RallyAce Privacy Policy
RallyAce ("we", "us") is a tennis partner-matching app operated by Atalaz LTD (company number 17394628), trading as RallyAce, based in the United Kingdom. This policy explains what personal data we collect, why, and the rights you have over it. It applies to the RallyAce mobile app and related services.
We are the "data controller" for the personal data described here under UK data protection law (UK GDPR and the Data Protection Act 2018).
1. Data we collect
Account data — when you create an account: your email address and a password (managed by Google Firebase Authentication; we never see or store your password itself), and a display name you choose.
Profile data — what you add to your player profile: LTA rating, home area, availability (days and times you typically play), preferred formats (singles/doubles), an optional profile photo, an optional LTA membership number, your date of birth (mandatory — you must be 16 or over to use RallyAce; we never show your date of birth to anyone, including other players), gender (mandatory — used for doubles pairing and same-gender partner preference, and as a trust and safety signal), and up to 5 preferred venues or clubs you tell us you play at (used to help match you with players near your regular courts; not currently shown to other players). If you switch on "Show age range on profile" (Settings — off by default), we show other players an age band derived from your date of birth, such as "30s"; this is never shown unless you turn it on.
Location data — your precise coordinates (latitude/longitude), captured when you set your location during onboarding or in Edit Profile, are stored on your profile together with two geohash values derived from them (a coarser ~4.9 km cell and a finer ~1.2 km cell) so nearby players can be shown to you and your profile can be shown to nearby players. Each update to your location overwrites the previous value — we do not keep a log of your past locations. Separately, when you create a match we may read your device location once to attach a location to that specific match, shown to other players browsing open matches nearby.
Activity data — matches you create, accept, cancel, complete or miss; ratings you give and receive after matches (reliability and sportsmanship scores and optional comments); your reliability score and no-show count (computed by us from match outcomes); messages you send in match chats; players you block and reports you submit.
Device and usage data — a push notification token (if you enable notifications), app usage analytics (Google Analytics for Firebase), crash reports (Firebase Crashlytics), and app integrity attestations (Firebase App Check). Analytics and crash data are collected in aggregate form to keep the app working and improve it.
We do not collect: precise background location, contacts, health data, or advertising identifiers. We show no third-party advertising.
2. Why we use your data (legal bases)
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the service — matching you with nearby players, organising matches, chat | Account, profile, location, activity | Performance of a contract |
| Age verification — confirming you meet RallyAce's 16+ minimum age | Date of birth | Performance of a contract |
| Partner-matching and safety signals — showing your gender to other players, for doubles pairing, same-gender partner preference, and as a trust and safety signal | Gender | Performance of a contract; legitimate interests (trust and safety) |
| Showing your age band to other players, if you choose to | Date of birth (only an age band, e.g. "30s", is shown to others, and only if you opt in) | Consent (off by default; you can turn it on or off in Settings) |
| Reliability and safety features — reliability scores, no-show records, block/report | Activity | Legitimate interests (keeping the community trustworthy and safe) |
| Push notifications — match requests, reminders, messages | Device token | Consent (you can decline or disable at any time) |
| App stability and improvement | Usage, crash data | Legitimate interests |
| Preventing abuse — verifying requests come from a genuine app | Integrity attestations | Legitimate interests |
3. Who sees your data
Other users see your display name, photo, LTA rating, home area, availability pattern, reliability score, match formats, and gender — that is the point of a matching app. If you have switched on "Show age range on profile" (off by default), they also see your age band (e.g. "30s"). They do not see your email address, date of birth, precise location, LTA membership number, or preferred venues.
Service providers (processors) — we run on Google Cloud Platform and Firebase (Google Ireland Ltd / Google LLC): authentication, database, hosting, push notifications, analytics, and crash reporting. Google processes data on our instructions under its Cloud Data Processing Addendum. Data may be processed outside the UK (including in the EU and US) under appropriate safeguards (UK-approved standard contractual clauses / adequacy).
We do not sell your personal data, and we do not share it with advertisers.
We may disclose data where required by law or to protect the rights and safety of our users.
Reports and account restriction. If another player reports you, we review it and may restrict your account's access to the app while we do. For reports that a photo may depict a minor, we restrict access automatically and immediately, before human review, given the safety stakes — you can still export your data and delete your account while restricted, and we email you separately from the app to explain and to tell you how to contact us if you believe it was a mistake. We aim to complete a first human review within 24 hours.
4. How long we keep it
Your data is kept while your account is active.
Pre-launch test period. RallyAce is currently open only to a private test cohort, not the general public. Match records, ratings, reliability scores, no-show counts, and messages created during this test period are provisional and will be deleted outright — not merely hidden — when RallyAce opens to the public, regardless of whether you have deleted your account. We do this because the test period exists to build and calibrate the app, including recalibrating the scoring algorithm itself using this cohort's data, and because a small test cohort isn't representative of the eventual player base. This wipe happens at RallyAce's discretion, which may be before or at public launch, and affects test-period activity data only — it does not affect your account credentials.
When you delete your account (Settings → Delete account):
- Your display name, email, photo, bio, LTA rating, date of birth, gender, precise location and location cells, and push notification tokens are permanently deleted immediately.
- Your account record is kept as an inactive shell (marked deleted, with no personal details attached) so that other players' match and rating history is not left pointing at a missing account.
- Match records, ratings, and messages you sent or received are retained as-is — they are not currently deleted or anonymised, and remain linked to your (now-anonymous) account ID. If a message you typed contains personal information (for example, a phone number), that text is not automatically removed.
- System notifications and internal deduplication records expire automatically. Crash and analytics data are retained per Firebase's standard retention periods.
If you want match, rating, or message content removed beyond what's described above, contact us and we will consider your request on a case-by-case basis.
Reports (including ones made about you) and any resulting account-restriction decision are retained for as long as needed to investigate, defend, or refer the matter — including to UK safeguarding bodies where legally required — and are not deleted by your own account deletion request.
5. Your rights
Under UK GDPR you have the right to:
- Access / portability — export all personal data we hold about you directly in the app (a machine-readable file), or by contacting us.
- Rectification — correct your data in the app at any time (Edit profile).
- Erasure — delete your account and personal details in the app (Settings → Delete account). Your profile and personal details are removed immediately; see "How long we keep it" above for what is retained (match, rating, and message records) and how to request further removal.
- Object / restrict — object to processing based on legitimate interests.
- Complain — to the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.
To exercise any right you cannot action in-app, contact us at the address below.
6. Children
RallyAce is for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child under 16 has created an account, contact us and we will delete it.
7. Changes
We will post any material changes to this policy here and, where appropriate, notify you in the app. Continued use after changes take effect constitutes acceptance.
8. Contact
Atalaz LTD, trading as RallyAce
Registered in England & Wales, Company No. 17394628
Registered office: 4 Eton Park, Preston, PR2 9NL
Email: support.rallyace@atalaz.com