Rallio — Privacy Policy
Privacy Policy
Effective Date: April 15, 2026 · Last Updated: June 12, 2026
Rallio ("we," "us," or "our") operates the Rallio mobile application (the "App"). This Privacy Policy describes how we collect, use, store, and share your personal information when you use the App.
By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information You Provide
| Data Type | When Collected | Purpose |
|---|---|---|
| Full name | Account registration | Display in your profile and on your recommendations |
| Email address | Account registration | Authentication, account recovery, and communications |
| Password | Account registration | Account authentication (stored as a hash by Firebase Authentication — we never see or store your plaintext password) |
| City | Account registration / profile setup | Connecting you with local businesses in your area |
| Role selection | Account registration | Determining whether you are a Supporter or Business Owner |
| Interests | Profile setup (optional) | Personalizing your experience |
| Social media handle | Profile setup (optional) | Displayed on your profile and recommendations |
| Bio | Profile setup (optional) | Displayed on your profile |
| Recommendation content | Creating recommendations | Titles, captions, external links, and uploaded images you submit for a business |
| Business information | Business registration (Business Owners) | Business name, category, city, neighborhood, address, description, tagline, and tags |
| Business claim details | Claiming a business | Business email, claimant role, proof notes, and optional website |
| Content reports & blocks | Reporting a post or blocking a user (optional) | Reviewing reported content and hiding blocked users from your experience |
1.2 Information Collected Automatically
| Data Type | Purpose |
|---|---|
| Interaction events | We record clicks and visits on recommendations to measure business impact and, when enabled, reward-campaign progress |
| Timestamps | We record when accounts are created, posts are submitted or approved, rewards are unlocked, follows occur, and likes are placed |
| Firebase Authentication metadata | Firebase may collect your device type and IP address for security and fraud prevention |
| Crash and error diagnostics | Production builds may send crash reports, stack traces, device/app version, and related diagnostic context so we can find and fix reliability issues |
1.3 Information We Do Not Collect
- Precise geolocation or GPS data
- Device advertising or hardware IDs
- Contact lists or phone book data
- Financial information, payment card numbers, or bank details
- Health, fitness, or biometric data
- Web browsing history
- Call or SMS logs
- Camera or microphone data (the App requests photo-library access only so you can attach images to recommendations; we do not access your camera or microphone)
2. How We Use Your Information
- Providing the service — Creating and managing your account, displaying approved recommendations, processing business claims, and measuring recommendation impact.
- Personalizing your experience — Showing businesses and content relevant to your city and interests.
- Moderation — Supporter recommendations become public after owner or admin approval. We review reported content and remove anything that violates our policies, and we may restrict or remove accounts that abuse the platform.
- Reward fulfillment when enabled — Tracking event thresholds (clicks and visits) to unlock and redeem rewards if a business runs an active reward campaign.
- Communications — Sending transactional emails related to your account (e.g., password reset). We do not currently send marketing emails.
- Security and fraud prevention — Detecting and preventing abuse, spam, and unauthorized access.
3. How We Store and Protect Your Information
- Infrastructure: All data is stored in Google Firebase (Firestore, Firebase Authentication, and Firebase Storage) hosted in the United States.
- Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS (HTTPS).
- Encryption at rest: Data stored in Firebase is encrypted at rest by Google Cloud.
- Authentication: Passwords are hashed and managed entirely by Firebase Authentication. We never have access to your plaintext password.
- Access control: Firestore Security Rules enforce role-based access so that users can only read and write data they are authorized to access.
4. How We Share Your Information
We do not sell, rent, or trade your personal information.
We may share information in the following limited circumstances:
| Recipient | What is shared | Why |
|---|---|---|
| Other users | Display name, city, social handle, bio, avatar color, badges, and support-post content | Core functionality — Rallio is a community platform |
| Business Owners | Name, social handle, city, post content, and engagement metrics of supporters | Moderation and reward fulfillment |
| Rallio review | Business claim email, claimant role, proof notes, and optional website | Ownership review and dispute handling. These details are not displayed publicly or to other business accounts. |
| Google / Firebase | Account and usage data processed by Firebase services | Infrastructure provider (Firebase Privacy) |
| Law enforcement | Information when required by law, court order, or governmental request | Legal compliance |
5. Data Retention
- We retain your account data for as long as your account is active.
- If you request account deletion, we will delete your personal data within 30 days, including your profile, recommendations, uploaded recommendation media, tracked events, reward unlocks, follows, likes, business-claim submissions, content reports you filed, and your block list.
- If you are a Business Owner, any businesses you claimed will become unclaimed and any active campaigns on those businesses will be paused rather than deleted.
- Some data may be retained if required for security, fraud prevention, or legal compliance.
- Firebase Authentication logs may be retained by Google in accordance with their own retention policies.
6. Your Rights and Choices
- Access: You can view all personal data associated with your account within the App.
- Correction: You can update your profile information at any time through the App.
- Deletion: You can delete your account inside the App from Profile → Delete account, or request deletion outside the App by contacting us at the email below. We will process deletion requests within 30 days.
- Opt-out of optional data: Interests, social handles, and bios are optional. You may leave them blank or remove them at any time.
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA. Please contact us to exercise those rights.
7. Children's Privacy
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete it.
8. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication | User sign-in and account management | Firebase Privacy |
| Cloud Firestore | Storing app data | Google Cloud Privacy |
| Firebase Storage | Storing user-uploaded media | Firebase Privacy |
| Expo / EAS | App distribution and OTA updates | Expo Privacy |
| Sentry | Crash and error reporting for production builds | Sentry Privacy Policy |
We do not use third-party advertising or tracking SDKs. Sentry is used only for crash and error diagnostics, not advertising or cross-app tracking.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. If we make material changes, we will notify you through the App or via email.
10. Contact Us
If you have questions about this Privacy Policy, contact us at:
Email: ralliosupport@gmail.com
This privacy policy applies to the Rallio mobile application (com.rallio.mobile) available on Android and iOS.