Privacy Policy — Rallva

1. Who We Are

Rallva ("we," "our," or "us") operates the Rallva platform at rallva.com — a social network for tennis players, coaches, and businesses. This Privacy Policy explains how we collect, use, and protect your personal data.

For questions, contact us at privacy@rallva.com.

2. Data We Collect

Account data: name, email address, password (hashed), account type.
Profile data: bio, location, UTR/NTRP rating, certifications, photos, and videos you upload.
Usage data: pages visited, features used, timestamps, and IP address.
Communications: messages sent to other users through the platform.
Payment data: processed by Stripe — we do not store raw card numbers.
Waitlist: email address if you sign up for early access.

3. How We Use Your Data

To provide and improve the Rallva platform.
To match you with players, coaches, and courts near you.
To process payments and bookings.
To send transactional emails (booking confirmations, account notices).
To prevent fraud and enforce our Terms of Service.
To comply with legal obligations.

We do not sell your personal data to third parties.

4. Data Sharing

We share data only with:

Supabase — database and authentication infrastructure.
Stripe — payment processing.
Vercel — hosting and CDN.
UTR Sports — if you link your UTR account (with your consent).
Law enforcement, when legally required.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and associated data.
Restrict or object to certain processing.
Port your data in a machine-readable format.
Opt out of sale of personal information (we do not sell your data).
Non-discrimination for exercising your privacy rights (CCPA).

To exercise any of these rights, email privacy@rallva.com. We will respond within 30 days.

6. Cookies

We use strictly necessary cookies for authentication (session tokens) and security. We do not use advertising cookies or third-party tracking pixels.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., payment records for 7 years per financial regulations).

8. Children's Privacy (COPPA Compliance)

Rallva does not knowingly collect personal information from children under 13. If a child under 13 attempts to register, they are blocked immediately and directed to a Family Account option managed by a parent or guardian.

For users aged 13–17, parental or guardian consent is required before account activation. The teen's account remains inactive until a parent or legal guardian approves it via a verification link sent to their email. Teens cannot send or receive direct messages, and their profiles are private by default.

Junior profiles (children under 13 managed by a parent via a Family Account) collect only: first name or nickname, date of birth, and tennis level. No email address, phone number, or personal contact information is collected from the child directly. Junior profile data is visible only to the parent/guardian and any coach assigned by the parent.

Parents may request deletion of their child's data at any time by contacting privacy@rallva.com. We will delete the data within 30 days of the verified request.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use after changes constitutes acceptance.

10. Contact

Rallva — privacy@rallva.com
Contact form