Privacy policy
Last updated:
Rally is a family app for iPhone. A grown-up plans the family’s daily jobs, and everyone ticks off their own on the Today screen. Each tick earns points and grows the family’s Grove, a small island with a tree. This policy explains what Rally stores, who can see it and how you can delete it.
The short version
- Only the members of your family can see your family’s data. We don’t look at it unless your family asks us for help or the law requires it.
- Children don’t need an account, email address or phone number.
- Rally has no ads, no tracking and no analytics or crash-reporting tools. We don’t sell your data or share it for advertising.
- Any member can delete their account in the app, under Settings → Delete account.
- Questions? Email hello@superidea.no.
Who we are
Rally is made by Superidea AS (organisation number 927199785), Vangberg 2a, Tromsø, Norway. Superidea is the data controller for Rally, which means we are responsible for your information in Rally.
For anything about privacy, including requests to see or delete your data, email hello@superidea.no.
Accounts
Grown-ups
Grown-ups sign in with their Apple account (Sign in with Apple) or their Google account. Google Firebase Authentication handles the sign-in. From that account, Rally receives:
- an account identifier;
- an email address (with Sign in with Apple, Apple may give Rally a private relay address instead of your own);
- the name on that account.
In Rally, you choose the name the app shows for you and your cartoon look.
Children
- Children have no account, email address or phone number in Rally. A child’s phone gets a random anonymous identifier that exists only inside Rally.
- A child can join only with an invite that a grown-up in the family sends from the app, as a link, a QR code or a code. Before it joins, the phone asks “Join family name?”
- The name Rally shows for a child is either set by the grown-up in the invite or typed on the child’s phone. The child’s look is chosen in the app.
What Rally stores about your family
Rally keeps your family’s data in Google Cloud Firestore. It stores:
- Family details: the family’s name, the phone’s time zone (for example Europe/Oslo) and the family’s notification setting (Aloud, Quiet or Off).
- Members: each member’s name in the app, cartoon look and role (main user, grown-up who can plan, or child), and which family each person is in.
- Invite codes: only the family’s grown-ups can read them. A grown-up can make new codes, which ends all earlier invites.
- The plan: action titles, icons, schedules and points, who each action is for, who created it and, during a break, who covers it.
- Ticks: who ticked which action, for which day and when, the points, whether it was extra work, undos, and high fives (who cheered whom). A tick also notes when it was done together, during a Family Sprint or while it was raining, and when someone did another member’s job for them.
- Activities: a member’s activities, such as football or a parents’ meeting: the title, the days or date, the start and end time, and who added it. A child’s activity waits for a grown-up to approve it.
- Family Sprint: who started a sprint, when, for how many minutes, the teams and when it ended.
- Creatures and titles: which creatures a member has found on their island, and the title they chose to show by their name.
- Today’s skips: which of today’s jobs a member skipped, so the afternoon and evening nudges leave them out. It is replaced each day.
- Recently removed: when a grown-up removes an action, its title, who removed it and when are kept for a week so it can be put back.
- Suggestions: a child can suggest an action by typing its title, for a grown-up to approve.
- Breaks: a member, or a grown-up for them, can say they are on a break. Rally stores the reason (sick, away, holiday, busy or other), the first day and, if given, the last day. When a break ends, Rally keeps it in a short list of that member’s last 12 breaks (reason, first and last day), so the family’s lantern and records treat those days fairly. Rally also stores the day someone ended a break or answered “I’m fine”.
- Send love: a record that one member sent love to another on a given day. It contains no text.
- Push tokens: a push notification token (Firebase Cloud Messaging) for each phone, removed when that phone signs out.
“Sick” is information about health. Rally keeps it only in the member’s break and their last 12 ended breaks, and only your family sees it. Deleting the account removes it.
Who can see it, and how it’s protected
- Only the members of your family can see your family’s data. Rules on our servers enforce the boundaries between families: every read and write is checked against family membership.
- Only the family’s grown-ups can read the invite codes.
- Superidea does not look at a family’s data unless the family asks us for help with a problem or the law requires it.
- Our service providers, Google and Apple, process data for us to run Rally (see Service providers).
- Data is encrypted in transit and at rest.
Notifications
Rally’s push notifications contain names and action titles. Rally sends them, for example, when a grown-up assigns a job, when someone does something extra or helps with your job, for high fives, thanks and love, when someone covers for a person on a break, when a Family Sprint starts and when a grown-up removes an action you set up.
Kind nudges
At 3 pm and 7 pm family time, a check on our servers looks at which of a member’s jobs are still waiting and sends that member one short reminder. It stays quiet while they are on a break or at one of their activities, and it never tells the grown-ups about a child’s single missed job.
The 6 pm check
Every day at 6 pm family time, a check on our servers counts the days in a row on which someone had jobs and ticked nothing.
- After 2 days, it sends that person a gentle nudge.
- After 3 days, it asks them “Taking a break?”
- After 4 days, it tells the family’s grown-ups.
The check uses only ticks. It uses no app-opening times and no location.
Turning notifications off
You can turn off Rally’s notifications on your iPhone in Settings → Notifications → Rally. A grown-up can also set the family’s notifications to Off in the app.
Weather, Siri and calendar
- Weather: when an outdoor job is open, Rally may show a rain tip from Apple Weather for the city in your family’s time zone (for example Oslo, from Europe/Oslo). To find the forecast, the phone sends Apple the name of that city. Rally does not ask for location permission. The only thing it stores is that a tick was made while it was raining. Weather data is provided by Apple Weather, and the app shows its attribution.
- Siri and Shortcuts: “Mark an action done” and “Add a chore” run through Apple’s Siri and Shortcuts.
- Calendar: a grown-up can share an action as a calendar invite file (.ics) through the iPhone share sheet. Rally does not read your calendars.
No ads, no tracking
- Rally has no ads and no tracking.
- Rally contains no analytics or crash-reporting tools.
- We don’t sell your data, and we don’t share it for advertising.
The Google Firebase and Google Sign-In components included in the app send Google limited technical and diagnostic information about their own operation, for example to deliver push notifications and keep sign-in secure. Google describes this in its own privacy information.
Service providers and where data is stored
These companies process data for us as service providers (processors):
- Google: Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging and Firebase Hosting, and Google Sign-In if you choose it.
- Apple: Sign in with Apple, push notification delivery, Apple Weather and Siri.
Data in Cloud Firestore is stored in the United States (Google’s nam5 multi-region). Cloud Functions run in Belgium (europe-west1). Transfers to the United States rely on Google’s data processing terms, which include the EU Standard Contractual Clauses.
Legal bases
If you are in the EEA or the UK, the GDPR requires a legal basis for each way we use personal data. Rally relies on these:
- Providing the service your family asked for: accounts, the plan, ticks and notifications.
- Consent of a parent or guardian: for a child’s profile. The parent or guardian gives it by inviting the child.
- Explicit choice: for a “sick” break, the choice of the person, or of their parent or guardian. They can withdraw it at any time by ending the break.
- Legitimate interest: keeping the service secure.
Keeping and deleting data
We keep your family’s data while your family uses Rally.
Deleting your account
Any member can delete their account in the app: on the Family tab, tap the gear icon to open Settings, then tap Delete account. This removes:
- your member record (name, look and push token);
- your sign-in account;
- your pending notifications;
- the record of which family you are in.
If you were the last member, the whole family is deleted with its plan and history. If others remain, the family continues. If you were the main user, the first grown-up who can plan becomes the main user.
Your ticks, high fives and love stay in the family’s history, under an identifier that is no longer linked to any account or name.
Removing a member
A grown-up can remove a member from the Family tab. That member’s record (name, look and push token) is deleted, and the family’s invite codes change.
Recovery copies
Deleted data can remain in Google’s recovery copies for up to 7 days.
Asking us
Anyone can email hello@superidea.no to ask for a copy of their data, a correction or deletion. A parent or guardian can ask on behalf of a child.
Your rights
You have the right to:
- see the data we hold about you (access);
- get a copy of it;
- correct it (names and looks can also be edited in the app);
- have it deleted;
- object to how we use it;
- complain to a data protection authority. In Norway, that is Datatilsynet (datatilsynet.no).
To use these rights, email hello@superidea.no.
Children
- Rally is a family app used together with children. It is not a children’s app.
- Children never need an account, email address, phone number, birthdate, photo or location.
- Children see no ads and no purchases. Links out of the app (privacy, terms and help) are shown only to grown-ups.
- If you believe a child’s data is in Rally without the agreement of a parent or guardian, email hello@superidea.no and we will delete it.
Changes to this policy
When we change this policy, we update the “Last updated” date at the top. We announce material changes in the app.
Contact
Superidea ASVangberg 2a, Tromsø, Norway
Organisation number 927199785
hello@superidea.no