Privacy Policy

RallyBook is an independent product by Petro ("the operator"). The legal entity, address, and data-protection contact will be listed here once finalised. Until then, please reach hello@rallybook.app for any privacy-related inquiry.

From riders

• Authentication identity: your email and display name from Sign in with Apple, Google, or email. We never see your password.
• Device fingerprint: an opaque per-install identifier used to enforce per-device entitlement limits and to render a short human-readable code (e.g. XK4F-MP9Q) so the organizer can recognise you in their approval queue.
• Country flag: the ISO country code you picked in the app settings, shown next to your bib in the organizer's participants list.
• Event entitlement and join records: which events you joined, when, and via which event password or invitation.

From organizers

• Organization name, slug, and members.
• Event metadata: name, dates, location, type, banner image.
• Uploaded roadbook files (GPX, .cap). These are encrypted at rest with AES-256-GCM before being stored in Cloud Storage; the decryption key per file lives in a separate Firestore document behind strict access rules.
• Participant lists you create, including names, bibs, optional emails, and optional pre-list device codes you assign.
• (Future, when billing turns on:) Stripe customer ID and billing metadata. RallyBook never sees full card numbers — payment capture happens directly between your browser and Stripe.

• To run the service: authentication, access control, DRM key delivery, transactional emails.
• To enforce entitlement rules (event windows, per-device caps).
• To bill organizers (only after billing turns on).
• To debug failures. Cloud Functions logs may contain user IDs and event IDs but never roadbook contents or passwords.

We do not sell, rent, or trade your data. We do not embed third-party advertising tracking. We do not run general-purpose analytics tracking like Google Analytics on rallybook.app.

• Google Firebase / Google Cloud — hosts our Firestore database, Cloud Storage, Cloud Functions, and Auth. Region: europe-west1 (Belgium). Google's data-processing terms govern.
• Apple — when you sign in with Apple, Apple authenticates you and shares your email (or a relay address) and display name with us.
• Google — when you sign in with Google, Google shares your email and display name with us.
• Event organizers — when you join an event, the organizer sees your display name, email, device code, and country flag in their participants list.
• Stripe — only once billing turns on, and only for organizers who subscribe. Stripe never sees rider data.

All storage and processing happens in the European Union (Google Cloud's europe-west1 region, Belgium). If you sign in with Apple or Google from another region, those identity providers may briefly process your authentication request in their own regions per their respective privacy policies.

• Active accounts and their data: for as long as your account exists.
• Entitlements and event history: retained after the event ends as a personal history (shown as "Ended" cards in the library) so you can see what you've done. Deleted with your account.
• Encrypted roadbook files: deleted when the producer deletes the roadbook or the parent event.
• Cloud Functions logs: retained for 30 days per Google's defaults.

You have the right to access, correct, export, or delete your personal data. Email hello@rallybook.app with your request and we'll respond within 30 days. For account deletion you can also sign in to the iOS app and tap "Delete account" once that flow ships; until then, email us.

The rallybook.app website uses a small number of first-party cookies / browser storage entries:

• Authentication — Firebase Auth stores your session token so you don't have to sign in again on every visit. Strictly necessary; not optional.
• Cookie banner choice — your accept / reject choice on the consent banner is stored in localStorage so we don't ask again.

No analytics or advertising cookies are set today.

RallyBook is not aimed at children under 16. If you believe a child has created an account, email us and we'll delete it.

We'll post a revision date at the top whenever we change this policy. Material changes that affect how we use your data will be announced by email and in the app at least 30 days before they take effect.

Privacy questions, deletion requests, or general feedback: hello@rallybook.app.