Privacy Policy

This Privacy Policy explains how OUTRALLY LLC ("OutRally," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use outrally.com, the OutRally native iPhone app, Gearave at gearave.com or within the OutRally app, and related services that link to this Policy (collectively, the "Services").

OUTRALLY LLC is the controller of personal information covered by this Policy. The OutRally Admin Console is an internal operations system, not a consumer product. This Policy does not govern third-party services that provide their own privacy notices.

The information we process depends on which features you choose to use and may include:

• Account and contact information: name, username, email address, authentication details, including your Apple ID sign-in details if you choose Sign in with Apple (Apple may give us a private relay email address instead of your real one), profile image, account preferences, and launch-list email and optional city.
• Player and badminton information: skill and player profile details, Home Venue, venue interactions, availability or activity you choose to publish, plans, event participation, check-ins, points, awards, and activity history.
• Community content: Moments, posts, photos, videos, comments, messages, chats, contact relationships, and other content you submit or exchange.
• Location information: approximate location, and precise location only when a feature requests and uses it with your permission, such as nearby discovery or a user-initiated location feature. A Home Venue or venue interaction may also reveal a general place associated with you.
• Gearave information: listings, product and gear details, seller or storefront information, saved items or searches, wanted requests, offers, transaction and fulfillment details, meetup-related information, and marketplace messages.
• Communications: support requests, reports, feedback, survey responses, and other communications with OutRally.
• Device, log, and security information: device and app information, IP address, timestamps, pages or features used, crash and diagnostic data, security events, and similar technical records used to operate and protect the Services.

We may receive information directly from you, automatically from your use of the Services, from other users when they interact with you, or from service providers and third parties involved in a feature you request.

R20 recordings and game information. When you use R20, we process the video you record, sound captured through your microphone, preview images, shot counts, game results, the players in the game, and related information. Unpublished recordings may be kept as drafts on your device or on our servers until they are posted or expire.

Age information. We ask for your birthday when you create an account, or once if your account has no age information yet. Your birthday is used on your device only to work out your age group (under 13, 13–17, or 18 or older); we do not store your date of birth. Where available, we first request an age range from Apple's age-range feature and use it instead of asking you. We store only your age group, whether it came from Apple, from you, or from OutRally support, and when it was recorded. We keep a record of changes to your age group.

Posting confirmations. When you post an R20 recording, you confirm that everyone in the video is at least 13 years old and has agreed to be filmed.

Player Card and R20 Score. If you fill in your Player Card, we store your answers: how many shots you usually rally, the formats you play, your goal, the days and times you usually play, and your languages. We also calculate an R20 Score — a level score based on your verified R20 results — together with its tier and the boxes it covers.

Family links. If a parent or guardian links their account to a teen's account, we store the link, who created it, and when.

App integrity information. When you use R20 recording features, Apple's App Attest may provide app-specific cryptographic information that helps us check that requests come from a genuine OutRally app.

We use personal information to:

• provide, maintain, personalize, and improve the Services;
• create accounts, authenticate users, and protect account access;
• enable profiles, contacts, chats, Moments, community, and other social features;
• support venue discovery, Home Venue, availability, and venue interactions;
• support plans, events, check-ins, points, awards, and related activity;
• operate Gearave listings, discovery, offers, transactions, and marketplace features;
• detect fraud, abuse, unsafe conduct, and security threats, and enforce our rules;
• respond to support, rights, safety, and account requests;
• send service messages and, with appropriate choice, launch or product updates;
• understand feature performance through analytics and product research; and
• comply with law, resolve disputes, and protect users, OutRally, and others.

We use R20 recordings and game information to let players record rallies, count shots, verify results, run R20 rankings and rewards, and let players share recordings to Moments if they choose.

We use your age group to decide which OutRally experience applies to you, including whether you use OutRally Junior; who can find you, contact you, or see your content; which R20 rankings your results appear in; and whether you can use Gearave buying and selling, which is for users 18 and older.

We use your Player Card and R20 Score to show your level and to suggest players who may be a good fit for you. If you choose "Let players find me," other adult players can see your name, photo, R20 Score and tier, usual venues, usual playing times, formats and languages. They can't see your exact schedule or your live location. This setting is off by default.

Content safety. We use automated tools to help keep OutRally safe. Text you submit — such as posts, comments, messages, profile text and listings — may be checked by an AI moderation service before or after it is published. Content that breaks our rules may be blocked, hidden or sent to our team for review.

We use App Attest information only to check the authenticity of app requests associated with R20 recordings.

We do not use age information or App Attest information for advertising.

Where required, we rely on consent, performance of our agreement with you, compliance with law, or our legitimate interests in operating, securing, and improving the Services.

Certain user-initiated features may request access to your camera, photo library, location, or notifications. For example, you may choose a photo for a profile or listing, use location for nearby discovery, or enable notifications for messages and activity you choose to be notified about. We request these permissions only when relevant to the feature.

You can manage permissions in your iPhone settings. Disabling a permission may prevent the related feature from working, but it does not prevent you from using unrelated parts of the Services. OutRally does not automatically publish your current location.

Camera and microphone. R20 recording uses your device's camera and may capture sound through its microphone, including voices and background sounds. We ask for these permissions when you choose to record.

Save to Photos. Saving R20 recordings to your Photos library is on by default and can be turned off in Settings. We request add-only permission, which lets OutRally add recordings but does not let it browse or read your existing Photos library. Copies saved to Photos are managed in Photos; deleting an R20 or your OutRally account does not delete them.

Location in photos and videos. Photos and videos can contain the location where they were taken. OutRally removes this location information from photos and videos you upload.

The visibility of information depends on the feature and your settings or choices. Public profiles, Gearave listings, posts, Moments, event participation, points, awards, or similar community activity may be visible to other users or the public where the feature is designed for sharing. Availability and Plan to Play activity appear only when you choose to publish them and to the audience available in that feature.

Private messages and chats are not public. They are visible to their participants and may be accessed or preserved by OutRally when reasonably necessary to operate the feature, investigate a report, protect safety or security, enforce our Terms, or comply with law. Other people may save or share content they can see, so consider your audience before posting.

R20 recordings are used for rankings. When you post an R20, its recording and result can be viewed from the R20 rankings, by players helping to count shots, and on the profiles of the players in the game, subject to the protections in Section 9. Saving a recording as a draft does not make it visible to others.

Moments are optional. An R20 recording does not appear in the Moments feed unless the person who posted it chooses "Share to Moments." They can remove it from Moments at any time; this does not affect the ranking. R20 games that include a Junior player, or a player whose age group we don't know, can't be shared to Moments.

Not used for advertising. We don't use your R20 recordings in advertising or on OutRally's official social media accounts, and we don't feature R20 recordings on the outrally.com homepage.

R20 Score visibility. For adult players, your R20 Score and tier are shown on your profile by default; you can turn this off in Settings → Privacy. For Junior users and users whose age group we don't know, the R20 Score is shown only to accepted connections. A self-estimated level is never shown on your profile.

Tagged players. Any player tagged in an R20 can remove themselves from it. When they do, the R20 is also removed from Moments.

R20 recordings may include other people or their voices. Please respect other people's privacy and get any permission needed before recording or posting.

City and Home Venue. Your city and Home Venue are private by default. You can choose to show them in your privacy settings. Junior users can't make their Home Venue public.

We use service providers to perform functions such as hosting, databases, authentication, file storage, security, analytics, communications, and support. Our current implementation uses Supabase for database, authentication, and storage infrastructure. We use OpenAI to check text for safety (content moderation); we send the text itself, not your account details, and under OpenAI's API terms it is not used to train their models. We use Sentry to receive crash reports and diagnostic information from the app (such as device model, system and app version, and error details); it is set up not to store IP addresses. If you use Sign in with Apple, Apple provides the sign-in, and when you delete your account we ask Apple to revoke OutRally's access. Providers process information for us under appropriate contractual and operational controls.

When you open a map on outrally.com, your browser loads map images from OpenFreeMap, which receives your IP address as part of that request. We don't send your account details or exact location to the map provider.

We may disclose information:

• to service providers and processors supporting the Services;
• when you direct us to share it or use a public or collaborative feature;
• when reasonably necessary to comply with law, legal process, or government requests, or to protect rights, safety, integrity, and security;
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or transfer of some or all of our business, subject to applicable law; and
• in aggregated or de-identified form that does not reasonably identify you.

OutRally does not sell personal information for money. Where applicable law defines "sale," "sharing," or targeted advertising more broadly, we will provide any notices and choices required for the practices we actually conduct. We do not state that we share personal information for cross-context behavioral or targeted advertising when we do not engage in that practice.

We retain personal information for as long as reasonably needed to provide the Services, maintain an account, complete a transaction, preserve account and safety records, resolve disputes, enforce agreements, meet legal obligations, and protect the Services. Retention periods vary by the type of information and purpose. Backups and records needed for fraud prevention, safety, legal compliance, or legitimate business records may remain for a limited period after deletion.

You can delete your account at any time in the OutRally app: Settings → Account → Delete Account. You can also email support@outrally.com. You may request deletion of particular information by emailing us. Some content shared with others, incorporated into shared content or transaction records, or copied by another user may not be fully removable from every context. We may retain information where permitted or required by law and will explain material limitations when responding to a request.

Published recordings. We keep published R20 videos, including their audio, and their preview images until you delete the R20 or your account. When you delete an R20, we delete its video and preview files immediately. The post record is kept, marked as deleted, until your account is deleted.

Drafts. Drafts on your device stay there until you publish or delete them, or uninstall the app. Uploaded drafts that stay unpublished are removed by an automatic hourly cleanup after one hour. Drafts waiting for invited players may be kept for up to seven days.

Results and rankings. R20 result information (shot count, format, selected venue or city, video length, recording time, file fingerprints, tagged players and posting confirmations) is kept with the R20 record. R20 uses the venue or city you choose; it does not collect your device's location for the game. After a monthly ranking is finalized, its entries keep their rank, score and team code. If the underlying R20 is deleted, the link to it is removed. If a tagged player deletes their account, their name is removed from R20s posted by others.

Counting and Station records. Shot-count submissions are kept with the related R20. They are deleted if the person who submitted them deletes their account. OutRally Station game membership records are deleted when you delete your account.

Recording verification. One-time recording codes, server timing, device uptime and file fingerprints help us check that a recording was made live in the app. An unused code is valid for ten minutes. Verification data for a used code is kept with the R20 and deleted when your account is deleted. We keep the App Attest public key and counter until you delete your account; they contain no hardware or advertising identifiers.

Age information and family links. We keep your age group, its source, the time it was recorded, and the record of changes until you delete your account. We never store your date of birth or the raw response from Apple. If an account gives a birthday under 13, we keep only the fact that the account was frozen and when, until the account is corrected or deleted. Family links are deleted when either account is deleted.

Staff access records. When authorized staff view a Junior user's information for safety review, we keep a record of that access. The record is deleted when the Junior user's account is deleted.

Account deletion. When you delete your account, we delete your R20 videos and server drafts, the R20 records you posted, your count submissions, your Station records, your verification, App Attest and age records, and your family links. We keep a deletion log containing only a one-way hash of the account ID and the deletion time, for 35 days, so we can reapply the deletion if a backup is restored.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission, storage, or security is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur. You are responsible for safeguarding your credentials and notifying us of suspected unauthorized account activity.

Who can use OutRally. You must be at least 13 years old to use OutRally. If an existing account gives a birthday under 13, the account is paused right away: it can't be used, its profile and content are hidden from everyone, and we stop collecting new information. If the birthday was entered by mistake, the user can ask OutRally support to check and correct it. If it isn't corrected within 30 days, the account is deleted through our normal account deletion process.

OutRally Junior. Users aged 13–17 use OutRally Junior, an age-appropriate version of the same app. Junior users can use venues, events and Learn; record and post R20 games; appear in Junior R20 rankings; and connect and message with other Junior users.

Who can find and contact a Junior user.

• Junior users can be found in search only by other Junior users, their accepted connections, and their linked parent or guardian. Results show only first name and last initial, profile photo and level — never location, check-ins, Home Venue, availability or usual playing times.
• Adults, and users whose age group we don't know, can't send connection requests to Junior users. Junior users can send connection requests to anyone, and can accept requests only from other Junior users.
• Direct messages are available only between accepted connections.
• Adults who aren't accepted connections can't comment on or like a Junior user's posts.
• Gearave buying, selling and marketplace messaging require both people to be 18 or older. Junior users can browse Gearave.

Who can see a Junior user's content.

• When posting, a Junior user chooses who can see it: "My connections" (the default — the players in the game, plus people who are accepted connections of every Junior player in it) or "Junior community" (all Junior users, plus the linked parents or guardians of the Junior players in it). If a game includes more than one Junior player, each can limit it to "My connections"; the most restrictive choice applies.
• R20 games in which every player is a Junior user may appear in Junior rankings. An entry shows the score, first name and last initial and a broad region. Adults can't see Junior rankings.
• R20 games that include both adult and Junior players, players whose age group we don't know, or players without an account are not shown in any ranking. Their videos are visible only to the players in the game and to people who are accepted connections of every Junior player in it.
• Junior users' profiles, Moments and results are never shown on our website, including after they turn 18. Content posted while a user was a Junior keeps its Junior protections.
• When a Junior user checks in at a venue, only their accepted connections see their name; others see only a player count. Junior users can't make their Home Venue public.

Parents and guardians (Family). A parent or guardian with an adult OutRally account can link to a teen's account: the parent creates an invitation and the teen confirms it in person. A teen can have up to two linked parents or guardians; when a second one links, the first is notified. A linked parent can see their own teen's R20 results and Junior ranking entries, Moments, connections list and venue check-ins, and can report content or accounts. A linked parent can't read their teen's messages, sign in as their teen, see other teens' recordings or full profiles, or search for or message other Junior users. Either side can end the link at any time; if the teen ends it, the parent is notified.

Age changes. Your age group can be updated from your Apple account or by OutRally support. An adult account can't change itself to 13–17, and a change from adult to 13–17 is reviewed. When a user turns 18, they leave the Junior community; their earlier results are kept, and their earlier content doesn't become more widely visible.

Staff access. OutRally staff don't join the Junior community as members. Where safety review is needed, authorized staff use separate tools, and their access is recorded.

Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to obtain information about its processing or disclosure; to withdraw consent where processing relies on consent; and to appeal our response. Where applicable, you may also have a right to opt out of certain sales, sharing, targeted advertising, or profiling. We do not describe those practices as occurring when they are not part of the Services.

Submit a request to support@outrally.com. We may need to verify your identity and authority before acting. An authorized agent may submit a request where allowed by law, subject to verification. We will not discriminate against you for exercising an applicable privacy right. If we deny an appealable request, our response will explain how to appeal where required.

OutRally is operated from the United States. If you access the Services from another country, your information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers and honor applicable legal rights.

We may update this Privacy Policy as the Services or law changes. We will post the revised Policy with a new "last updated" date and provide additional notice when required. Your use of the Services after an update is subject to the revised Policy, to the extent permitted by law.

For privacy questions, requests, or concerns, contact OUTRALLY LLC at support@outrally.com. You may also contact us through the support features made available in the Services.