Legal
Privacy Policy
Effective October 27, 2026
BadRally is a badminton matchfinding app for players in the United States, operated by Daniel Wu(“we”, “us”). This policy explains what information the app collects, why, who helps us process it, and the choices you have. We have tried to write it the way we would explain it to a friend at the court.
The short version: we collect only what the app needs to work, we never show ads, we never track you across other apps or websites, and we never sell your data. You can delete your account and everything in it from inside the app at any time.
What we collect
| Information | Why we need it |
|---|---|
| Email address | To sign you in with a one-time code, send account emails (sign-in codes, replies to your suggestions), and recover your account. Shown to no other user. |
| Name | Shown on your profile, in player lists, in conversations, and on match records so other players know who they are playing. You choose what to enter; a first name or nickname is fine. |
| Approximate location | Your city, state, and ZIP code, plus coordinates rounded to about one kilometre (two decimal places). We use it to show players and courts near you and to display a distance like “4 mi”. We never store your precise location or a location history. You can enter a ZIP code instead of using device location. |
| Profile photo and bio | Optional. Shown to other players alongside your name and skill level. |
| Skill level and preferences | Your answers to the skill quiz, resulting level, and preferred formats (singles/doubles), used to filter and match players. Quiz answers are private; the level is public. |
| Messages | Direct messages you send and receive in the app, stored so both participants can read the conversation on any device. Messages are visible only to the people in that conversation and, if a report is made, to us for review. |
| Match records | Matches you log: scores, date, format, venue, notes, and the players or guests involved. Shared with the other BadRally players named in the match. |
| Session plans | Venues, dates, and times you plan to play, so the app can show them back to you and show other players how busy a time slot looks (counts only, never names). |
| Purchase records for tips | If you leave a tip through the App Store, we record the product tier, date, and Apple's transaction identifier so we can say thank you and reconcile with Apple. We never see your card number or Apple ID password. |
| Push notification token | A device token issued by Apple and Expo so we can notify you about new messages. It identifies your device for notifications only. |
| Suggestions you send | Text you submit through the in-app suggestion box, with your email address so we can reply. |
We also keep ordinary technical records needed to run and secure the service, such as the time you signed in and basic error logs. We do not use analytics SDKs, advertising identifiers, or fingerprinting.
How we use it
- To run the app: sign you in, show you nearby players and courts, deliver messages, and keep your match history.
- To keep the community safe: review reports of harassment or fake profiles and enforce our Community Guidelines.
- To talk to you: sign-in codes, replies to your suggestions and support requests, and rare service notices (for example, a change to this policy). We do not send marketing email.
- To improve the app, using aggregated counts (how many players are in a metro, which features are used). Never to profile individuals.
What we do not do
- No ads. BadRally has no advertising and no ad networks.
- No tracking. We do not track you across other companies' apps or websites, and we do not request Apple's App Tracking Transparency permission because we have no use for it.
- No sale of data. We do not sell, rent, or trade your personal information, and we do not share it with data brokers.
Who processes your data
A few service providers handle data on our behalf, under contracts that limit them to providing the service to us:
- Supabase (database, authentication, file storage; hosted in the United States): stores your account, profile, photo, messages, matches, and plans.
- Resend (transactional email): sends sign-in codes and suggestion-box emails.
- Apple: Sign in with Apple, In-App Purchases for tips, and Apple Push Notification service. Apple's own privacy policy applies to those services.
- Expo (push notification delivery): routes notifications to Apple using your push token.
We may disclose information if the law requires it, to protect the safety of players, or as part of a sale or merger of the service (in which case this policy continues to apply to your data). Otherwise we share nothing with third parties.
What other players can see
Your public profile shows your name, photo, bio, skill level, preferred formats, city and state, approximate distance from the viewer, and match results that involve other BadRally players. Your email address, exact coordinates, ZIP code, quiz answers, push token, and purchase records are never shown to other users.
How long we keep it
- Account data (profile, photo, messages, matches, plans) is kept while your account exists.
- Deleting your account permanently removes your profile, photo, messages, match participation, plans, and push token from our database within 30 days; most of it is removed immediately. Messages you sent to others are removed from their conversation view. Matches you logged with other players keep the score but no longer link to you.
- Purchase records are kept for seven years for tax and accounting purposes, without your profile attached.
- Suggestions and support emails are kept for up to two years so we can follow up.
- Backups are rotated automatically within 30 days.
Deleting your account
In the app, go to Profile → Account → Delete account. Deletion happens immediately and cannot be undone. If you cannot access the app, email daniel@keepersgrove.com from the address on your account and we will delete it for you.
Security
Data is encrypted in transit (TLS) and at rest. Database access is restricted with row-level security so that, for example, a message is only readable by its two participants. Sign-in uses one-time codes or Sign in with Apple; we never store a password. No system is perfectly secure, so please contact us right away if you suspect a problem.
Children
BadRally is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email us and we will delete it promptly.
Your rights (including CCPA and GDPR)
Wherever you live, you can see, correct, download, or delete your information. Most of this you can do yourself in the app (edit your profile, change your location, delete your account). If you are a California resident, the CCPA gives you the right to know what personal information we collect and how we use it, to delete it, to correct it, and to not be discriminated against for exercising those rights; we do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of. If you are in the European Economic Area or the United Kingdom, the GDPR gives you rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority; our legal bases are performance of our contract with you (running the app), legitimate interests (security and abuse prevention), and consent (optional photo and bio). To exercise any right, emaildaniel@keepersgrove.com. We will respond within 30 days and will not charge a fee. We will verify requests by asking you to write from the email address on your account.
Changes to this policy
If we change this policy in a meaningful way, we will update the date at the top and tell you in the app or by email before the change takes effect. The current version is always atbadrally.io/privacy.
Contact
Daniel Wu, operator of BadRally
daniel@keepersgrove.com