026-08-30
Last updated: 2026-10-13

---

1. Who we are

Rally is operated by Rally Technologies (Private) Limited, a private limited company incorporated in Pakistan on 27 July 2026 under the Companies Act, 2017, with company registration number (CUIN) 0347703. In this policy, "Rally", "we", "us" and "our" all mean that company, which is the data controller responsible for the personal data described here.

Rally is a padel matchmaking app for players across Pakistan. Rally lets you post a padel match you've already booked, find other players to fill the open spots, coordinate via in-app chat, and record the score afterwards. Rally also lets coaches approved by us list padel lessons, which other players can browse and book — Rally connects coaches and players but is not itself the coach and does not deliver the lesson (see Section 4 and our Terms of Service).

If you have any questions about this Privacy Policy or how we handle your data, contact us at privacy@rally.pk.

2. What this policy covers

This policy covers personal data we collect when you use the Rally mobile app (iOS and Android) and our website, rally.pk, including data we collect automatically when you interact with the app and data you provide to us directly.

It does not cover:

• Third-party services you sign in with (Apple, Google) — those have their own privacy policies and you agree to them when you authenticate.
• Anything that happens off-platform after you coordinate a match or a lesson (in-person conduct at the venue, payments between players, or payments between a player and a coach, etc.).
• Third-party venues you book courts with — Rally does not book courts on your behalf in this version of the app.

3. What data we collect

3.1 Data you provide when you sign up

• Authentication identifier — when you sign in with Apple or Google, we receive a user ID and email address from that provider. We use the email to identify your account and contact you about service matters.
• Full name — provided by Apple/Google at sign-in, or entered by you during onboarding. Displayed to other players in matches you join.
• Gender — collected during onboarding because Rally supports gender-segregated match types (Men's, Women's, Mixed). Gender determines which match types you can post and join. Gender is used as a server-side filter only and is not displayed on your public profile to other players. You can update your gender once via Settings; after that, changes require contacting support.
• Padel attributes — your skill level (0.1-step scale), dominant hand (left / right / both), and preferred court side (forehand / backhand / both). Used for match-fit display and your public profile.
• Profile photo (optional) — if you upload one, it is stored by our hosting provider and displayed on your profile, in matches, in search results, and in follower and following lists. Profile photos are served from a public storage bucket: the image file itself can be fetched by anyone who has its direct link, without signing in. If a match you are part of is shared using its link, your photo may also appear on that match's public preview page — see Section 3.5.
• Phone number — Rally may ask for your phone number when you take part in something that someone else runs or hosts through Rally: for example an Americano, a coached session, a tournament, a club event, a match with a court booked at a club, a match with a coach played at a club, or — in the cities where Rally asks for it — an ordinary match you join or ask to join. We use it so the people running that game, event or booking can contact you about it, including arranging payment. We keep one number for you — the most recent one you gave — and fill it in for you the next time it is needed. Your number is never shown to other players — except the player who posted a match you join, as below — is never part of your public profile, and is never shown in search. Who can see it is set out in Section 5.

3.2 Data we generate as you use the app

• Matches you post and join — the venue, date, time, cost-per-player, privacy setting (Public / Private), level range, and gender preference for each match. Your roster membership in matches posted by others.
• In-app chat messages — messages you send in Rally's chat threads: match threads, lesson threads, Americano threads, and direct threads with another player. A message is text (max 1,000 characters) or a photo you choose to send. Photos are stored in a private storage bucket and are only readable by the other people in that thread. How long a message is kept depends on which kind of thread it is in — see Section 7.
• Score records — the final score you submit for completed matches, plus any score disputes.
• No-show reports — if other players report you as a no-show, or you report another player.
• Content reports — if you report a message, a match, or another player's profile, we store who reported it, who or what was reported, the reason you picked, and how we resolved it. If someone reports you, we store the same record about you. See Section 3.7.
• Blocks — if you block another player, we store that you blocked them, so we can keep the two of you apart across the app. See Section 3.7.
• Who you follow — if you follow another player, we store that connection. See Section 3.6.
• Reliability metrics — we maintain an internal reliability indicator on your account based on cancellation, no-show, and dispute history. This indicator is not displayed to other players in this version of the app. We use it internally for moderation and to enforce suspension rules.
• Suspension status — if your reliability metrics trigger an automatic suspension, or your account is suspended because it signed in on a phone a suspended account used (see Section 3.3), that status is recorded on your account, together with which phone and which suspended account it was.
• Coaching and lessons — if you are approved by Rally as a coach, we store your coach status, the short coach bio you write, and the lessons you list (title, venue, date, time, price-per-player, capacity, and the roster of players who have booked). If you book a lesson as a player, we store your place on that lesson's roster. Rally does not collect, hold, route, or process any payment for a lesson — lesson payment is settled directly between you and the coach, off-platform.
• Payments to Rally, and Rally credit — for the events where Rally itself collects the entry, we store a record of every movement of money: what you paid, what came back to you, any credit Rally issued you, what you spent it on, the amount, when it happened, and which event it was for. Your Rally Wallet balance is the sum of those movements. This record is not deleted when your account is deleted — it stays with your identity removed from it. See Section 7 and Section 9. Our Terms of Service set out how Rally credit works.
• Club verification for card payouts (club owners only) — if you own a club on Rally and set up Get paid, so that card payments for your club can be paid out to it, we store what you give us there: how the club is registered (sole owner, partnership or private limited company), its legal and trading name, registered address, support phone and email, its tax number (NTN), the bank, account title and IBAN payouts go to, a photo of the bank's letter, the name and CNIC number of each owner and director, and photos of the front and back of each CNIC, and photos of the company papers the business type needs. These photos are stored in a private storage bucket: no other player can see them, and inside Rally only your club's owners and Rally staff can open them. Managers of your club never see Get paid. We also record when it was sent for checking, when Rally verified it or sent something back, and why. See Sections 5, 7 and 9.

3.3 Data we collect automatically

• Device push token — when you grant push-notification permission, your device's push token is stored so we can send notifications about your matches. Issued by Apple's or Google's push notification service and routed through a notification-delivery provider.
• Match pages you open — the first time you open a match's page, we record that you opened it and when. We use it only so we don't send you a "1 spot left" alert about a match you have already seen. It is never shown to anyone. See Section 7 for how long we keep it.
• App and device version — for debugging and crash logs, and so a new feature only reaches phones that can use it.
• When you open the app, and which notifications you open — we note when you open the app and which notifications you open. We use this only to avoid sending you alerts while you're usually away, and to send fewer alerts you don't read. We keep it for 30 days. It is never shown to other players or shared with anyone. To learn your usual hours we read your own app-open times back from our analytics provider (Section 5) and keep only a count per hour of the day.
• Device identifier — each time you sign in or open the app signed in, Rally stores the identifier your phone gives the Rally app: on iPhone the "identifier for vendor", on Android the Android ID. It is not your phone's IMEI, serial number or advertising ID, it is never used for advertising, and it is never shown to other players or shared with anyone. We use it only to keep suspensions effective: to stop a suspended player from opening a new account on the same phone, and so our team can see when several accounts are used on one phone. If a suspended account was used on a phone, an account that first signs in on that phone after the suspension began may be suspended too, and can appeal as our Terms of Service set out; someone who used the phone before the suspension is not affected. We keep at most ten phones per account. On Android this identifier stays the same if you reinstall Rally; on iPhone it changes if you remove every app from Rally.
• Authentication logs — sign-in events, IP address at sign-in time, and refresh-token activity. Stored by our hosting provider for security and audit purposes.
• Venue search queries — when you use the venue picker, your typed query is sent to a mapping service to retrieve matching venues. See Section 5 for what it receives.
• Approximate location → your city — when you grant location permission, Rally reads your device's approximate location once, the first time you open the match feed, and converts it into a city name (for example, "Lahore") so your match feed can default to matches in your city. We request "while using the app" (foreground) access at coarse accuracy only — never background, "always-on," or precise location. We store only the resulting city name on your account; we do not store your GPS coordinates or build any location history. If you decline, the app works normally and your feed defaults to "All cities." You can change or revoke this permission at any time in your device Settings.

3.4 Data we do not collect

• We do not collect your precise location, track your location in the background, or keep any location history. Rally requests only one-time, foreground, city-level location — see Section 3.3.
• We do not access your contacts or your microphone. We use your camera only at the moment you choose to take a photo yourself — for your profile picture, to send in a chat thread, or, if you own a club, to photograph a CNIC, a bank letter or a club paper for Get paid.
• We do not collect health or biometric data. We do not store your card number. We store bank details only for a club owner who sets up Get paid, and only the club's payout account (Section 3.2). Where Rally collects an entry, we keep a record that the payment happened and what it was for — see Section 3.2 — and nothing that could be used to pay with your card.
• We do not run advertising or marketing trackers.

Photos — reading is not collecting, and here is exactly what Rally does. Rally does read your photo library, in one narrow way, and collects nothing from it unless you send a picture. Because "read" and "collect" are different things, it is set out here in full rather than left to a "we never" that would not be true.

When you go to send a photo in a chat, Rally asks your device for photo access so it can show you your most recent pictures to pick from. Your device decides what that means, and you decide what to give it: you may grant access to your whole library, or limit it to selected photos only. Rally works exactly the same either way and never requires a full-library grant. If you decline altogether, sending photos still works — you use your device's own picker instead, which hands Rally only the one image you choose.

With access granted, Rally only ever reads — it never writes to your library, never deletes from it, and never changes it. It reads the four most recent images, which is what it takes to draw that row of thumbnails, and it does not scan, index, or catalogue the rest. Nothing leaves your device unless you tap a photo to send it: a picture you look at and do not pick is never uploaded anywhere. You can change or revoke photo access at any time in your device Settings.

3.5 Public match share pages

When a match is shared using its link, Rally generates a public preview page (at rally.pk/m/…) so the link displays a readable preview when posted, for example in WhatsApp. This page can be viewed by anyone who has the link, without signing in. It shows the match details (venue, date, time, and level range) and the name, skill level, and profile photo of each player on that match's roster. Only matches shared via their link have such a page — but a share page is not the only way other people see your profile. Inside the app, any signed-in player can find you by name; Section 3.6 describes that in full. Treat a match link as public: share it only with people you are comfortable seeing that match's roster.

3.6 Being findable on Rally

Every player on Rally is findable by name by every other signed-in player, across all of Pakistan, and there is no way to opt out of this. We are telling you plainly because it is a deliberate design decision, not an oversight.

Search. Any signed-in player can type a name into Rally's search and see matching players. A player result shows your name, profile photo, skill level, and city. Search is not limited to your own city — a player in Karachi can find a player in Lahore. It never shows your email, your gender, your phone number or your reliability metrics. Searching a player's name can also show public matches they played in the last 90 days, unless one of you has blocked the other. You must be signed in to search at all; search is not available to the public web.

Following. Any signed-in player can follow you without asking, and you can follow them. Your followers and the people you follow are shown on your profile to any signed-in player who opens it. Following someone means you get a notification when they post a match; being followed sends you a notification.

Suggestions. Rally suggests players to follow — the "players near you" row on your feed. You may appear in another player's suggestions if you are in the same city and your skill level is close to theirs. Suggestions never use your location beyond the city on your account.

Messaging. Any signed-in player can start a direct chat with you. There is no request step, no acceptance step, and no requirement that you follow each other first.

Who is excluded. You are not returned in search, in follow lists, or in suggestions if your account is suspended or deleted, or if you and the person searching have blocked each other (in either direction — see Section 3.7).

There is no discovery opt-out. Rally does not offer a private profile, a hidden mode, a "who can message me" setting, or an approval step before someone can contact you. If you do not want to be found by a specific person, block them (Section 3.7). If you do not want to be found at all, the only option is to delete your account (Section 9).

3.7 Reporting, blocking, and moderation

Reporting. Rally has a report button on messages, on matches, and on player profiles. You pick one of four reasons — harassment or bullying, inappropriate or offensive content, spam or a scam, or a fake profile — and we store the report against the reported account. You can also email support@rally.pk.

What we do with a report. A Rally moderator reviews it and takes one of three actions: dismiss it; remove the content, which replaces the message with a "[deleted]" marker visible to everyone in that thread; or remove the content and suspend the account. A suspension cancels that account's open matches, notifies the other players on them, and frees up the seats it was occupying. Rally has a small number of staff moderators. When a man adds or changes his profile picture, it is checked automatically to confirm it shows a real person; a picture with no person in it is removed. Women's pictures are never checked.

What a takedown can and cannot reach. A takedown removes the content from Rally: the message stops being served to anyone, and a photo is deleted from our storage and can no longer be loaded by anyone who has not already loaded it. It cannot reach a copy that is already on someone's phone — an image they had open, or a screenshot they took. No app can undo that, and we would rather say so than imply otherwise. Treat anything you send in Rally the way you would treat anything you send in a messaging app.

Blocking. You can block another player from their profile, and see and undo your blocks in Settings. A block is mutual, and this is exactly how far it reaches. You disappear from each other's search results, feeds, follow lists and suggestions. Neither of you can start a direct chat with the other or write in one — an existing direct thread stays readable, and the message box is locked. Neither of you can join a match the other posted or request a spot in one, book the other's lesson, or ask for a spot on the other's tournament team. Blocking also removes any follow between you in both directions, and unblocking does not restore it. We do not tell the person you blocked them.

What a block does not do. It does not remove either of you from a match, lesson or Americano you are both already in. In a shared match or lesson thread you will not see their messages and their messages will not reach your notifications; in an Americano thread their messages are hidden from you in the app, but a notification may still arrive. If someone in a shared game is a problem, report them as well as blocking them — a block tells no moderator anything.

4. How we use your data

We use your data to:

• Provide the service — show you matches, let you join and post them, deliver messages in every kind of chat thread, record scores, and send push notifications about activity that concerns you: matches, lessons, Americanos and tournaments you are part of, direct messages, and follow activity (someone following you, or a player you follow posting a match).
• Enforce match rules — filter matches by gender, skill level, and privacy settings so the right players see the right matches.
• Protect the community — track no-shows, cancellations, and disputes, and suspend accounts that exceed our reliability thresholds; review content reports, remove content that breaks our rules, and suspend accounts for it; and honour the blocks you set.
• Understand how Rally is used — measure which parts of the app people reach and where they get stuck, using the analytics and crash-reporting processors named in Section 5.
• Communicate with you — send service notifications (match activity, account changes) and respond to your support requests.
• Comply with law — respond to lawful requests from government authorities in Pakistan and meet our legal obligations.

We do not sell your personal data. We do not share your personal data for advertising or marketing.

5. Who we share your data with

Rally uses the following third-party service providers ("processors") to operate the app. Each processor only receives the data necessary for the function it performs.

What analytics and crash reporting deliberately do not receive. We have configured both to collect as little as possible, and these are settings, not intentions:

• Almost no automatic capture. Our analytics provider records the events we have written by hand, plus three things it notices itself: a crash report if the app closes unexpectedly; on iPhone, a note when a spot on the screen is tapped repeatedly with no result, so we can find buttons that feel broken; and, for about one in four app sessions, a recording of the layout of the screens you visit and where you tap. Every word, number, typed character and picture is blanked out on your phone before a recording leaves it, so no name, message, number or photo is ever in a recording — what is left is the shape of each screen and your taps. The website sends only those page views and taps.
• No message content, ever. No chat message, no photo, and no search text you type is sent to either processor. When you search, we send the number of characters you typed and how many results came back — never the characters themselves.
• No name, email, or phone number. Analytics and crash reports receive your Rally account ID, which is a random identifier. It is not your email address and it means nothing outside Rally.
• Nothing before you sign in. Events fired before sign-in are stored without any person attached to them. A screen recording that began before you signed in, already blanked, is linked to your account ID if you sign in during it.
• Crash reporting sends no personal information by default. Its performance timings carry no account ID, and any web address in them is cut down to the server and the shape of the path before it leaves your phone, so no ID, search or message can travel with it. Crash reports drop ordinary app logs so that message text cannot travel with an error.

Each processor has its own privacy policy. By using Rally, you also become subject to those policies for the parts of the service they provide.

Hosts, coaches and clubs

When you take part in a game, event or booking run through Rally, we may share your name and phone number with the people running or hosting it — the hosts of an event, the coach of a session, or the owners and managers of a club whose court or event you are part of, including a match with a coach played at that club — so they can contact you about it, including arranging payment. They see your number alongside the name and photo already on the roster; we do not pass them your email, your level, your match history or any other data. Hosts, coaches and clubs are independent — they are not Rally staff and not our processors — and they may use your number only to run that game, event or booking.

If you join an ordinary match in a city where Rally asks for your number on matches, the player who posted that match sees the numbers of the players who join it, so they can reach them about the match, until the match ends. No other player sees it. The poster is not Rally staff, and may use your number only for that match.

If you own or manage a club on Rally, players on a match that has asked your club for a court can see your first name and phone number, and call you, once that request has waited 30 minutes without an answer. They stop seeing it as soon as the club confirms or declines the court.

If your club has turned on WhatsApp court alerts, Rally sends each court request at your club to the phone number you gave Rally, on WhatsApp — the name of the player who asked and the court and time they asked for — with buttons to confirm or decline it. A tap counts only from that number, and does what the club desk's buttons do. Ask us and we turn the alerts off. If you ask such a club for a court, your name and the court and time you asked for reach its owners and managers that way.

If you own a club and set up Get paid, what you enter there — including each owner's and director's CNIC and its photos, and the club's bank details — can be seen by your club's other owners, never by its managers or by players, and by Rally staff who check it. Rally staff open a photo only through a short-lived link, and every opening is logged with who opened it. If you add a director who does not use Rally, you are telling us their name and CNIC on the club's behalf, so make sure they know. Today these details do not leave Rally; before any of them is passed to a payment partner to pay your club out, we will update this policy to say who receives what.

Beyond these processors and the host, coach and club cases above, we share your data only when:

• We are legally required to (court order, valid government request under Pakistan law).
• It is necessary to protect the safety of users or the public (for example, responding to a credible threat).
• You have explicitly asked us to (for example, by linking your account to a third-party service in a future version of the app).

We do not share your data with advertisers, data brokers, or marketing networks.

6. Where your data is stored

Rally uses a hosting provider for its database, authentication system, file storage, and server functions. Your account, your matches, your chat messages and your photos are hosted in the South Asia region.

Four categories of data leave that region. Product analytics (including the blanked-out screen layouts of recorded sessions) and crash reports are sent to servers in the United States. What each receives is listed in Section 5; neither receives your name, your email, your phone number, your messages, your photos, or the text you type into search. A man's profile picture is sent to an AI image-checking service in the United States when he adds or changes it (Section 3.7). And for a club that has turned on WhatsApp court alerts, each court request at that club travels to its owners and managers through WhatsApp, whose servers may be outside Pakistan (Section 5 lists exactly what it carries).

By using Rally, you consent to your data being transferred to and processed in the countries where Rally's processors are hosted, which are outside Pakistan. Pakistan does not currently have a comprehensive cross-border data transfer regime; the Personal Data Protection Bill (when enacted) may change this, in which case we will update this policy and provide notice.

7. How long we keep your data

Section 9 sets out exactly what deleting your account does and does not remove. ⚠️ It is not everything in this table, and the difference matters — read it. We may also retain a record where we are required by law to (for example, evidence of a fraud or safety investigation that has not concluded).

8. How we protect your data

• All communication between the Rally app and our server is encrypted in transit (TLS / HTTPS).
• Data at rest in our database is protected by row-level security policies that restrict every table to the users authorized to read or modify it.
• We use industry-standard authentication via Apple Sign In and Google Sign In. We do not store your Apple or Google passwords.

No system is perfectly secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. If a data breach occurs that meaningfully affects your data, we will notify you and the relevant authorities as required by Pakistan law.

9. Your rights

You can:

• Access your data. Most of your data is visible in the app. For anything you can't see directly, email us at privacy@rally.pk and we will send you an export.

• Correct your data. Edit your name, photo, hand, side, and (with the one-time change allowance) gender in Settings. For other corrections, email us.

• Delete your account. Settings → Delete Account triggers a server-side delete. It is permanent and there is no undo. What it does is not the same for every kind of data, so here is exactly what happens:

  Removed immediately and completely — your account and profile (name, email, photo, gender, level, hand, side, city), your place on every match, lesson, Americano and tournament roster, your notifications, your phone number, your push delivery records, your follows in both directions, your blocks, and the content reports you filed or that were filed about you. Any match you had posted that had not yet been played is cancelled and the other players are told. Every direct chat thread you were part of is deleted outright — your messages and the other person's, permanently, on both sides. If you organised an Americano, that Americano and its chat thread are deleted with your account.

  Not removed — this is the part people are surprised by. Messages you sent in match, lesson and Americano threads are not deleted with your account. The text stays where you wrote it and is shown to the other people in that thread as coming from "Former player", with your name and photo gone. In match and lesson threads those messages are then hard-deleted on the ordinary 30-day retention clock described in Section 7. In Americano threads there is no such clock, so they remain for as long as that Americano's thread exists. Matches you posted and scores you submitted are likewise preserved as records, with your name removed.

  Your payment and Rally credit records are not removed either, and this is deliberate. Any credit in your Rally Wallet is written off and lost when you delete — but the record of what you paid, what came back to you, what Rally issued you and what was written off stays in our books, with your identity taken off it. It no longer says who you were. Rally has to be able to account for money it took and money it gave back, and our Terms of Service say the same thing.

  If you own a club and set up Get paid, the CNIC line Get paid has linked to you as your own — the one you fill in from the line with your name that Get paid offers you — is deleted with your account, with its photos. A line you typed in for yourself as if you were someone else is linked to you once you enter the same CNIC on that offered line, so use it. The club's business details, bank details, papers and any other owners' and directors' entries are not yours alone, so they stay with the club until it leaves Rally (Section 7).

  If you want a message gone before you delete your account, delete the message itself first — the long-press action in any chat.

  Anonymized aggregate data (for example, "a match was completed on this date") may persist where it does not identify you.

• Withdraw consent. You can revoke push-notification permission in your device Settings at any time. You can sign out at any time. Deleting your account fully withdraws consent for processing.

• Complain. If you are not satisfied with how we have handled a request, you can complain to the relevant Pakistan data protection authority once the Personal Data Protection Bill is enacted and an authority is established. In the meantime, you can complain to the Federal Investigation Agency's cybercrime wing under PECA 2016 if you believe your data has been mishandled.

10. Minimum age

Rally is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under 13. If you are under 18, you should use Rally only with the consent and involvement of a parent or legal guardian. If you believe someone under 13 has provided us with personal data, contact us at privacy@rally.pk and we will delete the account.

Because matches and coaching sessions arranged through Rally involve meeting other players in person, minors should participate only with a parent or guardian's knowledge and supervision. Both app stores list Rally with a 13+ age rating.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision, and the version published at rally.pk/privacy is always the current one — the app links to that page rather than carrying its own copy, so what you read in Settings is what is in force.

We do not currently have a way to notify you individually before a change takes effect, and we would rather say so than promise a notice we cannot deliver. A change takes effect when it is published. Your continued use of Rally after that is your acceptance of it, and if you do not agree to a change, you should stop using Rally and delete your account (Section 9).

If we build a notification mechanism, this section will be updated to describe it.

12. Disclaimers specific to data handling

To the maximum extent permitted by Pakistan law:

• Rally is provided on an "as-is" basis. We do not warrant that the app is uninterrupted, error-free, or free from security vulnerabilities.
• Rally is not responsible for the privacy practices of any third-party service provider listed in Section 5 beyond ensuring the processing relationship itself is documented.
• Rally is not responsible for the conduct of other users of the app, including any unauthorized use, disclosure, or misuse of information visible to them within the app (for example, your name, photo, level, hand, side, or chat messages you have sent in a match thread). Information you share in a match chat or on your profile is visible to the other players in those contexts; assume that anything you put in those fields may be seen by other players. On an event with a price, the other players in it can also see whether the person collecting the money (the organiser, the coach or the club) has marked you as paid — that you have paid, never how.
• Broader limitations on liability for the use of the app (including liability arising from in-person meetings, off-platform conduct, payment disputes, or any other matter outside data handling) are addressed in Rally's Terms of Service.

13. Governing law and jurisdiction

This Privacy Policy is governed by the laws of the Islamic Republic of Pakistan. Any dispute arising out of or in connection with this policy will be subject to the exclusive jurisdiction of the courts of Islamabad.

14. Contact us

Rally Technologies (Private) Limited (CUIN 0347703), Islamabad, Pakistan.

Email: privacy@rally.pk

For account deletion, you can also use Settings → Delete Account inside the app.