Privacy Policy

This Privacy Policy explains how Jalal Zailachi (an individual sole proprietor, “RallyLink,” “we,” “us”) collects, uses, and protects your personal data when you use rallylink.site and the RallyLink Service. We are the data controller. If you have questions, contact support@rallylink.site.

1. Data we collect

• Account data — your email address, a username, and password credentials (passwords are handled by our authentication provider; we never see them in plain text).
• Profile data — optional full name, bio, and avatar photo you choose to add.
• Activity data — activities you create or join, including titles, descriptions, photos, and the approximate location (place name and coordinates) you set for an activity.
• Messages — messages you send to other members of an activity.
• Notification data — if you enable browser notifications, the push subscription your browser generates (an endpoint URL and keys).
• Usage & device data — basic logs such as IP address, browser type, and actions taken, used for security, rate-limiting, and debugging.
• Payment data — if you subscribe to Pro, payment is processed by our third-party payment provider. We receive your subscription status but not your full card details.

RallyLink sets the location of an activity; we do not continuously track your device’s live location.

2. How we use your data

• to create and operate your account and provide the Service;
• to show activities, connect hosts and participants, and deliver messages;
• to send you notifications you’ve opted into (e.g. when a host accepts your request);
• to process Pro subscriptions through our payment provider;
• to keep the Service secure, prevent abuse, and enforce our Terms;
• to comply with legal obligations.

3. Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (to provide the Service you signed up for), consent (for optional browser notifications, which you can withdraw at any time), legitimate interests (to keep the Service secure and improve it), and legal obligation where required.

4. Who we share data with

We do not sell your personal data. We share it only with service providers that help us run RallyLink, under appropriate safeguards:

• Supabase — authentication, database, and file storage hosting.
• our third-party payment provider — payment processing and billing as Merchant of Record for Pro subscriptions.
• Oracle Cloud Infrastructure — server hosting for our application and API.
• Browser push services (e.g. Google, Mozilla, Apple) — to deliver notifications you enable.
• Monetag— advertising shown to visitors and to members on the free plan. We don’t send them your account details, messages, or the activities you join; they collect device and browsing signals directly through their own cookies, as an independent controller. Pro members are never shown ads. See our Cookie Policy for details and how to stop them.

We may also disclose data where required by law or to protect the rights, safety, and security of our users and the Service. Other users can see the profile, activities, and messages you choose to share within the Service.

5. Cookies & local storage

We use only the storage necessary to run the Service — for example, to keep you signed in and remember your theme and preferences. See our Cookie Policy for details.

6. Data retention

We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, email support@rallylink.site. You may also lodge a complaint with your local data-protection authority.

8. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

10. Security

We use encryption in transit, access controls, and reputable infrastructure providers to protect your data. No system is perfectly secure, but we work to safeguard your information and will notify you and the authorities of a breach where legally required.

11. Changes

We may update this Policy; we’ll revise the “Last updated” date and, for material changes, take reasonable steps to notify you.

12. Contact

Data controller: Jalal Zailachi, Av. Allal Ben Abdellah N°5, Morocco. Email support@rallylink.site.