How Rallo handles your data.

What Rallo is

Rallo is a tennis-coaching app and web companion. You film a practice session on your iPhone, and Rallo shows the angles, timing, and contact point in your stroke so you can see your technique the way a coach does. The app is built and operated by Andrey Esipov ("we", "us"). Contact: privacy@rallotennis.com.

What we collect, and when

When you join the website waitlist

We store the email address you submit so we can send the product-launch or testing updates you requested. To prevent automated abuse and understand where a signup came from, we also store the signup time, the public Rallo hostname used, a keyed one-way hash of the request IP address, and limited browser and referring-page information. We do not store the raw IP address in the waitlist record.

When you create or use an account

Rallo requires a free account and sign-in before the app can be used. Rallo supports Sign in with Apple, Sign in with Google, and Continue with email. The email path can send one message containing both a six-digit code and an app-opening link, or you can use an email address and password. We never receive or store your Apple or Google password.

• Your email address, plus a display name if you provide one.
• Your sign-in identity from Apple or Google if you choose one of those methods. Apple may give us a relay email address instead of your personal address. We never receive your Apple or Google password.
• Your eligibility record. Before signup, we use country and birth month and year to check the applicable minimum age. We do not keep the birth month or year. For eligible accounts, we keep only the country, eligibility band, policy version, and time of the check.
• Your player profile, including the tennis and measurement details you choose to provide.

When you record, save, or share a session

Pose, racket, and contact-point analysis runs on your iPhone. Studio sync stays off until you make a first explicit choice on iPhone. After that, you can leave it off, allow Wi-Fi only, or allow Wi-Fi and cellular. When you have opted into Studio sync and save a Session with completed analysis, Rallo stores session metadata, an optimized cloud proxy, the pose sidecar, validated analysis facts, and a report in your Rallo Account. The original video stays on your iPhone. A Session that is withheld or does not have completed supported analysis may appear in Studio as metadata only. In that case, no video, pose sidecar, or analysis package is uploaded. A clip and its analysis may also leave your phone when you share a session. An Account or shared session may include:

• the recorded practice clip;
• pose, racket, timing, and contact-point data derived on your device; and
• the report, coaching notes, and session details associated with that clip.

We also receive basic app and device information, such as app version, device model, and crash diagnostics, so we can keep Rallo reliable and secure.

What we don't collect

• Your contacts. Coach and guardian connections use invitations, not your address book.
• Health or fitness records. Rallo does not use HealthKit or read your Apple Watch.
• Your payment-card or bank details. Stripe handles web payments and Apple handles App Store payments. We receive subscription and transaction status, not your full payment credentials.
• Data for advertising. Rallo has no advertising network integrations, does not sell personal information, and does not share personal information with data brokers.

How we use your data

• To send the launch or testing updates you requested by joining the waitlist.
• To create and secure your account, check age eligibility, and provide support.
• To give you coaching analysis and let you review, recover, export, and share eligible saved Sessions.
• To process purchases, prevent duplicate trials, and keep verified access in sync across web and iPhone.
• To prevent abuse, diagnose failures, and understand aggregate product use.

Third parties we work with

We use service providers only to operate Rallo:

• Replit for website, API, and database hosting.
• Cloudflare for object storage and the compatibility Worker used by existing iPhone auth, install, and share flows.
• Resend for transactional account email.
• Stripe for web checkout, subscription management, and payment status.
• Apple for Sign in with Apple, App Store billing, StoreKit subscription status, and platform diagnostics.
• Google for Sign in with Google when you choose it.

These providers process data under their own privacy terms and our service arrangements. We may also disclose information when required by law or needed to protect users, rights, and service security.

Storage, retention, and security

Cloud data is encrypted in transit. Service providers may process data in the United States and other countries where they operate, subject to the protections required by applicable law.

• Waitlist records are kept until launch follow-up is complete, or deleted earlier if you ask us.
• Account and cloud-library data are kept while your account is active.
• Shared copies are kept until you revoke the share or its configured expiration and cleanup complete.
• Limited billing, fraud-prevention, dispute, security, and legal records may be kept when required after other account data is deleted.

If you request account deletion, we make the account read-only, stop renewal where we control it, retain private access through the latest verified subscription access date, and then delete the account, clips, derived data, and account-linked cloud files. Apple subscriptions must be canceled through Apple. Encrypted backups may retain copies for a limited period before they are overwritten.

We use secure transport, signed or hashed credentials, access controls, and provider security controls. No system is perfectly secure. If a breach affects you, we will notify you as required by applicable law.

Your rights

• Access, correct, or export information associated with your account.
• Delete a waitlist record by emailing us from the address you submitted.
• Delete a clip, revoke a share, or schedule deletion of your account and its data.
• Manage billing through the Stripe portal for web purchases or Apple subscription settings for App Store purchases.
• Keep a practice clip on-device by not saving it to an entitled cloud library, uploading it to Studio, or sharing it.

Depending on where you live, you may have additional rights to object, restrict processing, receive portable data, or complain to a data-protection authority. We do not discriminate against anyone for exercising a privacy right.

To exercise any of these rights, email privacy@rallotennis.com.

Children's privacy

Rallo supports players under 13 through a parent's account. Every part of what follows is enforced in the app, not just described here.

A child never holds a Rallo account. If the birthday entered at sign-up is below the minimum age for that country, we do not create an account for that person. A parent or guardian creates their own account instead and adds the child as a profile inside it. The parent is the account holder throughout.

We ask your permission before we collect anything. Before Rallo records any video of a child or takes any measurement from it, we email the parent a notice describing exactly what is collected, what it is used for, who it is shared with, and how to withdraw permission. Nothing is recorded until the parent confirms, and we send a second, confirming email once they have. This is verifiable parental consent obtained by the email method described in 16 CFR 312.5(b)(2)(viii).

Until you confirm, the camera does not run for that profile. This is a restriction on recording, not merely on uploading. No video, no measurement, no coaching note.

What we collect for a child profile. A first name, a birthday, the practice video recorded in the app, the measurements taken from that video, and the coaching notes written from them. Nothing else. We do not ask a child for an email address, a phone number, a last name, a location, or a photo.

We do not share a child's data with anyone. A child profile's video, measurements, and coaching notes stay on the device and in the parent's Rallo account. They are never sent to a model provider, an analysis partner, or a third-party analytics service. Visual Coach and cloud analysis are switched off for child profiles. This is a hard boundary in the code, not a setting.

Parents keep control. From Profile → Family, a parent can see what Rallo holds for each child, withdraw permission, and delete the child's profile. Withdrawing permission stops recording immediately and deletes the child's sessions, measurements, and coaching history from their Rallo account — an active subscription does not delay it. Recordings saved on the iPhone itself are deleted from the app's session list, alongside your own; deleting the whole account removes everything on the phone in one step. You can also email privacy@rallotennis.com and we will do it for you.

If a parent never confirms, we delete the request and the email address it was sent to. We collected that address for the sole purpose of asking permission and keep it for nothing else.

Players aged 13 to 17 hold their own account, which is permitted at or above the digital age of consent in their country. During sign-up we ask for a parent or guardian's email and send them a notice explaining what Rallo does and how to have the account's data deleted. Cloud analysis stays restricted for this age group.

Country minimums. The minimum age for holding an account follows the country selected at sign-up — 13 in most places, and 14, 15, or 16 in the European countries that set a higher digital age of consent under GDPR Article 8. A 14-year-old in Germany takes the parent-account path, the same as a 10-year-old in the United States.

If you believe we hold information about your child that you did not agree to, email privacy@rallotennis.com and we will delete it.

Changes to this policy

If we make a meaningful change, we will update the date at the top and, where appropriate, let you know on the website or in the app before it takes effect.

The current version is 1.7, effective August 24, 2026.

Contact