Rallyo

Privacy Policy

Last updated: 10 August 2026

Rallyo is a padel scoring app for iPhone, iPad, Android, Apple Watch, and Wear OS. This policy explains what information the apps and our supporting services handle, why, and what choices you have. We have written it to be read, not skimmed past.

The short version. Match scores, settings, player names, and history live on your device, and on the free plan that is where they stay. Match data reaches our servers in exactly two cases: when you share a live match so others can follow it, and — on Pro — when your completed matches are backed up to your cloud archive. Both are described below, both have defined lifetimes, and you can delete both from inside the app. We do not run user accounts and do not collect your name, email, or location. We use anonymous diagnostics to keep the app stable. Optional watch workout data stays on your devices and is never sent to Rallyo.

1. Who is responsible

Rallyo is operated by BLVR (Pty) Ltd, a company registered in South Africa and the “responsible party” for the purposes of the South African Protection of Personal Information Act, 2013 (POPIA). You can reach us at support@rallyo.co.za for any privacy question, request, or complaint.

2. What we collect, and why

2.1 Data on your device

The following are stored locally on your phone, tablet, or watch using on-device storage. They leave your devices only in the four cases this policy describes: live match sharing (§2.2), the Pro cloud archive (§2.3), diagnostic information you choose to send us yourself (§6), and a result card or result text you send through your device's own share sheet — that goes straight to whichever app you pick, and Rallyo's servers are not involved:

On the free plan, none of this is uploaded: uninstalling the app deletes it, and we have no copy. If you have shared a match or used the Pro archive, the server-side copies described in §2.2 and §2.3 are separate — uninstalling does not delete those, which is why the app gives you a direct way to do so (§6).

2.2 Live match sharing (optional, any plan)

If you tap Share on a match, that match — the score, format, and the player names you typed for it — is uploaded to our servers (Google Firebase) and kept up to date while the share is live, so the people you send the code to can follow along. This only happens for matches you explicitly share. Shared match records are deleted automatically 30 days after their last update, and you can delete all of yours at any time from inside the app (§6). Share codes themselves expire within hours; the 30-day window just keeps the final score viewable for people you sent it to.

2.3 Cloud match archive (Pro only)

If you subscribe to Pro, your completed matches — including the player names you typed — are copied to a private cloud archive tied to your install's anonymous identifier. When you subscribe, matches you already played on this phone are copied too. Only you can access this archive; it is not shared with other users. Being honest about its limit: because Rallyo has no accounts, the archive is tied to this install — it cannot follow you to a new phone today, and restoring it works only within the install that wrote it. Your archive is kept until you delete it, which you can do at any time from inside the app (§6).

One historical note: before 10 August 2026 the app archived completed matches on every plan, not just Pro. If you used Rallyo before then, an older archive may exist for your install — Delete cloud match data (§6) removes it. On the free plan, nothing new has been archived since that date.

2.4 Optional watch workout and Health data

On Apple Watch and supported Wear OS watches, Rallyo can run an optional Tennis workout while a match is active. Before requesting access, the watch explains what it needs. If you grant permission, Rallyo may access physical activity or activity-recognition data and heart rate where the watch and permission level support it. The watch or operating system may also calculate workout duration and active calories from the session.

Rallyo uses this data only to run the match workout, show its local status, credit supported activity features, and help keep watch scoring reliable while the app is in the background. It is not used for advertising, analytics, profiling, medical advice, diagnosis, or treatment. Rallyo is not a medical device. Scoring continues to work if you choose Not now, deny permission, or later revoke permission.

Health and workout data is processed on your devices. It is not sent to Rallyo servers, Firebase, RevenueCat, advertising services, or other analytics services. On Apple Watch, a completed workout may be saved to your local Apple Health store, subject to your Health permissions and Apple Health settings. On Wear OS, Rallyo currently uses Android Health Services during the active workout and keeps only a small local summary containing the end time, duration, exercise type, calories where available, and the latest heart-rate value where available. Rallyo does not currently write this Wear OS data to Health Connect or Samsung Health.

You control Apple Health records through Apple Health. The small Wear OS summary and Rallyo's local workout preferences are removed when you clear Rallyo's app data or uninstall the watch app. We have no server copy to identify, retrieve, sell, or delete.

2.5 Anonymous diagnostics

The app uses Google Firebase to keep itself stable and to understand which features are actually being used. Each install generates a random, anonymous identifier that resets if you reinstall or reset advertising identifiers. We do not link this identifier to your name, email, IP address, or device serial number, and we do not use it for advertising or cross-app tracking.

Data Why
Crash reports (Crashlytics) Diagnose and fix crashes. Includes stack traces, OS version, device model. Does not include your match data or player names.
Performance traces Detect slow startup, slow audio playback, and similar regressions.
Anonymous product analytics Counts of events such as “match started”, “onboarding completed”, “paywall shown”. Player names, team names, and match scores are never included.

2.6 Cloud voice synthesis (Pro only)

If you subscribe to Pro and choose a premium voice, the app sends the sentence the umpire is about to say (for example, “Smit and van Wyk lead one set to nil, three games to two, thirty–forty”) to our Firebase Cloud Function, which forwards it to Google Cloud Text-to-Speech. The audio that comes back is cached on your device so the same phrase can later play offline. Custom announcements include the player names you typed, because that is the feature you are paying for; if you do not want your names synthesised, switch back to a standard voice in Settings.

The text of a request is processed transiently to generate the audio. The generated audio clips themselves are cached on our servers, keyed by the content of the sentence — not by your identity or install — so a phrase that has been synthesised before can be served again without re-generating it. We do not keep a log of which sentences your install requested.

2.7 Subscriptions and billing

Purchases are processed by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. Rallyo never sees your payment details. We use RevenueCat as a subscription gateway: it receives a random anonymous identifier and the receipt from the store so that we can confirm your entitlement to Pro features and let you restore purchases on a new device.

2.8 Feedback you send us

If you use Send feedback in the app, we receive what you write, any photos you choose to attach, and — so we can act on it — your anonymous identifier, app version, device model, operating system version, and language setting. If you tag the note as a problem, it also carries a short summary of your last three matches (format, score, and timestamps — never player names) so we can reproduce what went wrong. Photos are stripped of their location metadata before upload. Feedback is stored in Firebase, read by us, and kept until we've acted on it; it is write-only from the app (no other user can ever see it). Send feedback is entirely optional — nothing is collected unless you tap Send.

3. What we do not collect

4. Where data is processed

Diagnostic and voice-synthesis requests are processed by Google Cloud, and entitlement records are processed by RevenueCat. These services may store and process data in regions outside South Africa, including the European Union and the United States. We rely on those providers’ standard contractual safeguards for cross-border transfer under POPIA and equivalent frameworks.

5. How long we keep things

6. Your rights

Under POPIA — and equivalent rights under the GDPR if you are in the EU/UK — you can ask us to:

Because Rallyo runs without user accounts, the data on your device is in your hands directly: clear it from Settings or uninstall the app. For the server-side match data described in §2.2 and §2.3, Settings has a Delete cloud match data option that removes your shared matches and your cloud archive from our servers immediately — no email required. Settings also has a Request data deletion option that opens a pre-filled email with your anonymous identifier, for anything the in-app deletion doesn't cover. One honest caveat: the identifier is per-install, so if you uninstall the app before deleting, we can no longer tell which server records were yours — delete first, uninstall second. For anonymous diagnostics that we cannot tie back to you, the most reliable way to opt out is to disable the relevant data sharing in your operating system's privacy settings.

7. Children

Rallyo is not directed at children under 13. We do not knowingly collect information from children. If you are a parent and believe your child has used the app in a way that requires us to act, please contact us.

8. Third-party services we rely on

9. Changes to this policy

If we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, surface the change inside the app. Your continued use of Rallyo after a change means you accept the updated policy.

10. Contact

Questions or requests: support@rallyo.co.za.