Privacy Policy

1. Who controls your data

UtilitySEO Ltd (trading as RALLY) is the data controller for the personal data you provide. We are registered in England and Wales under company number 17055142, with our registered office at 4 Frances Street, Cheadle, SK8 2AE, and we are registered with the Information Commissioner's Office (ICO) under reference C1885551. Contact our data team through our support form.

2. What we collect

3. Lawful basis

• Contract - to provide the app you signed up for.
• Consent - for marketing emails and non-essential cookies (you can withdraw any time).
• Legitimate interests - to keep RALLY secure and improve it.

Health data is special-category data; we process it based on your explicit consent, given when you enter it.

4. Cookies

We use essential cookies to run the app and, with your consent, analytics cookies to understand usage. You choose "Accept all" or "Essential only" on first visit, and can change this any time in Settings → Privacy & data.

5. Marketing

If you opt in, we send training tips, offers and product news. Every email has an unsubscribe link, and you can toggle marketing off in Settings at any time.

6. Sharing

We never sell your personal data. We share data only with processors who help us run RALLY (e.g. hosting, analytics, email) under strict agreements, and with third parties you choose to connect (Spotify, wearables).

7. Your rights

Under UK GDPR / GDPR you can: access your data, correct it, delete it ("right to be forgotten"), export it, restrict or object to processing, and withdraw consent. Use Settings → Privacy & data → Download / Delete my account, or email us. We respond within 30 days.

8. Retention & security

We keep your data only as long as your account is active or as required by law, and protect it with encryption and access controls.

When you delete your account: your profile, food diary, workouts, posts and progress are removed from RALLY immediately and you are signed out. You can no longer sign in, and nobody else can see your data. We retain a copy for 6 months for one purpose only — so our support team can restore your account if you deleted it by mistake and ask us to. During that period the record is accessible only to our staff and is not used for any other purpose, including analytics or marketing. After 6 months it is erased permanently by an automated job. If you would rather we erase everything straight away instead of waiting, email us and we will action it.

9. Contact & complaints

Use our support form. You also have the right to complain to the ICO (ico.org.uk).