1. Introduction
Rally ("we," "our," or "us") is a SAT preparation quiz application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile and web application. Please read this policy carefully. By using Rally, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account information: When you sign up via Google OAuth or email magic link, we receive your email address and display name from your authentication provider. We do not store your password.
Gameplay data: We store your quiz performance statistics, gem balances, streak information, and challenge results locally on your device and, for challenges, on our servers.
Age verification: We collect your birth year during signup solely to verify you meet the minimum age requirement (13 years). We do not store birth year data on our servers.
Analytics data: We collect anonymous usage analytics including page views, feature usage, and session data through PostHog and Vercel Analytics to improve the app experience.
3. How We Use Your Information
We use the information we collect to: provide and maintain the Rally application; manage your account and authentication; track your gameplay progress and performance; facilitate head-to-head challenge games between users; improve and optimize the app experience; communicate with you about your account; and comply with legal obligations.
4. Third-Party Services
We share data with the following service providers who help us operate Rally:
Supabase — Authentication and database hosting. Stores your authentication credentials and challenge game data.
Vercel — Application hosting and deployment. Processes web requests and collects basic analytics.
PostHog — Product analytics. Collects anonymous usage data to help us understand how the app is used.
Google — Authentication provider (if you sign in with Google). We receive your name and email only.
We do not sell your personal information to any third party.
5. Children's Privacy
Rally is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us immediately.
6. Data Storage & Security
Most of your gameplay data (gems, stats, streaks) is stored locally on your device using browser storage. Challenge data is stored on our servers via Supabase with encryption at rest and in transit. We implement reasonable security measures to protect your data, but no method of electronic storage is 100% secure.
7. Data Deletion & Your Rights
You have the right to request deletion of your account and all associated data at any time. You can delete your account directly from the Account page within the app, or by contacting us at the email below. Upon deletion, we will remove your authentication data and any server-stored challenge data. Locally stored data on your device can be cleared through your browser settings.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Rally after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy, want to request data deletion, or believe we may have collected data from a child under 13, please contact us at: maloney@evaine.ai