How Rallo handles your data.

What Rallo is

Rallo is a tennis-coaching app and web companion. You film a practice session on your iPhone, and Rallo shows the angles, timing, and contact point in your stroke so you can see your technique the way a coach does. The app is built and operated by Andrey Esipov ("we", "us"). Contact: privacy@rallotennis.com.

What we collect, and when

When you join the website waitlist

We store the email address you submit so we can send the product-launch or testing updates you requested. To prevent automated abuse and understand where a signup came from, we also store the signup time, the public Rallo hostname used, a keyed one-way hash of the request IP address, and limited browser and referring-page information. We do not store the raw IP address in the waitlist record.

When you create or use an account

• Your email address, plus a display name if you provide one.
• Your sign-in identity from Apple or Google if you choose one of those methods. Apple may give us a relay email address instead of your personal address. We never receive your Apple or Google password.
• Your eligibility record. Before signup, we use country and birth month and year to check the applicable minimum age. We do not keep the birth month or year. For eligible accounts, we keep only the country, eligibility band, policy version, and time of the check.
• Your player profile, including the tennis and measurement details you choose to provide.

When you record, save, or share a session

Pose, racket, and contact-point analysis runs on your iPhone. By default, practice clips stay on your device. A clip and its derived analysis leave your phone only when you choose to save them to your cloud library, upload them to Studio, or share a session. A cloud or shared session may include:

• the recorded practice clip;
• pose, racket, timing, and contact-point data derived on your device; and
• the report, coaching notes, and session details associated with that clip.

We also receive basic app and device information, such as app version, device model, and crash diagnostics, so we can keep Rallo reliable and secure.

What we don't collect

• Your contacts. Coach and guardian connections use invitations, not your address book.
• Health or fitness records. Rallo does not use HealthKit or read your Apple Watch.
• Your payment-card or bank details. Stripe handles web payments and Apple handles App Store payments. We receive subscription and transaction status, not your full payment credentials.
• Data for advertising. Rallo has no advertising network integrations, does not sell personal information, and does not share personal information with data brokers.

How we use your data

• To send the launch or testing updates you requested by joining the waitlist.
• To create and secure your account, check age eligibility, and provide support.
• To give you coaching analysis and let you review, sync, export, and share the sessions you choose.
• To process purchases, prevent duplicate trials, and keep verified access in sync across web and iPhone.
• To prevent abuse, diagnose failures, and understand aggregate product use.

Third parties we work with

We use service providers only to operate Rallo:

• Replit for website, API, and database hosting.
• Cloudflare for object storage and the compatibility Worker used by existing iPhone auth, install, and share flows.
• Resend for transactional account email.
• Stripe for web checkout, subscription management, and payment status.
• Apple for Sign in with Apple, App Store billing, StoreKit subscription status, and platform diagnostics.
• Google for Sign in with Google when you choose it.

These providers process data under their own privacy terms and our service arrangements. We may also disclose information when required by law or needed to protect users, rights, and service security.

Storage, retention, and security

Cloud data is encrypted in transit. Service providers may process data in the United States and other countries where they operate, subject to the protections required by applicable law.

• Waitlist records are kept until launch follow-up is complete, or deleted earlier if you ask us.
• Account and cloud-library data are kept while your account is active.
• Shared copies are kept until you revoke the share or its configured expiration and cleanup complete.
• Limited billing, fraud-prevention, dispute, security, and legal records may be kept when required after other account data is deleted.

If you request account deletion, we make the account read-only, stop renewal where we control it, retain private access through the latest verified subscription access date, and then delete the account, clips, derived data, and account-linked cloud files. Apple subscriptions must be canceled through Apple. Encrypted backups may retain copies for a limited period before they are overwritten.

We use secure transport, signed or hashed credentials, access controls, and provider security controls. No system is perfectly secure. If a breach affects you, we will notify you as required by applicable law.

Your rights

• Access, correct, or export information associated with your account.
• Delete a waitlist record by emailing us from the address you submitted.
• Delete a clip, revoke a share, or schedule deletion of your account and its data.
• Manage billing through the Stripe portal for web purchases or Apple subscription settings for App Store purchases.
• Keep clips on-device by not enabling cloud or share features.

Depending on where you live, you may have additional rights to object, restrict processing, receive portable data, or complain to a data-protection authority. We do not discriminate against anyone for exercising a privacy right.

To exercise any of these rights, email privacy@rallotennis.com.

Children's privacy

Rallo accounts and recorded-player profiles are not available to children under 13. A higher minimum applies where local law requires it. Coach and guardian accounts do not create an exception: they may connect only to a player who independently meets the applicable minimum age. If you believe we received information from a child below the applicable age, email us and we will delete it.

Changes to this policy

If we make a meaningful change, we will update the date at the top and, where appropriate, let you know on the website or in the app before it takes effect.

The current version is 1.1, effective July 11, 2026.

Contact