Privacy Policy
Effective Date: September 9, 2026
SSP1 Labs LLC, an Arizona limited liability company ("we", "our", or "us"), operates the Rally Study mobile application ("Rally" or "the App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.
1. Information We Collect
Account Information
- Email address (used for account creation and login)
- First and last name
- Username
- Display name
- Account identifier (a unique ID generated when you create your account, used internally to associate your data with your profile)
Profile Content
- Profile photo (optional — only collected if you choose to upload one; stored on our servers and associated with your account)
- Bio (optional)
- Custom timer photo backgrounds are processed and stored locally on your device, not uploaded to Rally's servers by this feature. Your account stores the cosmetic selection and access entitlement. Unlike a profile photo, your timer background is not displayed to other users.
Usage Data
- Study sessions, including start and end times, credited duration, pauses, recorded interruptions, and session outcomes where available
- Tasks, study goals, schedules, study-plan preferences, and grades you choose to enter
- Study totals, streaks, Focus Points, cosmetic selections, and the records used to calculate study reports and estimates
- Referral claims and rewards, onboarding answers, and paywall feedback you choose to provide
- Class enrollments
- Leaderboard rankings
- Selected university
Location
- Location is optional. Rally uses your precise location to check whether you are near a supported campus study spot. This requires enabling Location public in Rally's Settings and granting iOS location permission. Location sharing is off by default for accounts created after this default was introduced on September 9, 2026. Existing accounts retain their saved choices.
- When checks happen. Rally requests While Using the App permission, not Always permission. Once enabled and permitted, checks begin when you enter the App and repeat periodically while it is open and no study timer is running. Rally does not monitor background geofences or track your movements while the App is closed.
- How verification works. Precise location samples, accuracy information, and sample times are sent to our verification service to determine whether you are near a mapped building. Your floor, where applicable, is selected manually; GPS does not verify which floor you are on. Verification depends on location accuracy and is available only at supported sites.
- What we store. Raw GPS samples are not saved in Rally's application database tables. We do store verification records, the selected building and floor where applicable, and their association with your account and study session. Past sessions can therefore retain study-place information. These are session-location records, not a continuous route or movement history. Technical service logs are handled as described below.
- During a session. A verified place represents where the session started. Rally does not continuously check whether you remain there while the timer runs. Starting a timer does not wait for a new GPS check; when a verified spot is unavailable, Rally can use your remembered Home or Somewhere else choice.
- What others see. Campus-map visibility requires both Location public and Timer public to be on and is subject to the App's blocking controls. Other users may see your study place and activity, not your exact GPS coordinates. A Friends filter changes what you view; it does not make your own shared location friends-only.
- Home and Somewhere else. These are manual labels, not requests for your home address or its coordinates. Neither appears on the campus map. The label may appear with your shared study activity when your relevant visibility settings allow it. Your chosen fallback is remembered so you do not need to select it for every session.
- If you decline. You can use core timer and task features without location permission. Campus spots remain unavailable for verified selection, while Home and Somewhere else remain available. Verified campus presence requires permission and a successful location check.
- Turning it off. In Rally → Profile → Settings, turning Location public off stops detection and removes your campus-map presence. Turning Timer public off also hides campus-map presence. You can revoke iOS permission in Settings → Privacy & Security → Location Services → Rally. Revoking device permission stops future checks; it does not delete past session-location records. Use Rally's sharing controls to remove existing map presence.
Social Data
- Friend connections
- Chat messages sent within the App
Optional Calendar Connections
If you use calendar or reminder features, Rally uses the access you grant to create and manage scheduled study entries. These entries may contain task names, class details, dates, durations, and links back to Rally. If you connect an available third-party service such as Notion or Google Calendar, that service receives the entries you choose to send. Calendar connection credentials are stored on your device. Disconnecting a service does not necessarily remove entries already saved with that provider.
Purchase & Subscription Data
- Records of in-app purchases you make (Rally Pro subscription and Focus Point top-ups), including subscription status, renewal dates, product identifiers, and transaction identifiers. These records can be associated with your Rally account.
- Payment is processed entirely by Apple through the App Store — we never receive or store your credit card number or billing details. We use RevenueCat to manage and validate purchases on our behalf.
Diagnostic & Device Data
- Crash reports, performance measurements, and error diagnostics collected via Sentry to help us find and fix bugs. They may include device model, operating system and app version, diagnostic identifiers, timestamps, and app state. Diagnostics are not necessarily anonymous, and are not used for advertising. Rally does not enable Sentry session replay, screenshot attachments, or view-hierarchy attachments.
- Technical records used to operate, secure, and troubleshoot our services may include IP addresses, request timestamps, and error or delivery information. Providers handle service logs under their applicable configurations and retention practices.
- Study diagnostics are recorded locally for troubleshooting. If you choose to share a diagnostics report, the report can include account and session identifiers, event times, timer state, and device information. Sharing that report is separate from automatic crash reporting.
- Push notification token (only if you enable notifications) so we can send you study reminders and friend activity alerts. You can disable notifications at any time in your device settings or in the App.
Authentication Emails and Support
Supabase and our email provider, Brevo, process your email address and authentication emails to deliver signup verification and password-recovery codes. Email-service records can include delivery, bounce, and other status events, including recorded opens or clicks where enabled. If you contact support, we receive the message and any attachments or diagnostic reports you choose to send.
Guest Users
If you use Rally as a guest, your temporary guest session is stored locally on your device and expires at midnight. Guest use does not create a registered Rally account. Automatic crash reporting and technical network processing can still occur while using the App as a guest, as described above.
Advertising and Tracking
We do not carry advertising SDKs, we do not track you across other apps or websites, and we do not build advertising profiles. Service-provider processing, sharing with other users, optional connections, and other disclosures are described in sections 4 and 10.
2. How We Use Your Information
- To provide and maintain the App's core features (timer, leaderboards, classes, social)
- To display your profile and study activity to friends and classmates (based on your privacy settings)
- To calculate and display leaderboard rankings
- To deliver chat messages between you and your friends
- To prepare a nearby study place and verify a session's starting building where you have enabled the feature and granted location permission
- To provide study reports, adaptive plans, and task-duration estimates based on your recorded study activity and preferences
- To deliver authentication emails, manage purchases and referral rewards, and provide customer support
- To understand product use and feedback, improve the App, and prevent abuse or duplicate study credit
- To diagnose crashes and fix defects
3. Legal Bases for Processing
If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases: to perform our contract with you (running your account and the App's core features); with your consent (location detection, push notifications, and optional profile content, each of which you can withdraw at any time); and for our legitimate interests in keeping the App secure, diagnosing defects, and preventing abuse and fraudulent study claims.
4. Data Sharing
We do not sell your personal information, and we have not sold or shared personal information for cross-context behavioural advertising in the preceding twelve months. We share data only in the following cases:
- Other users: Your display name, username, study time, and class membership may be visible to other Rally users depending on your privacy settings. Study-place visibility follows your saved location and timer sharing settings, as explained in section 1. New-account location sharing defaults off; existing accounts retain their choices.
- Service providers: We use Supabase (authentication and data storage), Brevo (authentication-email delivery), RevenueCat (purchase management), Sentry (diagnostics), and Expo and Apple (app and notification services). They process the information needed to provide those services. See section 10.
- Services you choose: If you connect a calendar service, open directions in a maps app, or share content or diagnostics, the selected service or recipient receives the information needed for that action and handles it under its own privacy practices.
- Legal requirements: We may disclose information if required by law or to protect our rights.
- Business transfer: If SSP1 Labs LLC is acquired or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
5. Your Privacy Controls
Within the App, you can control:
- Whether your timer activity is public or private
- Whether Location public is on; turning it off also stops location detection and removes campus-map presence
- Whether your class enrollments are visible to others
These controls are in Profile → Settings. Location public starts off for new accounts; existing accounts retain their saved choices. Timer and class visibility have their own controls. A visibility change is not a request to delete previously stored records.
At the device level, you can grant or revoke location, photo, calendar, reminder, and notification permissions where applicable in iOS Settings. You can also choose whether to connect external services or share a diagnostics report.
6. Data Storage, Security, and International Transfers
Your data is stored on secure servers provided by Supabase. We use industry-standard encryption for data in transit (TLS/SSL) and implement row-level security policies to protect your data at rest. Authentication tokens are stored on your device.
We operate from the United States. Information may be processed in the United States and other countries where our service providers operate. Where applicable law requires safeguards for international transfers, we use the applicable contractual or other legally recognized safeguards.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Saved study-place associations are included in your account's study records and are subject to this retention policy. Crash diagnostics, email-delivery records, and technical logs are subject to the relevant provider retention settings and applicable legal requirements. Custom timer photos and local diagnostic records are stored on your device; copies you share or save through another service are controlled separately by that service or recipient.
8. Your Rights
Depending on where you live, you have the right to access the personal data we hold about you, to correct it, to delete it, to obtain a copy in a portable format, to object to or restrict certain processing, and to withdraw consent you previously gave. If you are in California, you also have the right not to be discriminated against for exercising these rights.
You can request deletion of your account and its associated data within Profile → Settings → Delete Account. For anything else, email support@rallystudy.app and we will respond within 30 days at no charge. You do not need Rally Pro to exercise applicable privacy rights; paid study-log export is a separate product feature. If you are in the EEA or UK and believe we have handled your data improperly, you may also lodge a complaint with your local supervisory authority.
9. Children's Privacy
Rally is designed for college students and is not directed at children under 13. We do not knowingly collect information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, email support@rallystudy.app.
10. Third-Party Services
Optional calendar connections send selected study entries to the provider you connect, such as Notion or, where available, Google Calendar. Those providers' own privacy terms also apply. The App does not automatically connect these accounts.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy within the App or via email, and by updating the effective date above.
12. Contact Us
If you have questions about this Privacy Policy, or want to exercise any of the rights described in section 8, contact us at:
SSP1 Labs LLC
4450 S James Pl
Chandler, AZ 85248
United States
Email: support@rallystudy.app
© 2026 SSP1 Labs LLC. All rights reserved.