Privacy Policy

Effective 2 November 2026

This policy explains what information RallyFlow collects, why, who can see it and the choices you have. RallyFlow is operated by LEXERS IT CONSULTANCY (“we”, “us”). We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Questions or requests: support@rallyflow.app.

Who this covers

Organizers who create an account to run clubs and open-play sessions.
Players who join a session from a shared link or code, or whom an organizer adds to a session. Players do not create accounts.

What we collect

Organizers

Email address and password. Passwords are stored by our authentication provider in hashed form; we never see them.
Club names, session details (name, venue, start time, courts, player limit, notes for players and rules) and the settings you choose.
Venues your club uses: the name, and when picked from Google Maps, its address, map location and Google Maps link. While you search for a venue, what you type is sent to Google (through our server) to suggest places.
Which version of these Terms and this Privacy Policy you agreed to when you created your account, and when.
Email addresses you enter to invite other organizers, and whether each invite was accepted.
If you set a session fee: the amount, how players pay, and the payment QR image, account name and note you upload.
If you make a group pay link: its title, venue, date and notes, the name you show to players, the amounts, how players pay you (your payment QR image, account name and note), the optional club, and the changes you make to it.
A record of actions taken in a session (for example “match started” or “player checked in”) and which organizer account took them.
End-of-session feedback you choose to give, and whether you opened the optional donation link.
If you make an optional donation or buy a tournament upgrade: the amount, what it was for, which club it was for, its status, and the reference numbers PayMongo gives us for the payment. We never receive your bank, e-wallet or card details.

Players

The display name entered when joining, or by the organizer. Use a nickname if you prefer.
An optional self-rated skill level, and any skill rating the organizer assigns.
Partner preferences and partner requests.
In sessions with a session fee: whether you said you paid, the reference number you chose to enter, and whether the organizer marked you as paid or waived your fee. RallyFlow never receives your payment details: you pay the organizer directly.
On a group pay link: the name you enter when you take a spot (or join its waitlist), your share, whether you said you paid, the reference number you chose to enter, and whether the organizer marked you as paid or waived your share. A random code in your browser shows “your” spot; we keep only a hashed copy. RallyFlow never receives your payment details.
Session activity: check-in, breaks and check-out times, place in the queue, waiting times, matches played, teammates and opponents, scores and results.
A random code stored in your browser so this device can show “you” in the queue. We keep only a scrambled (hashed) copy of it on our servers.
In tournaments: the team name and the two players' names, entered by the organizer or by a player registering the team, plus the team's pool, seed, check-in, schedule, scores and standings. These are shown on the tournament page and court display to anyone with the link. Which team you follow is remembered only in your browser.

Technical information

Our hosting and database providers keep short-lived server logs (such as IP address, browser type and time of request) to run the service and protect it from abuse.
To keep automated sign-ups and sign-in attempts out, the organizer sign-in, sign-up, password reset and account deletion forms may use Cloudflare Turnstile, which checks your browser (for example its characteristics and how the page is used) to confirm you're a person. Cloudflare processes this under its own privacy policy. Players joining a session don't go through this check.
RallyFlow does not use advertising or tracking cookies. Organizers get a sign-in cookie to stay signed in. Your browser also stores small settings in local storage, such as the player code above and whether you dismissed the “Install RallyFlow” suggestion.
We use Vercel Web Analytics to count page visits and see which pages are used. It does not use tracking cookies. For each visit it records the time, the page (with session codes, invite links and other private parts of the address removed), the referring site, your approximate location (country, region and city), and your browser, operating system and device type. Visitors are counted with an anonymous value worked out from the request, which is discarded after 24 hours, so it can't be used to follow you across days. The statistics are only used in aggregate.
So sessions keep working when the venue connection drops, your browser keeps a copy of the session pages you opened, the latest session details it received, and any changes waiting to be sent. These stay on your device. Signing out deletes an organizer's copies.
When an organizer's device loses and regains its connection during a session, we record when that happened, so we can learn how often venues go offline.

Why we use it

To run sessions: build the queue, suggest fair matches, show courts and results, and keep everyone's screen up to date.
To show fairness statistics and the session leaderboard to the organizers and players of that session.
To let organizers sign in, invite co-organizers and recover their accounts by email.
To keep the service secure, fix problems and improve it, including using organizer feedback and visit statistics.

We rely on your consent when you join a session or create an account, on our legitimate interest in running and securing the service, and on what is needed to provide the service you asked for. We do not sell personal information and do not use it for advertising.

Who can see what

Anyone with a session's link or code can see that session's player names, check-in status, queue order, waiting times, games played, courts in play, recent results and the Top players leaderboard. Treat the code like an invitation and share it only with your group.
Session fees: the organizer's payment QR, account name and note are visible to anyone with the session's link or code. Each player's payment status and reference number are visible only to that player (on their own device) and the club's organizers, never on the court display or to other players.
Venues and maps: anyone with a session's link sees its venue, address and notes. The map on the session page loads from Google only when you tap “Show map”, and “Get directions” opens Google Maps; Google then handles that under its own privacy policy. RallyFlow doesn't share organizers' phone numbers or contact details on player pages.
Group pay: anyone with a group pay link can see its title, date, venue and notes, the organizer's name, payment QR, account name and note, and each spot's name, amount and payment status (paid, says paid, unpaid or waived). Reference numbers are visible only to the player who entered them (on their own device) and the organizer who made the link.
Skill ratings are not shown on the public page. They are visible only to the club's organizers.
Organizers of a club can see all of that club's sessions, players and history, and can download player statistics and match history as files. Organizers of other clubs cannot.
Service providers that process data for us under their own security and privacy terms: Supabase (database and sign-in; our database is hosted in Singapore), Vercel (website hosting and visit statistics), Cloudflare (the human check on organizer sign-in forms), Google (venue search and maps) and our email provider (account emails such as confirmations and password resets). Donations and upgrade payments are processed by PayMongo (QR Ph) or, for donations, another platform we link to, under their own policies; we never receive your payment details.
We may disclose information if the law requires it, or to protect the safety of people or the service.

Because our providers operate internationally, your information may be stored or processed outside the Philippines. We choose providers with appropriate safeguards.

How long we keep it

We keep club and session information so organizers can review history, until the club owner or the person concerned asks us to delete it, or the organizer account is closed. A club its creator handed over to a co-organizer when closing their account stays with that organizer. Group pay links close 14 days after their date (or 30 days after they were made, without a date), and are deleted with their names, amounts and reference numbers 180 days after they close; an organizer's uploaded payment QR is kept with their account so they can use it again. Server logs are kept by our providers for a short period. Copies in backups are removed on the providers' normal backup cycle.

Security

Connections use HTTPS. Each club's data is separated at the database level so organizers can only reach their own clubs, every change is checked on the server, and player codes and invite links are stored only in hashed form. No system is perfectly secure; if we learn of a breach that affects you, we will notify you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act you can:

be informed about how your information is used (this page);
access the information we hold about you and get a copy of it;
ask us to correct inaccurate information;
object to processing, or ask us to delete or block your information;
withdraw consent at any time (for example, by leaving a session or asking us to remove your name);
complain to the National Privacy Commission.

Players can also ask the session's organizer to correct or remove their name. To make a request to us, email support@rallyflow.app with the club or session name and the name you used. We may need to confirm your identity first, and we'll reply within a reasonable time.

Children

Organizer accounts are for people 18 and older. Players of any age may take part in open play. Organizers who add a minor to a session should use a first name or nickname and have a parent's or guardian's permission. A parent or guardian can ask us to remove a child's information at any time.

Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, tell organizers by email or in the app before the change takes effect.