Consumer Health
Data Privacy Policy

Effective: July 30, 2026
Clarified: August 16, 2026
In-app consent disclosure version: 2026-07-28-public-v1-2 — unchanged because this clarification adds no data category, purpose, recipient, or retention practice
Policy clarification revision: 2026-08-16-app-review-clarification-1

Rally AI ("Rally," "we," or "us") is operated by Bryce Ranchero, an individual in Illinois. This policy describes the consumer health data Rally may collect, the sources and purposes, the limited processing and disclosures, and how a consumer can exercise applicable rights.

1. Categories collected and processed

• Swing video: the audio-free tennis clip selected or recorded for analysis.
• Body landmarks and mechanics: temporary 33-point whole-body pose estimates, including a small set around the face and hands; the compact 13-joint motion track returned to the app; and measured swing mechanics derived from the clip.
• Analysis results: stroke and hitting-hand selection, score, confidence, technique breakdown, contact image, priority fix, drill, and measured motion review.
• Linked request context: the pseudonymous installation, consent, authorization, quota, abuse-control, timing, and coarse outcome records used to provide and secure the requested analysis, only to the extent those records are legally treated as linked consumer health data.

2. Sources

• The consumer: the swing clip, selected stroke and hitting hand, consent, and request.
• The consumer's iPhone: camera or photo-library input and the pseudonymous authorization and service facts needed to make the request.
• Rally's analysis service: the temporary landmarks, mechanics, contact image, score, confidence, technique breakdown, priority fix, drill, and compact motion track derived from the submitted clip.

3. Purposes and manner of processing

Rally collects and processes these categories only to accept the adult consumer's requested clip, remove audio on the iPhone, securely transmit the minimized clip, estimate pose landmarks and tennis mechanics, return the requested analysis and measured motion review, save trusted results locally on the consumer's iPhone, enforce current consent and the free-use quota, secure the service, and investigate content-free operational failures.

Rally does not use consumer health data to identify or authenticate a person from their body, diagnose or treat a medical condition, create an advertising or marketing profile, train an AI model, or make decisions about employment, insurance, credit, housing, health care, or another eligibility determination.

4. Categories disclosed, processors, third parties, and affiliates

• Processor disclosure: after the user agrees, the audio-free swing video and request fields are disclosed over encrypted HTTPS to Modal Labs, Inc., Rally's contracted cloud-infrastructure processor, only to run and secure the requested analysis. Rally bundles and runs MediaPipe 0.10.14 inside Rally's server container hosted on Modal. Modal is the processor to which Rally directly routes the request; its applicable infrastructure subprocessors are governed by its Data Processing Addendum. This processor disclosure is necessary to provide the requested service and is not a sale.
• Other third parties or affiliates: beyond Modal and its DPA-governed infrastructure subprocessors, Rally does not disclose consumer health data to advertisers, data brokers, affiliates, or other unrelated third parties. The swing video, landmarks, mechanics, and analysis-request data are not sent to Google, OpenAI, Anthropic, or another external model-inference API.
• Sale: none. Rally does not sell or offer to sell consumer health data.

For personal data processed during swing analysis, Rally's agreement with Modal incorporates Modal's Data Processing Addendum. It limits processing to providing the contracted service, requires confidentiality and appropriate security, requires deletion, and binds applicable subprocessors to written terms at least as protective as the DPA. Rally therefore requires the same or equal protection for the personal data Modal processes. If Rally proposes a new category, purpose, or legally defined sharing that is not necessary to provide the requested service, Rally will disclose it and obtain the separate consent required by applicable law before the new processing begins.

5. Retention and deletion

• Server video and temporary landmarks: released and destroyed when the request completes or fails. The application removes the temporary upload; if normal removal fails, it truncates the file content to zero, retries, and records a content-free critical privacy event if removal still cannot complete.
• Server results: the contact image, motion payload, score, and coaching result are returned to the app and are not intentionally retained by Rally's server after the response.
• On-device results: a trusted result, contact image, audio-free review video, and compact motion track may remain only on the consumer's iPhone until the consumer deletes the analysis, deletes all Rally data from that iPhone, or uninstalls Rally.
• Limited service records: authorization, quota, abuse-control, and content-free operational records follow the schedules in the general Privacy Policy, unless an authenticated deletion duty applies or a limited legal or security exception permits retention.

6. Consumer rights

Subject to authentication and applicable law, a consumer may ask Rally to:

• confirm whether Rally is collecting, sharing, or selling consumer health data concerning the consumer;
• provide access to the consumer health data Rally can link to the consumer and a list of applicable third parties or affiliates, including a contact method when required;
• correct verifiable consumer health data where a correction right applies;
• withdraw consent and stop future collection or sharing;
• delete consumer health data from Rally's records and network and notify applicable processors, contractors, affiliates, or other recipients; and
• appeal Rally's refusal to act on a request.

Rally will not unlawfully discriminate against a consumer for exercising these rights. Rally will not require a new account. Requests are free at least twice each year; a reasonable fee or refusal may apply only when permitted for a manifestly unfounded, excessive, or repetitive request.

7. Secure request and appeal process

Email ricebboi@gmail.com with the subject Privacy Request. State the right you want to exercise and your state of residence. If the request concerns an anonymous installation, contact Rally before deleting the local installation credential or uninstalling. Include only enough information to help authenticate the request, such as the consent date shown in Profile and the approximate date of a recent analysis. Do not email an installation credential, App Store credentials, payment information, identity documents, a swing video, or pose data unless Rally explains why a narrower method is insufficient.

Rally will use commercially reasonable efforts to authenticate through the existing email channel and limited service records. Rally may request additional information reasonably necessary to authenticate. If authentication is not possible, Rally will explain the limitation rather than disclose or delete data tied to another installation.

The exact Washington and Nevada response, deletion, backup, and appeal periods are listed on Support & Privacy Choices. To appeal a refusal, reply to Rally's decision with the subject Privacy Appeal.

8. Security and access limits

Rally restricts access to consumer health data to the operator and processor access reasonably necessary to provide the requested analysis, secure the service, and fulfill an authenticated request. Rally uses encrypted transport, revocable per-device authorization, temporary server files, content-minimized logs, iOS file protection, and on-device storage. Rally maintains administrative, technical, and physical practices intended to protect confidentiality, integrity, and availability in proportion to the limited volume and nature of the data.

9. Changes and contact

Rally will not collect, use, or share an additional category of consumer health data or use it for an additional purpose not disclosed here without first publishing the change and obtaining any affirmative consent required by applicable law.

Operator: Bryce Ranchero, an individual in Illinois.
Requests, appeals, and questions: ricebboi@gmail.com.
Support & Privacy Choices
General Privacy Policy