Privacy Policy

Draft. Before launch we add the operator's name and address, and a lawyer reviews these texts.

Last updated: 4 November 2026

Controller

[NAME], [STREET], [POSTCODE CITY], hello@rally-roads.com

Account

You need an account to use the app (Apple, Google or e-mail). We store your e-mail address, display name and profile (car, settings, progress) with Google Firebase (Google Ireland Ltd.): profile and content in Frankfurt (europe-west3); sign-in data (e-mail address, sign-in provider) is processed by Firebase Authentication, also in the USA (see "Transfers to the USA"). Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Transfers to the USA

Firebase, Crashlytics and Google Analytics for Firebase are operated by Google Ireland Ltd. Its parent company Google LLC (USA) may process data in the process. Google LLC is certified under the EU-US Data Privacy Framework; transfers rely on the European Commission's adequacy decision (Art. 45 GDPR), with standard contractual clauses as a supplement.

Location

During a drive the app uses your precise location on the device to detect when you reach a landmark and whether the car is parked, and to measure the distance driven. This continues with the screen locked; your device shows that it does (on Android with a notification). Your live position is not uploaded, and we do not store a movement track. What is saved after the drive is described under "Drives". If you have allowed location access, the app also uses your position on the device outside a drive: it sorts routes by distance ("Near you") and opens maps at your position. If the app shows a street map, it loads the map tiles for that area from MapTiler (see "Maps"). In the route builder, "Waypoint at my position" saves your current location as a waypoint of your route, and in an AI draft "Use my location" enters your precise position (to about 10 m) as the start location, which goes to OpenAI (see "AI route drafts"). We store your routes with all their waypoints, drafts included, in your account with Google Firebase. Other users only see a route once it is published after our review. Legal basis: Art. 6(1)(b) GDPR.

Drives

When you finish a drive, the app automatically saves it in your account with Google Firebase: the route, when it started and ended (date and time), the landmarks you reached (detected from your location on the device), the checkpoints you completed and those still open, the distance driven, how often you skipped a waypoint or opened the map, XP, badges, your answers at checkpoints, whether you show the photos in the feed, the links of the photos you show, the file path of your cover photo on the device and, for each photo, its file path on your device, its waypoint and checkpoint, when the photo was added, the blurred areas and whether you checked them, plus technical details such as the state of the drive. The photos themselves are not uploaded with it (see "Photos"). Because waypoints are fixed places, this shows roughly where you were and when. Drives you abort stay on your device. Other users do not see this drive data, only the feed posts the app creates automatically when you finish: the feed shows that you finished the route, with the date and time it ended, plus one post for each new badge. Because the end of a route is a fixed place, the post also shows roughly when you were there. Who sees them is described under "Friends, crews, feed". If you rate the route, we store the stars and your comment. The stars count towards the route's rating without your name; the comment appears in your feed post. Legal basis: Art. 6(1)(b) GDPR.

Photos

Checkpoint photos stay on your device at first. The app detects faces and number plates on the device (Apple Vision or Google ML Kit, without uploading) and blurs them. Only when you show a drive's photos in the feed or share the card is the blurred version uploaded, without location data in the image file. If you switch "Show photos in crew feed" off again, the uploaded photos are deleted. For your avatar you pick or take a photo. The app turns it into a comic version on the device and uploads only that version when you save; the original photo stays on your device. The app does not blur faces or number plates in the avatar. The uploaded photos and your avatar can be seen by any signed-in RallyRoads user and by anyone who has the link to an image: the links are stored in entries that every signed-in user can read. The app shows the photos to your friends and your crew in the feed, and your avatar in your public profile, in the feed and in your crew.

Friends, crews, feed

Your public profile (name, avatar, XP, badges and car) and your feed posts (route, date and time, XP, comment, new badges, photos you show) can be seen by any signed-in RallyRoads user, as can which posts you tap "Like" on. The app creates the post that you finished a route automatically; because the end of a route is a fixed place, it also shows roughly when you were there. The app shows the posts to the friends who added you by code and to your crew. Only its members see a crew: its name and invite code, the member list (each member's name, avatar, XP and car, and the file path of their avatar on their device) and which routes are marked as private crew rallies. Other members can only open a marked route once it is published. Everything else in your profile, such as settings, purchases and your friends list, only you can see.

Reports

If you report a route ("Report route"), we store the route, the reason, your text, your user ID and the time. We need the report to check and handle it (notice and action procedure under Art. 16 DSA). If three different people report the same route by a user, it automatically goes back to review. Legal basis: Art. 6(1)(c) and (f) GDPR together with Art. 16 DSA. We keep reports for as long as we need them to handle them and to defend against legal claims.

Maps

If the app shows a street map, it loads the map tiles from MapTiler AG (Zug, Switzerland). Like any web server, MapTiler receives your IP address and the map area being shown, but no account data. Switzerland has an EU adequacy decision. "Navigate to start" opens Apple Maps or Google Maps with the coordinates of the start; Apple's or Google's privacy policy applies there. Legal basis: Art. 6(1)(b) GDPR.

Crash reports

When the app crashes, or an unexpected error occurs while you sign in or delete your account, we send technical data (device type, operating system, error message and where in the code it occurred, a random installation ID) to Firebase Crashlytics to fix bugs. Legal basis: legitimate interest in a stable app, Art. 6(1)(f) GDPR; access to your device is strictly necessary for this (§ 25(2) no. 2 TDDDG). Crashlytics deletes crash reports after 90 days.

Usage statistics

Only if you agree (onboarding or Garage, revocable at any time), we send pseudonymous events such as "onboarding step reached", "paywall seen" or "rally finished" to Google Analytics for Firebase to improve the app. Events about drives, unlocked routes and shared cards are each sent with the route they are about. Pseudonymous means: with a random app instance ID, without advertising ID, name or e-mail address. Google derives an approximate location (such as country and city) from your IP address. No ads, no selling. Collection stays switched off until you agree. Google Analytics deletes the event data after 2 months. Legal basis: consent, Art. 6(1)(a) GDPR, § 25(1) TDDDG.

AI route drafts

Optional: when you create an AI draft in the route builder, we send the start location (a place name or, with "Use my location", your precise position), world, length and your wishes via our server to OpenAI (USA), without your name or e-mail address. According to OpenAI, such requests are kept for up to 30 days for abuse monitoring and are not used for training. Transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. The draft is saved in your routes. Legal basis: Art. 6(1)(b) GDPR.

Place search

To turn places and landmarks into coordinates (for example for AI drafts), the app sends the name of the place to Nominatim, the search service of the OpenStreetMap Foundation (OSMF, United Kingdom). The OSMF sees your IP address but no account data. The United Kingdom is covered by an adequacy decision of the European Commission. Legal basis: Art. 6(1)(b) GDPR.

Reminders

When you start the Pro trial, the app schedules a notification on your device two days before the trial ends. No data is transmitted for this.

Purchases

Subscriptions and purchases run through Apple or Google and RevenueCat (RevenueCat Inc., USA, standard contractual clauses). We do not receive any payment data.

Waitlist

If you ask us to tell you about the launch, by email or with the form on this website, we keep your email address and language and, if you give them, your phone type and favorite world. Sign-ups through the form are stored in Google Firebase (Frankfurt) with the time and the version of the consent text, and you first get one email to confirm your address (double opt-in). After that we write to you once, at launch. Emails are sent by our email provider on our behalf (Art. 28 GDPR). Legal basis: consent, Art. 6(1)(a) GDPR; you can withdraw it at any time with the link in every email or by writing to us. We delete your data after the launch email, or after 12 months at the latest, and unconfirmed sign-ups after 30 days. To stop misuse of the form we keep a keyed hash of your IP address for one hour.

Store pages

Our pages in the App Store and on Google Play are run by Apple and Google under their own privacy policies. From them we only receive aggregated statistics such as page views and downloads, which do not identify you.

This website

This website sets no cookies and uses no scripts, analytics or tracking. Fonts are served from our own server. The host (Google Firebase Hosting) processes technically necessary data such as your IP address. Do Not Track: we do not track you across websites or apps, so we handle every visit the same way, whether or not your browser sends a Do Not Track signal.

Security

The app and the website send data only over encrypted connections (HTTPS/TLS). Google Firebase stores your data in encrypted form.

Minimum age

RallyRoads is not directed at children under 13. You must be at least 16 to create an account in the EU, and at least 13 elsewhere. If we learn of an account below this age, we delete it.

Retention and deletion

Data is kept as long as your account exists. You delete your account in the app under Garage → Settings → Delete account. This immediately deletes your account, your profile, your drives, ratings, feed posts, photos, your avatar and those of your routes that are neither published nor bought by others, and removes you from crews. Without the app, write an e-mail to hello@rally-roads.com. We then delete your account and the same data within 30 days. Afterwards the following remains: your published routes and routes other people bought are kept without your name; only the people who bought them can still see them. We keep reports you sent for as long as we need them to handle them and to defend against legal claims. Your user ID stays in the "Like" marks on other people's posts and, with your friend code, in other users' friends lists. Crews you founded remain, with your user ID as founder. Records we must keep by law (e.g. creator payouts, invoices) are kept for the legal period and then deleted. Crash reports are deleted after 90 days, usage statistics after 2 months.

US privacy notice

If you live in the United States: we collect identifiers (email address, display name, account ID), purchase status, the content you create (routes, avatar, blurred photos, comments, reports), your drives (see "Drives"), and app activity and diagnostics (crash reports; usage events with approximate location only with consent), for the purposes described above. We collect precise location when you set a waypoint at your position in the route builder or choose "Use my location" for an AI draft; in addition, your drives and the feed post at the end of a route show roughly where you were and when. Your live position during a drive stays on your device. We do not sell or share personal information and do not use it for targeted advertising. You can ask to know, correct or delete your data by writing to hello@rally-roads.com; we will not treat you differently for doing so. We keep data for the periods under "Retention and deletion".

Your rights

Access, rectification, erasure, restriction, data portability, objection (Art. 15–21 GDPR) and complaint to a supervisory authority. You can withdraw consent at any time with effect for the future. Write to us: hello@rally-roads.com