Privacy Policy

Effective date: 1 October 2026

RallyRoom ("RallyRoom", "we", "us") is an app for booking racket-sport courts, joining open play, matches, events, tournaments and leagues, managing club memberships and coaching, and connecting with other players. RallyRoom is operated by BAD Solutions (Bravo Automations & Development IT Solutions), a sole proprietorship registered with the Department of Trade and Industry of the Philippines, [your business address].

This policy explains what personal information we collect, why, who can see it, and the choices and rights you have. It applies to the RallyRoom mobile apps and the website at rallyroom.app. We process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

1. Who can have an account

• You must be 18 or older to have your own account.
• Players under 18 can use RallyRoom only through a profile created and managed by a parent or legal guardian from the guardian's own account. A minor's profile has no login of its own. The guardian gives consent for the minor's participation and for us to process the minor's information, books and pays on the minor's behalf, and receives the minor's notifications.

2. What we collect

Information you give us

• Account details: your name, email address, password (stored only in hashed form by our authentication provider; we never see it), date of birth (to confirm you're 18+), preferred language (English or Filipino), and whether you're a player, a parent or guardian, a venue owner, or a coach.
• Sign in with Google or Apple: if you use one of these, we receive your name and email address from that provider. With Apple you can choose to hide your email; we then receive a private relay address instead. We don't receive your Google or Apple password.
• Waiver and consents: the date and version of the liability waiver you accepted and, for a guardian, the date you gave consent for a minor.
• Minor profiles (created by a guardian): the minor's name and date of birth.
• Sports profile: the sports you play, the skill level you choose, ratings calculated from recorded match results, and match scores.
• Activity in the app:
  • bookings;
  • memberships;
  • event, tournament and league registrations;
  • player matches you organise or join;
  • open-play queue positions;
  • arrival marking;
  • and your cancellations, including whether a cancellation was within 24 hours of the start ("late cancellation").
• Payment status, not payment details: whether something you owe has been marked as paid, and the amount. See section 4.
• Content you post:
  • messages and images in event and match chats (for example a screenshot of a payment);
  • reviews of venues;
  • "find a partner" posts;
  • reports you file about content or players.
• Connections and blocks: the players you connect with by scanning their RallyRoom QR code, and players you block.
• Venue owners and coaches:
  • venue details (name, address, courts, opening hours, prices, policies);
  • membership tiers;
  • events;
  • coaching rates and availability;
  • staff you add.

Information collected automatically

• Location (optional): if you allow it, the app uses your device's location while you're using it to show courts and events near you, ranked by distance. Your location is sent with that search and is not stored by us. You can turn location off at any time in your device settings and search by name or area instead.
• Activity timestamp: when you last opened the app. For venue owners this is used to check whether a venue with unconfirmed payments is still being looked after (see section 3).
• Technical data: basic information needed to run the service securely, such as sign-in session data and server logs kept by our hosting providers.

Images you post in chat are re-encoded on your device before upload, which removes embedded metadata such as the GPS location a camera may have recorded.

We don't currently use analytics or advertising trackers, and we don't currently show ads. If we introduce advertising (for example banner ads on browse screens), we'll update this policy before it starts and ask for any consent the law or the app stores require.

3. How we use your information

• To provide the service: create and secure your account, confirm your email with a one-time code, let you book courts and join events and matches, run queues and brackets, manage memberships and coaching, and show you courts near you.
• To protect minors: enforce the 18+ rule, keep minors' profiles under their guardian's control, and limit what others can see about a minor (see section 5).
• To keep everyone informed: send in-app notifications about your bookings, registrations, matches, payments being confirmed, and cancellations.
• To keep venues reliable: if a venue leaves several payments unconfirmed for days, or leaves one unconfirmed while its owner is away from the app, we temporarily hide it from search and stop new bookings until the owner catches up.
• To keep the community safe: review reports, act on abuse, and enforce blocks.
• To communicate with you: send account emails such as sign-up and password-reset codes.
• To comply with the law and to establish, exercise or defend legal claims.

We rely on your consent (or your guardian's consent for a minor), on what's necessary to provide the service you asked for, and on our legitimate interests in running a safe and reliable service, as the Data Privacy Act allows.

4. RallyRoom does not process real-world payments

RallyRoom does not collect, hold, transfer or refund payments for courts, sessions, memberships, events or shared matches. These payments are made directly between users: between you and the venue, coach, event organizer or match organizer, by cash, GCash, bank transfer or any other method you agree between yourselves, outside the app.

When the person you paid marks your booking or share "paid" in the app, that only records what they confirmed. RallyRoom is not a party to payments made outside the app and can't refund them or resolve disputes about them. If something you paid for is cancelled, please contact the organizer directly. We never ask for or store your bank, card or e-wallet details for these payments.

5. Who can see your information

• Other players can see your display name, the sports you play, your skill level and ratings, and your participation in public events, matches, brackets and standings.
  • Your email address, date of birth and phone number are never shown to other players.
• People in the same match, event or chat see what's needed to play together: names, who has joined, and chat messages and images.
  • Images posted in a chat can be seen only by people who can read that chat.
• Venues, event organizers and match organizers you book or join with see your name, your booking or registration, what you owe them, and whether you've paid.
  • When reviewing a payment you owe them, they can see how many late cancellations you have. They see the count, not your full history.
• Minors:
  • A minor's name is shown only to the people playing in the same match or event (the organizer, the players and their guardians). It's shown as their first name with their guardian's name, since the guardian is the contact.
  • Anyone else viewing a public match sees only "Junior player".
  • Minors can't connect with strangers by QR code, can't post on the partner board, and can only read event chats.
• Guardians see and manage everything for the minors they're responsible for.
• Service providers process information for us under contract, only to provide their service:
  • Supabase: database, authentication, file storage and hosting. Data may be stored on servers outside the Philippines.
  • Google: Sign in with Google, and the Places/Maps services used when owners register a venue's address.
  • Apple: Sign in with Apple.
  • Resend: delivery of account emails.
  • Cloudflare: hosting of the rallyroom.app website (Cloudflare Pages), and the domain's DNS and email forwarding.
  • Expo: app builds and updates.
• Legal requirements: we may disclose information if required by law, court order or a government authority, or to protect someone's safety.

We don't sell your personal information.

6. How long we keep information

We keep your information while your account is active.

You can delete your account at any time in the app (Settings › Delete account). When you do:

• your login, email address, date of birth, connections, blocks, ratings, reviews, partner posts and notifications are deleted;
• your chat messages are removed;
• your upcoming bookings, registrations and match places are cancelled, and the people involved are notified;
• profiles of minors you manage are deleted the same way.

Some records are shared with other people and stay so that their history remains accurate: a venue's past bookings, a tournament bracket, league standings. In those records your name is replaced with "Deleted player". The only exception is a chat message that is under an open safety report, which we keep until the report is resolved. Images you posted in chats are removed from our storage [within X days].

If you own a venue or coach, you'll first need to finish or cancel what other people have booked with you. You can make your venue inactive so nothing new is booked meanwhile.

Subscriptions bought through the App Store or Google Play are managed by Apple or Google, and deleting your account doesn't cancel them. Please cancel them in your store settings.

We may keep limited information longer where the law requires it, or to resolve disputes and enforce our terms.

7. Your rights

Under the Data Privacy Act you have the right to:

• be informed;
• access your personal information;
• object to processing;
• have inaccurate information corrected;
• have your information erased or blocked;
• receive a copy of it in a portable format;
• claim damages;
• file a complaint with the National Privacy Commission (privacy.gov.ph).

You can edit most of your information in the app and delete your account yourself. For anything else, contact us (section 10). A guardian can exercise these rights for a minor they manage.

8. Security

We use industry-standard measures to protect your information, including:

• encrypted connections;
• hashed passwords;
• email verification codes;
• access rules in our database that limit each person to the data they're allowed to see.

No system is perfectly secure. If a breach affecting your personal information occurs, we'll notify you and the National Privacy Commission as the law requires.

9. Changes to this policy

We'll post any changes here and update the effective date. If a change is significant, we'll tell you in the app before it takes effect.

10. Contact us

Data Protection Officer: [your name] Email: privacy@rallyroom.app Address: BAD Solutions, [your business address], Philippines