RallyMate is operated by TBL Medical AS (org. no. via D-U-N-S 671350216), Bergen, Norway ("we"). This policy explains what data the RallyMate app collects and how it is used.
Data we collect
Account data: e-mail address, full name, nickname, nationality, and optionally a profile photo and social media handles. Sign-in is provided via Apple, Google or e-mail/password.
Content you create: chat messages, photos, car details and photos, rally programs, and reactions. Content is visible to other participants according to the app's sharing rules.
Location: only when you actively choose to share it — either as a one-time position in a chat, or as live position sharing with your rally (opt-in, time-limited, off by default). Live sharing shows a visible indicator, stops automatically at the end of the period you chose, and your position is deleted the moment sharing stops. Only members of your rally can see you. We never track your location without an active sharing choice.
Push tokens: to deliver notifications you have opted in to.
Diagnostics: anonymous crash reports and usage analytics (Firebase Crashlytics/Analytics) to improve stability.
Beta testing sign-ups
If you sign up as a beta tester on our beta page, we collect your name, e-mail address and which phone you use. We use this only to give you access to the test version, and to contact you about the beta.
iPhone: your e-mail address is used to send you a TestFlight invitation. Apple processes it under Apple's privacy policy.
Android: your e-mail address is entered into the tester list in Google Play Console, which is what lets you install the test version. Google processes it under Google's privacy policy. This is the reason the address has to be the Google account you use on your phone.
The legal basis is your consent, given when you submit the form. We never use beta sign-up addresses for marketing, and we do not pass them to anyone beyond Apple and Google as described above. Sign-up records are deleted when the beta programme ends, or immediately if you ask. To be removed at any time, write to bergetun@gmail.com.
Where data is stored
Data is stored in Google Firebase (Firestore, Storage, Authentication) in the EU region (europe-west3, Frankfurt). Google acts as our data processor.
What we do not do
We do not sell your data, show ads, or share your data with third parties beyond the processors listed above.
Your rights
You can edit your profile at any time in the app. You can delete your account and all associated data from Profile → Settings → Delete account, or see account deletion. Data protection enquiries: bergetun@gmail.com.