Privacy Policy

Ralli is built by GoodSisters, a small team that cares about your skin and your privacy. We collect only what we need to make the app work, we never sell your data, and we try to be straight with you about everything we do. This policy covers the Ralli iOS app, the Ralli web app (app.theralliapp.com), and our website (theralliapp.com).

What we collect

When you create an account and use Ralli, we collect:

• Account information: your first and last name, username, email address, and profile photo if you choose to add one. If you sign up with Google, we receive your name, email address, and Google profile photo from Google. If you sign up with email, your password is handled by Firebase Authentication and is never visible to us.
• Phone number: the phone number you give us, used so friends who have you in their contacts can find you on Ralli. See Phone number & contact sync.
• Contacts: if you choose to sync your contacts, the phone numbers in your device's address book. See Phone number & contact sync.
• Onboarding goals and daily habits: the goals you pick during setup (for example, sun protection, hydration, no picking, or even skin tone), the daily habits you choose or write in yourself, the reminder times you set, and which habits you check off each day (we keep the last 30 days). We also save a short skin concern tag that matches each goal you pick (for example, "No picking" is saved as "Acne prone" and "Even skin tone" as "Dark spots") to help personalise your recommendations. None of these are required, and none of them is a medical questionnaire.
• Bio: an optional free text field where you can tell your circle about your skin journey. Write as much or as little as you'd like, including nothing at all. Other users can see your bio; see What other users can see.
• Product activity: products you add to your routine (and whether you use them AM or PM), mark as "Want to Try," or mark as "Not For Me," plus the last 30 products you viewed so we can show them under "Recently viewed."
• Posts and ratings: product ratings and any captions you add, and the posts that appear in your followers' feeds when you rate a product or add it to a list.
• Follows: the people you follow and the people who follow you.
• Scans: text read from photos you take of a product or ingredient label (the photo itself stays on your device; see Scanning & AI processing), and a daily count of how many scans you've run, which we use to enforce a fair use limit.
• Messages: direct messages you send to other users, including product cards you share in a message.
• Reports and requests: ingredient corrections you report and products you ask us to add.
• Technical data: standard request logs (such as IP address, browser or device type, and time of request) that our hosting providers record when you use the app or visit our website.
• Waitlist email: if you sign up to our prelaunch waitlist, we store the email address you provide, the date and time you joined, which page you signed up from, and your browser's user agent (basic browser and device type).

Phone number & contact sync

Ralli is better with friends, so we help you find people you already know.

• Your phone number. We store your phone number on your account so that people who have your number in their contacts can find you on Ralli. We don't show your phone number on your profile.
• Syncing your contacts is optional. We only access your contacts if you choose to sync them and give Ralli permission on your device. You can say no and still use every other part of Ralli, and you can turn off contact access at any time in your device settings.
• What we upload. When you sync, we upload the phone numbers from your contacts to our servers and store them with your account. We compare them against the phone numbers of active Ralli users so we can show you which of your contacts are already on Ralli.
• What we use it for. Contact data is used only to find matches and suggest people to follow. We don't message your contacts, we don't sell or share your contacts, and we don't use them for advertising.
• People who aren't on Ralli. Your contacts may include people who don't use Ralli. We use their phone numbers only to check for matches, and we never contact them or build a profile about them.
• Removing your contacts. Uploaded contacts are deleted when you delete your account. To remove them sooner, email support@theralliapp.com with the subject line "Remove my contacts" and we'll delete them within 30 days.

What we don't collect

• We do not ask for your skin type, a diagnosed skin condition, or your medical history. The skin concern tags described above come only from the goals you pick.
• We do not collect payment information. There are no in app purchases.
• We do not track your location (GPS, geolocation, or background location).
• We do not upload the photos you take when you scan a product. Text is read from them on your device, and only that text is sent to us.
• We do not access your photo library beyond the single photo you choose as your profile picture.
• We do not use third party advertising trackers, ad networks, or behavioural retargeting tools.
• We do not use third party analytics platforms like Google Analytics, Mixpanel, Heap, Amplitude, or Segment.
• We do not sell, rent, or trade your personal data to anyone, ever.

How we use your data

• To run and improve the Ralli app.
• To show you personalised content (your feed, product scores, recommendations, and "Recently viewed") based on your activity and the goals you've chosen.
• To let you find friends through contact sync and to let people who have your number find you.
• To let other users follow you, see your posts, and message you.
• To show which people you follow have a product in their routine.
• To calculate community ratings and score products.
• To track your daily habits and save the reminder times you choose.
• To identify you as an admin, if applicable, and give you access to admin tools.
• To show you notifications about activity on your account, such as new followers.
• To review ingredient reports and product requests and update our product database.
• To respond to your support requests and communicate with you about Ralli.
• To detect, prevent, and address fraud, abuse, and security risks, enforce fair use limits (such as daily scan limits), and enforce our Terms of Service.

Cookies & local storage

Ralli uses cookies and similar technologies only for essential functions:

• Sign in data: Firebase Authentication stores a sign in token on your device or in your browser so you stay logged in.
• Session data: temporary data that remembers your preferences during a single visit.
• Local storage: small bits of data saved on your device or in your browser to remember things like your display settings.

We do not use advertising cookies, tracking pixels, or third party analytics cookies. You can block cookies in your browser settings, but parts of the Ralli web app (including signing in) won't work without them.

Who we share your data with

We use the following third party services to run Ralli. These are "subprocessors" in privacy terminology: they handle data on our behalf, under contract, and only for the purposes described.

• Firebase (Google): database, authentication, file storage, and server functions. Your account data, phone number, synced contacts, posts, lists, and messages are stored on Google Cloud servers.
• Google Sign In: if you choose to sign in with Google, Google shares your name, email address, and profile photo with us. Google's own privacy policy applies to your Google account.
• Google ML Kit: reads text from your scan photos. This runs on your device, and the photo is not sent to Google or to us.
• Vercel: hosts the Ralli website (theralliapp.com and app.theralliapp.com). Vercel keeps basic request logs to deliver the site and protect against abuse.
• Anthropic: when you scan a product or ingredient label, the text read from your photo is sent to Anthropic's Claude API to match the product or read the ingredient list. We also use Claude to write plain English ingredient explanations and estimate ingredient ratings. We send only label text and ingredient names, never your name, email, phone number, or contacts. Under Anthropic's commercial terms, this data is not used to train their models and is kept only for a limited period.
• The Beauty API: a licensed ingredient database we use to build our product catalog. We send only product details such as a barcode or name, never your personal data.
• Amazon Associates: product "Shop" links go to an Amazon search for that product and include our affiliate tag. When you tap one, you leave Ralli and Amazon's privacy policy applies. We don't share any of your personal data with Amazon. The link contains only the product's brand and name and our affiliate tag.

We do not sell your personal data to advertisers or anyone else. We may disclose information if required by law, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

Where your data is stored

Your data is stored on Google Cloud servers operated by Firebase, located in the United States. By using Ralli, you understand that your personal data may be transferred to, processed in, and stored in the United States, which may have different data protection laws than your country.

If you are in the European Economic Area, United Kingdom, or Switzerland, transfers of your data to the United States are made under appropriate safeguards, such as the Data Privacy Framework and standard contractual clauses where applicable.

Scanning & AI processing

You can scan a product's front label or its ingredient list with your camera. Here's what happens when you do:

• Your camera photo is processed on your device by Google ML Kit, which reads the text on the label. The photo itself is never uploaded.
• The text is sent to our servers, and from there to Anthropic's Claude API, to match it to a product in our catalog or to clean it up into an ingredient list and give it a pore score.
• Anthropic does not use this text to train its models. We send it along with no personal information attached.
• Results from an ingredient list scan are shown to you and aren't saved to our product database. Ingredient explanations and ratings we generate with AI for catalog products are saved to that product so other users see the same information.
• Some ingredient ratings and explanations are written by AI (we label these "Estimated by AI") and may contain errors. Always check the physical product label, especially for known allergens.

What other users can see

Ralli is a social app. Here's what other signed in Ralli users can see:

• Always visible: your name, username, profile photo, bio, and who you follow and who follows you. Anything you write in your bio, including any mention of a skin condition, is visible to other users.
• Posts: your ratings, captions, and product posts are visible to other users by default. You can make any individual post private from your profile.
• Lists: your Routine and Saved lists are private by default. You can make them public in your profile at any time.
• "Friends also using": when someone who follows you looks at a product, they may see that you have it in your routine, even if your Routine list is private.
• Not shown to other users: your email address, phone number, synced contacts, skin concern tags, daily habits, and habit history.
• Messages: direct messages are visible only to you and the people in the conversation.
• Blocking: you can block any user. A blocked user can't follow you, message you, or see your profile and posts, and won't be suggested to you through Find Friends or contact sync.

Data retention & deletion

We keep your data for as long as your account is active. You can delete your account at any time from your profile settings in the app. When you delete your account:

• Your profile, username, profile photo, posts, lists, and sign in account are deleted right away, and you're removed from other people's follower and following lists.
• All other data linked to your account, including your phone number, synced contacts, ratings, messages, scan records, notifications, and reports, is deleted within 30 days.
• Backup copies of deleted data, if any, are purged within 90 days.
• Community rating totals on products, and ingredient corrections that have been added to Ralli's product database, may stay in anonymised or aggregated form, no longer linked to you.
• We may keep specific information longer if the law requires it or to prevent fraud or abuse.

If you only want to leave the waitlist without joining Ralli, email us at support@theralliapp.com with the subject line "Remove from waitlist" and we'll delete your entry within 7 days.

Children's privacy

Ralli is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. We don't currently use an automated age check at signup; by creating an account, you're confirming you meet this requirement. If we learn that a user is under 13, we will delete their information promptly. If you are a parent or guardian and believe your child has given us personal data, please contact us at support@theralliapp.com and we will delete it.

If you are between 13 and the age of majority in your jurisdiction (usually 18), you may only use Ralli with the involvement and consent of a parent or legal guardian. As above, we rely on your word for this rather than checking independently. See our Terms of Service for more on age requirements.

California residents: your privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights regarding your personal information.

You have the right to:

• Know what personal information we collect, use, and disclose, and the categories of sources and third parties. The categories we collect are described in What we collect.
• Access a copy of the specific personal information we have collected about you.
• Delete personal information we have collected about you (subject to certain exceptions).
• Correct inaccurate personal information.
• Opt out of sale or sharing of your personal information. Ralli does not sell your personal information or share it for cross context behavioural advertising.
• Limit the use of sensitive personal information. Ralli uses sensitive information (such as anything you choose to say about your skin in your bio, or the skin concern tags that come from your goals) only to provide the app to you, such as showing your bio and personalising your recommendations, and not for any other purpose.
• Nondiscrimination: we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email support@theralliapp.com with the subject line "California Privacy Request". We will respond within 45 days. We may need to verify your identity by asking you to confirm information already on file.

EU, UK & Swiss residents: your rights (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you specific rights regarding your personal data:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data.
• Right to restrict processing: limit how we use your data in certain situations.
• Right to data portability: receive your data in a portable format.
• Right to object: object to certain uses of your data.
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time.
• Right to lodge a complaint with your local data protection authority.

Our legal bases for processing your personal data under GDPR are: (a) contractual necessity, to provide the service you signed up for; (b) your consent, for optional features such as contact sync, your bio, your goals and skin concern tags, and your profile photo; and (c) legitimate interest, for operational purposes like fraud prevention, security, and fair use limits. When you sync contacts, we rely on our legitimate interest in helping you find friends to process the phone numbers of your contacts, and we limit that use to matching. Where you choose to include health related information in your bio or goals, we process it based on your explicit consent, and you can edit or remove it at any time.

To exercise any of these rights, email support@theralliapp.com with the subject line "GDPR Request". We will respond within 30 days.

Your rights (everyone)

Wherever you live, you can:

• Update your name, photo, bio, goals, and habits directly in the app.
• Delete your account at any time from your profile settings.
• Make your Routine and Saved lists public or private, and make individual posts private.
• Block other users so they can't follow you, message you, or see your profile.
• Turn off Ralli's access to your contacts or camera at any time in your device settings.
• Ask us to remove your synced contacts, send you a copy of your data, or answer a privacy question by emailing support@theralliapp.com.

Security

We take reasonable measures to protect your data:

• All connections between your device and Ralli use HTTPS encryption.
• Passwords are never stored in plain text. Firebase Authentication handles sign in using industry standard hashing.
• Database security rules limit what each signed in user can read and change.
• Admin access to user data is limited to Ralli's founders.
• We use Google Cloud's infrastructure security, including encryption at rest for stored data.

No system is 100% secure, however. If we become aware of a security incident that affects your personal information, we will notify you and the relevant authorities as required by law.

Changes to this policy

We may update this policy from time to time, and we'll change the date at the top when we do. For significant changes, such as collecting new kinds of data or using it in new ways, we will notify you in the app or by email before the changes take effect.

Contact us

We read every privacy email. To contact us about anything in this policy, whether to exercise a right, ask a question, or report a concern:

• Email: support@theralliapp.com
• Mailing address: GoodSisters, Granite Bay, California, USA (full address available on request)

We respond to all privacy inquiries within 30 days, or sooner where required by law.