Privacy policy

Information we collect

• Account information. When you sign in, we store your email address and, if you add them, a display name and avatar. Sign-in and accounts are handled through our infrastructure provider, Supabase.
• Trip content. What you and the crew add to a trip: trip details, who’s in, poll votes, budget figures, preferences, itinerary, and stays. Budget figures are only ever shown to the crew as a range — never as one person’s amount — and only once at least three people have shared numbers.
• Technical data. Basic log and device information needed to operate and secure the service. Rally does not use third-party advertising or analytics trackers.

How we use information

• To operate the service — create trips, coordinate the crew, and show who’s in.
• To generate the brief and trip recommendations.
• To send transactional email such as sign-in links and trip invites.
• To keep the service secure and prevent abuse.

We do not sell your personal information.

AI features

To generate the brief and recommendations, we send the relevant trip details to our AI providers, including Google’s Gemini models. We send only what is needed to produce the output.

Service providers we share with

We rely on a small number of providers that process data on our behalf, under their own terms, and only receive what they need to do their job:

• Supabase — database, authentication, and storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Google — brief generation (Gemini) and maps.

Data retention and deletion

We keep your information while your account is active. You can ask us to delete your account and associated data at any time by emailing niketanand7@gmail.com. We will remove it, except where we are required to retain certain records.

Security

Data is encrypted in transit, and our infrastructure providers encrypt data at rest. Access to trip data is restricted row by row, so the crew on a trip can only see that trip. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

Children

Rally is not directed to children under 13, and we do not knowingly collect information from them.

Your choices and rights

You can access, update, or delete your information by signing in or emailing us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date shown at the top of this page.

Contact

Questions about this policy or your data? Email us at niketanand7@gmail.com.