Cookies and storage
Rally is operated by Kindred Labs Pte. Ltd., Singapore. Effective 6 September 2026 · Version 1.2
1. What this covers
This policy covers our website at rallyfit.co and the Rally app. "Cookies" here means cookies and similar technologies: anything that stores information on your device or reads information already there, including local storage, pixels, tags and software development kits. The rules are the same whatever the technology is called.
2. The website sets no cookies
Our website is a set of static pages hosted on Vercel. It sets no cookies.
It uses no analytics, no advertising or tracking pixels, no tag manager, no session recording, no A/B testing, no embedded video, maps or social content, no fonts loaded from anyone else, and no forms. Nothing on the site is loaded from a third party, so nothing about your visit is sent anywhere else.
There is no consent banner, because there is nothing to consent to.
3. Server logs
Our host keeps ordinary request logs: the page you asked for, the time, your browser type and your IP address. We use them to keep the site running and secure. That is not storage on your device beyond what loading a page requires, so it needs no consent. Our privacy policy explains what we do with those logs and how long we keep them.
4. The app
The Rally app is not a website. It has no cookie store and sets no cookies.
The app does store data on your device: your training log, your preferences and onboarding answers, and your sign-in tokens. All of it is there so that the app works offline, remembers your settings and keeps you signed in. That storage is necessary for the app you asked for, and none of it is used for advertising.
Product analytics inside the app is off unless you turn it on. You can turn it on or off at any time in your settings.
The app also reads one thing that is not necessary for it to work: your device's advertising identifier, used to measure which of our own campaigns brought you here. Section 5 sets out what that is, what it is used for, and how to refuse it.
5. Advertising and measurement
Rally shows no advertising, and nobody is permitted to advertise to you inside it.
Rally does measure where new installs come from, so we can tell which of our own campaigns are worth running.
App Tracking Transparency (iOS). After you finish setting up your account, iOS asks whether Rally may track you across other companies' apps and websites. If you decline, or dismiss the prompt, your device's advertising identifier (IDFA) is never read and never leaves your phone. Measurement continues without it: the events below are still sent, and they carry no identifier of their own. You can change your answer at any time in Settings → Privacy & Security → Tracking.
The advertising identifier (Android). Android has no equivalent prompt. Our measurement partner collects the Google Advertising ID and the Play Install Referrer, which is how an install is matched to a campaign. You can reset or delete that identifier for every app at once in Settings → Privacy → Ads.
SKAdNetwork (iOS). Whatever you answer, Apple sends our advertising partners a delayed, aggregated notice that an install happened. It carries no identifier for you, and Apple, not Rally, controls what it contains. Rally declares Meta, Google and TikTok as advertising networks.
AppsFlyer. AppsFlyer is our measurement partner. It receives your device's advertising identifier, the IDFA only where you have allowed tracking and the Google Advertising ID on Android, together with a short and fixed list of events: that an account was created, that a free trial started, and that a subscription started. The first two are bare names with nothing attached to them. The subscription event carries two figures and no others: the price the store charged you, and the currency it was charged in.
What measurement never receives. No workout, no exercise, no set, no weight you lift, no bodyweight, no gym or location, and nothing about the other people in your rally. This is enforced in Rally's code by an allowlist rather than by policy alone: an event name outside the permitted list is rejected before it can reach AppsFlyer, the price and currency are the only values any event may carry, and they may only travel on the subscription event.
6. If this changes
If we ever add anything that stores or reads information on your device beyond what is strictly necessary, on the website or in the app, we will update this policy first. Where the platform gives you a way to consent, as iOS does for tracking, we will ask before we use it, and you will be able to refuse as easily as you accept and to withdraw later. Where it does not, section 5 names what is read and how to turn it off in your device settings.
7. Contact
Questions about this policy, or about your data: privacy@rallyfit.co. Anything else: hello@rallyfit.co.