Privacy and support

What Rallix stores

We use your email address and authentication information to operate your account. Your profile stores your username, display name, date of birth, self-reported tennis rating, city, and any neighbourhood, bio, or profile picture you provide. We also store your friend requests and their optional introductions, friendships, weekly time blocks and selected time zone. We store conversation messages, play invitations and responses, read progress and your message-email preference. Your date of birth is stored separately from your player profile. Please do not include sensitive information in your bio or picture.

Photos in conversations

Photos and their captions are shared within individual and group conversations with their recipients. We process images to remove embedded metadata, including GPS, and store resized copies in private storage. Messages are not end-to-end encrypted. Authorized operators may review reported content; we do not automatically moderate every image. Only send photos you have permission to share.

A sender can unsend a photo within five minutes. This queues file deletion; its caption remains in chat history. After that, recipients can retain the photo. Removing or blocking a friend stops new direct contact but keeps existing messages and photos readable. Deleting your account removes your profile; content you already shared remains for recipients as Deleted player. Each person can delete their own conversation history. Cloud photos are reclaimed when no recipient retains them. These actions cannot erase saved album copies or screenshots.

The iPhone app keeps a bounded, encrypted cache of received photos on your device to avoid repeated downloads. It clears on logout and account changes; storage pressure may evict cached files. Long-press Save to Photos creates a separate copy in your photo library with your permission. Report unwanted messages or photos through the conversation options, including after the sender deletes their account, and describe what happened. Reports do not create a separate evidence copy; deleted content may no longer be available to review.

Group conversations

A friend can add you to a group of up to 20 players. Other members can see your username, your name for that group and messages you send, even if they are not your friends. Anyone in the group can rename it or add their own friends. Joining does not give access to earlier messages. You can mute notifications or leave; leaving keeps your received history but stops new messages. Rejoining requires your acceptance and does not reveal messages sent while you were away.

Blocking stops direct contact, but you and the blocked player can still see each other’s messages in existing shared groups. Leave the group to stop receiving its messages. Group membership does not grant access to private profiles or weekly schedules. Group messages use optional push notifications, not message emails. You can report a specific message or delete your own copy through its options.

Group availability is off until you explicitly share a schedule with that group. You can copy your account schedule and edit that separate copy. Overlaps show which sharing members are available, including people who are not your friends. A member sharing broad availability may infer your shared schedule. You can stop sharing; leaving also stops sharing and removes you from future attendance. Play invitations remain in delivered chat history and do not reserve a court or change anyone’s weekly schedule.

How your information is used

We use this information to provide sign-in, account recovery, your editable tennis profile, friend requests and shared availability. Sending a request shares your display name and username with the recipient, along with any introduction you include. Introductions are visible only to the request’s sender and recipient, are not included in notification emails, and are retained with the friendship until it is removed. Once accepted, both friends can see the time blocks when they are both available. Your full weekly schedule and time zone are used to calculate these overlaps. Accepted friends can also see your current picture, display name, username, bio, self-reported rating, city and neighbourhood. Your birth date and age remain private. Availability you enter is intended to be shareable with accepted friends: a friend who enters all-week availability can infer your full schedule from overlaps. Only enter times you are comfortable sharing. Find Players is off by default. If you turn it on, signed-in players can preview your picture, name, username, rating, bio, city and neighbourhood. When someone can view your profile, they can also see which of their accepted friends are friends with you. This shows only mutual connections, not your full friends list. Blocked or restricted connections are excluded. Turning it off removes discovery access; exact-username requests and existing friendships still work. Removing a friend stops friend-only profile and shared availability access, but they can still see your discovery preview if you leave it enabled. These changes cannot erase information they already viewed or recorded. Friends can exchange messages and play invitations. Removing or blocking a friend makes the retained conversation read-only and cancels future plans. Becoming friends again enables new messages; history you deleted is not restored. Play plans do not reserve courts or change weekly schedules.

Services and cookies

Public usernames, names and bios are checked against server-side content rules. New profile pictures are resized, stripped of embedded metadata and sent to OpenAI’s moderation service for a one-time safety check before publication. We do not send your email, birth date or account credentials with that check. Private chat text, chat photos and friend-request introductions are not automatically scanned. A failed check leaves your current profile picture unchanged. Contact support@rallix.ca to question a moderation decision.

Profile pictures may be cached on your device to avoid repeated downloads. The iPhone app uses a bounded encrypted cache that clears on logout or account changes; browsers must revalidate cached pictures before reuse. Picture updates and access changes may take a short time to appear in an already-open screen.

You select a metro, municipality and neighbourhood from our launch list. We store its catalog ID and approximate area centre for matching. No location searches are sent to a geocoding provider. We do not request device location or a street address. Find Players uses distances between area centres, not homes. Previously saved location text and Geoapify area data stay unchanged until you select a launch area.

Vercel hosts the website, Supabase handles accounts, the database and private pictures, Resend delivers account emails, and Cloudflare manages our domain and provides Turnstile bot protection. These providers process information needed to deliver their services, including technical request and security logs. Information may be processed outside Canada; our current database is hosted in the United States. Authorized operators can access information when needed for support and maintenance.

Rallix uses cookies required for sign-in, sessions, and secure email-link handling. We have not added advertising or behavioural analytics. Account emails may include confirmation and password-reset messages. With message emails enabled, we send one notification per unread individual conversation period, then no more until you read that conversation. These emails include the sender’s name and a link, not message text. You can turn them off on Messages. Email already being sent may still arrive after you read a conversation or turn notifications off.

Message and friend activity emails are off by default for new accounts; existing accounts retain their preferences. Friend activity emails notify you of new requests and acceptances when enabled. Manage them separately in notification settings. Undelivered request emails are cancelled when answered or withdrawn; emails already being sent may still arrive. Repeated requests are limited to prevent email spam.

If you enable iPhone push notifications, we store your device push token, its account/session association and delivery status. Expo and Apple process that token, generic event text and account and conversation or friendship identifiers to deliver alerts and open the right screen. Push payloads exclude names, message text, locations and play times. Alerts cover unread conversations, group rejoin invitations, friend activity and play-plan changes. You can turn push off for a device in Profile → Push notifications or in iPhone Settings, independently of email choices. Logging out removes that session’s registrations. Pending delivery records are removed after two days; alerts already handed to a provider may still arrive after you read, log out or turn push off.

Your choices and account deletion

In the iPhone app, open Profile → Delete account to permanently remove your account after a recent sign-in and confirmation. Account activity stops when you confirm; cleanup normally takes a few minutes. Check deletion status in the app for confirmation. A minimal status receipt is retained for 30 days. Your profile, profile picture, friendships and schedules are removed. Messages and chat photos already shared remain in recipients’ histories under Deleted player. Your account cannot access them after deletion. You can also edit your profile and remove your picture. To request access to your information or deletion of your account, email support@rallix.ca from your account email address. We will verify the request before deleting the account, profile and profile pictures. Do not send your password or confirmation links.

We retain account and profile information while your account remains active, unless you request removal. Deleted information may remain temporarily in provider logs or existing backups according to their retention schedules. If a backup is restored, completed deletion requests must be reapplied.

Safety and eligibility

The beta is for adults 18 and older. Birth dates are self-reported; we do not verify identities or guarantee that another player is an adult. Meet at public courts, tell someone your plans, and avoid sharing home addresses. Safety settings let you block or report a player. Blocking removes the friendship, cancels future plans and hides contact and discovery between your accounts; previously viewed information cannot be recalled. Reports and restriction records are stored for operator review and are not visible to other players. Report descriptions, follow-ups and historical participant IDs remain available to authorized operators after either account is deleted, so deletion does not erase a safety report. Deleted profiles are not restored or publicly accessible. Review is manual, not an emergency service. For immediate danger, contact local emergency services. Contact support@rallix.ca about safety, account restrictions or deletion of safety records.

About this pilot

Rallix is an early personal project. Features and this notice may change as it develops. Free hosting can have interruptions, and we cannot promise uninterrupted availability or recovery of every change. Contact support@rallix.ca with questions, bugs, or privacy concerns.