Privacy Policy

Rally (formerly Wait Watch), operated by Wait Watch LLC (“Rally,” “we,” “us,” or “our”), provides the Rally mobile application (the “App”), which shows users live wait times at bars, clubs, restaurants, and other venues. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Eligibility

The App is available to users of all ages. Users under 18 are restricted to restaurant-only mode — they cannot view or interact with bar, club, or lounge venues. We collect date of birth during onboarding solely to determine age-appropriate content. We do not knowingly collect additional personal information from users under 13 beyond what is necessary to provide the service. If you believe we have collected information from a child under 13, please contact us at masonpfitz@gmail.com.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in using Apple Sign-In or Google, we receive your name and email address as provided by those services. You may also create a username and display name within the App.
• Date of Birth: Provided during onboarding and used solely to determine whether age-restricted venue categories (bars, clubs, lounges) are shown to you.
• Wait Time Reports: When you submit a wait time report for a venue, we collect the venue, estimated wait time, crowd level, and the coordinates used to verify you are within the venue’s geofence. Your username is attached to reports you submit.
• Ratings and Feedback: When you rate a venue (1–5 stars), we collect your rating and any optional written feedback you include. Ratings and feedback are shared with that venue’s operators, and low ratings may trigger a notification to the venue so it can respond.
• Social Features: Friend requests, friend connections, and interactions (likes, reactions) you create.
• Direct Messages: The text and photos you send to friends in the App’s messaging feature. Message photos are selected through the iOS system photo picker and, like other user-submitted images, are screened by automated content moderation before delivery (see Section 4.1).
• Venue Suggestions and Corrections: If you suggest a new venue or submit a location correction, we collect the venue name, address, type, and any notes you include.
• Referrals: When you share your invite link or are referred by another user, we record the referral relationship between accounts.
• University Selection: Your selected university (optional), used to display relevant venues in your area.
• Images You Upload: You may choose to upload a profile avatar or, for a venue you’re reporting on, a photo of the wait. Images are selected through the iOS system photo picker — we receive only the specific image(s) you choose and do not receive access to your broader photo library. If you choose to share a photo with a venue, that venue may use the photo in its own external marketing (for example, social media, paid advertising, or in-venue displays) — see Section 4.2 below.
• Memories (Camera, Microphone & Photos Library): The Memories tab lets you capture photos and videos of your night using your device’s camera and microphone (for video audio), import existing photos and videos from your Photos library, and save memories you capture back to your Photos library. This access is used entirely on your device to power the Memories tab — see Section 2.3 for what happens (and does not happen) to that content.

2.2 Information Collected Automatically

• Precise Location: With your permission, we collect your precise location to (a) show you nearby venues and wait times, (b) verify you are near a venue when submitting a report, and (c) share your current venue with friends you have added (if you opt in). Location data is collected only while you are using the App and is not tracked in the background.
• Usage and Device Information: We collect analytics events such as screen views, app lifecycle events, feature usage, and general device information (operating system version, app version) through PostHog. These events are tied to your Rally account identifier so we can understand product usage and detect abuse. We do not collect your Apple Identifier for Advertisers (IDFA) and we do not use this data for advertising or cross-app tracking.
• IP Address for Referral Attribution: When you tap a Rally invite link, our server temporarily records the IP address that made the request so we can attribute the signup to the correct referrer after you install the App. These attribution records are retained for up to 30 days and are never shared with other users.
• Push Notification Device Token: If you enable push notifications, we collect your device’s push notification token so we can deliver alerts for friend requests, direct messages, and updates to venues you’ve pinned. The token is removed from our systems when you sign out.

2.3 Information We Do Not Collect

• We do not access your contacts.
• Photos and videos you capture or import in the Memories tab stay on your device — Rally’s servers never receive, store, or have access to that content, and it is not backed up to our systems.
• The App does not collect financial or payment information — it is free with no in-app purchases.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App and its features
• Display real-time and historical wait times for venues near you
• Enable social features such as friendships, friend location sharing, messaging, and report interactions
• Verify the accuracy and authenticity of wait time reports (geofence checks, outlier detection, reliability scoring)
• Process referrals and apply referral-based rewards
• Improve the App through product analytics and abuse detection
• Communicate with you about your account if necessary

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:

4.1 Service Providers

• Supabase: Our backend infrastructure provider, which hosts our database, authentication, file storage, and edge-function services on servers located in the United States (US East). See Supabase’s Privacy Policy.
• PostHog: Our analytics provider, which processes product-usage events to help us understand how the App is used and detect abuse. See PostHog’s Privacy Policy.
• OpenAI: We use OpenAI’s moderation API to automatically screen uploaded images and posted text (reports, messages) for policy violations before they are shown to other users. Content submitted for moderation is processed by OpenAI solely for that purpose. See OpenAI’s Privacy Policy.
• Apple and Google: When you sign in, Apple or Google handles authentication and provides us with your name and email. We do not receive or store your password. See Apple’s Privacy Policy and Google’s Privacy Policy.
• Grovs: When you share or tap a Rally invite link, our deferred deep-linking provider Grovs processes technical data (such as device and network information) to connect your app install to the friend who invited you, so referral credit is applied correctly. See Grovs’s Privacy Policy.

4.2 Other Users

• Your username, display name, and avatar are visible to other users who search for you, are your friends, or see your reports.
• Your wait time reports are visible to other authenticated users of the App; your username is shown alongside your reports.
• Your current venue location is visible only to users you have accepted as friends, and only while you have opted in to friend location sharing.
• Your star ratings and written feedback for a venue are visible to that venue’s operators in the Rally Business app, including your username. Low ratings may trigger a notification to the venue.
• Photos you choose to share with a venue may be used by that venue in its own external marketing, such as social media posts, paid advertising, or in-venue displays.
• Your email address, date of birth, precise coordinates, and referral history are not visible to other users.

4.3 Legal Requirements

We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations.

5. Data Retention

• Account Data: We retain your account information for as long as your account is active. If you delete your account, all associated data is permanently removed (see Section 7).
• Wait Time Reports: Reports are retained to build historical wait time data. If you delete your account, your reports are deleted.
• Location Data: Your current venue location is overwritten each time it updates and is deleted when you leave a venue or delete your account. We do not maintain a history of your location.
• Referral Attribution Records: IP-based invite-click records are retained for up to 30 days and then purged automatically.
• Analytics Data: Product-analytics events are retained by PostHog according to their data retention policies.
• Push Notification Device Token: Your device token is retained while you are signed in and deleted when you sign out.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• All data transmitted between the App and our servers is encrypted using TLS/SSL.
• Database access is protected by Row Level Security (RLS) policies ensuring users can only access their own data and data explicitly shared with them.
• Sensitive profile columns are protected by database triggers that reject unauthorized client writes.
• Authentication is handled through secure third-party providers (Apple and Google) using industry-standard OpenID Connect flows with nonce-based replay protection.
• Uploaded images are size- and type-restricted at the storage layer.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Account Deletion

You can delete your account at any time from the Profile section of the App. When you delete your account, we permanently delete all of your personal data, including your profile, reports, ratings and feedback, friendships, favorites, referral history, and location data, and we remove any photos or images you uploaded from our storage. This action is irreversible.

7.2 Location Permissions

You can revoke location permissions at any time through your device’s Settings. Without location access, some features (such as submitting reports and viewing the friends map) will be unavailable.

7.3 Push Notifications

You can manage notification preferences through your device’s Settings at any time.

7.4 Data Access and Portability

You may request a copy of the personal data we hold about you by contacting us at masonpfitz@gmail.com. We will respond within 30 days.

8. California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your information)
• Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at masonpfitz@gmail.com.

9. International Users

The App is operated from and our servers are located in the United States. If you are accessing the App from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the App, you consent to this transfer.

10. Third-Party Links

The App may contain links to third-party websites or services (for example, maps or directions providers). We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last Updated” date at the top of this page. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law provisions.

13. Contact Us

If you have any questions about this Privacy Policy, your data, or your privacy rights, please contact us:

• Email: masonpfitz@gmail.com
• Entity: Wait Watch LLC (doing business as Rally)