Privacy Policy

We collect information that you provide when you create and use an account.

Depending on how you use the Service, this may include:

• your name and email address;
• profile display name;
• profile photograph or avatar;
• biography;
• general location;
• gender, if you choose to provide it;
• date of birth, used to determine whether you meet RIYADA's minimum age requirement and not displayed publicly on profiles or other social features of the Service;
• fitness level;
• activity interests and preferences;
• search radius;
• profile visibility settings;
• activity and session information you create;
• photographs you upload;
• messages and other communications;
• join requests, invitations, waitlist activity, and attendance information;
• reports, safety concerns, and information you provide when contacting or reporting another user or activity.

Passwords and authentication credentials are handled through our authentication infrastructure. RIYADA does not store your password in its application data.

Your profile may contain information such as your display name, profile photograph, biography, general location, gender, fitness level, and activity interests.

You may choose whether your profile is public or private using the privacy controls provided through the Service.

A public profile may make more profile information visible to other users. A private profile limits the profile information visible to other users, although certain basic information may still be displayed where necessary to operate the Service, such as in activities or conversations in which you participate.

When you create or participate in an activity, we may process information including:

• activity title and description;
• activity type;
• date and time;
• expected difficulty or intensity;
• participant capacity;
• photographs;
• general activity location;
• precise meeting information;
• participation, attendance, invitation, request, and waitlist information.

Activities may be public or private depending on the settings selected by the host.

Location information is used to help users discover activities and coordinate real-world meetings.

You may provide a general profile location and activity locations. Activity hosts may also provide precise meeting information.

Depending on the activity's privacy settings and your participation status, the Service may distinguish between a general activity location and more precise meeting information.

For private activities, precise meeting information is restricted to authorized participants, such as the host and approved attendees. Users who are not authorized to view the precise meeting information may instead see a more general location.

Public activities may make activity-location information more broadly visible.

The Service may also provide a "locate me" feature. When you choose to use that feature, your device may provide your current location so the map can be centered around you. This location request occurs when you activate the feature and is not used by RIYADA for continuous or background location tracking.

Location services may involve third-party mapping or geocoding providers as described below.

The Service may allow users to communicate through:

• group activity chats;
• private or direct messages;
• join-request conversations;
• invitation conversations; and
• in-app notifications.

Messages and shared conversation history may remain available to other participants even after an activity is completed or cancelled or after an account is deleted.

You should not send information through the Service that you would not want retained as part of the relevant conversation history.

We do not currently provide users with the ability to edit or delete individual messages after they have been sent.

You may upload photographs or other supported content for your profile or activities. How a photograph is stored, and who can access it, depends on the type of content and the privacy settings that apply to it.

• Profile photographs are stored as publicly accessible files.
• Photographs uploaded to public activities may be stored as publicly accessible files.
• Photographs uploaded to private activities are stored as private files and are made available only to authorized users through temporary links that expire after a limited time.
• Participant-only activity recap photographs are stored as private files and are made available only to authorized participants through temporary links that expire after a limited time.

Changing a previously public activity to private does not retroactively convert photographs that were already stored as public files into private files.

Photographs uploaded before private storage became available may remain publicly accessible even if the associated profile or activity is later made private.

RIYADA can remove a photograph's association with your profile or activity within the Service. For private files, removing that association makes the photograph inaccessible through RIYADA. However, RIYADA does not currently provide a supported means to physically delete the underlying file copies from its service-provider storage, and copies may remain in storage, backups, or other retention systems.

You should not upload content that you do not have the right to use or that you do not want shared according to the applicable settings described above.

We may generate or maintain information relating to your use of the Service, including:

• activities you host or attend;
• join requests;
• invitations;
• waitlist status;
• attendance information;
• blocked users;
• saved activities or workouts;
• conversation membership;
• message read status;
• notifications;
• account and record timestamps; and
• moderation or enforcement history.

This information is used to provide, maintain, secure, and administer the Service.

Users may report another user or activity through the Service.

Reports may include information such as the identity of the reporting user, the reported user or activity, the reason for the report, additional details supplied by the reporter, relevant activity information, and information generated during our review.

Authorized administrators may review reports and maintain information regarding the status of a report, internal moderation notes, and enforcement actions.

We do not ordinarily disclose the identity of the person who submitted a report to the reported user.

Reports and moderation records may be retained where reasonably necessary for safety, abuse prevention, dispute handling, enforcement, audit, or legal compliance.

Moderation decisions in the current Service are reviewed by authorized administrators rather than being made through automated content-moderation decisions.

The Service and the infrastructure used to operate it may automatically process technical information necessary to provide, secure, and maintain the Service.

This may include information such as timestamps, authentication/session information, network requests, and technical or operational logs.

Our application also stores certain information locally on your device or browser, including authentication/session information and information used to operate particular features.

Our infrastructure and service providers may process additional technical information, such as IP addresses, browser or device information, diagnostics, security information, or usage information, as part of operating their services.

We may use information described in this Privacy Policy to:

• create and manage accounts;
• provide profiles and user settings;
• enable users to create, discover, join, and manage activities;
• provide maps and location-related functionality;
• facilitate communications between users;
• manage invitations, requests, waitlists, and attendance;
• provide saved content and other user features;
• operate reporting, blocking, safety, and moderation systems;
• investigate misuse, fraud, safety issues, or violations of our Terms or Community Guidelines;
• secure, maintain, troubleshoot, and improve the Service;
• comply with applicable law and enforce our agreements; and
• protect the rights, safety, and integrity of users, the Service, and others.

We may disclose information:

• To other users. Information may be visible to other users when necessary to provide profiles, activities, participation, attendance, messaging, and other social features. What is visible may depend on your profile settings, activity settings, and participation status.
• To service providers. We use service providers and technical infrastructure to operate functions such as hosting, authentication, storage, maps, location search, geocoding, and related functionality.
• For safety and enforcement. Information may be accessed or used by authorized administrators when reasonably necessary to investigate reports, enforce our Terms or Community Guidelines, protect users, or address safety and security concerns.
• For legal reasons. We may disclose information when reasonably necessary to comply with applicable law, legal process, enforceable governmental requests, or to protect rights, safety, and security.
• In connection with a business transaction. Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to applicable law.

The Service currently relies on third-party services and infrastructure that may process information when you use particular features.

These include:

• Base44, which provides infrastructure used for hosting, authentication, application data, backend functionality, and file storage;
• Google, for Google Sign-In and certain mapping and location-search functionality;
• OpenStreetMap-related services, for certain mapping and geocoding functionality; and
• CARTO, for certain map-display functionality.

When you interact with third-party services, those providers may process information according to their own terms and privacy practices.

We may change service providers as the Service develops.

RIYADA does not currently operate advertising networks within the Service, sell personal information, or share personal information for cross-context behavioral advertising.

If our practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law.

We retain information for as long as reasonably necessary to provide and operate the Service and for legitimate purposes such as maintaining shared activity and conversation history, safety, abuse prevention, dispute handling, enforcing our agreements, and complying with legal obligations.

Different categories of information may be retained for different periods.

Some information associated solely with your account may be deleted when you delete your account. Information that forms part of shared activity or conversation history may remain available where necessary to preserve the records of other users or the integrity of the Service.

Reports, moderation information, and certain safety or audit records may be retained where reasonably necessary for safety, abuse prevention, dispute handling, enforcement, audit, or legal compliance.

We do not promise a specific retention period for information unless one is expressly stated.

You may request deletion of your account through the account-deletion functionality provided in the Service.

When an account is deleted:

• the authentication account is deleted;
• the profile is deactivated and identifying profile information is removed or anonymized;
• personal records such as saved workouts, workout templates, notifications, and certain read-status records are deleted;
• pending participation records may be cancelled or closed;
• the user is removed from upcoming activities in which they were participating;
• upcoming activities hosted by that user may be cancelled;
• shared messages and historical activity information may remain where necessary to preserve other users' conversation or activity history, but identifying profile information associated with the deleted user may be removed or anonymized; and
• reports, moderation information, and certain safety or audit records may be retained.

Some information may also remain in service-provider systems, backups, logs, or storage where reasonably necessary for technical, security, legal, or operational purposes.

Depending on the feature, you may be able to:

• edit your profile information;
• choose whether your profile is public or private;
• choose privacy settings when creating activities;
• control what location information you provide;
• block or unblock users;
• report users or activities;
• leave activities;
• remove certain profile or activity content; and
• delete your account.

Some shared content cannot currently be individually edited or deleted after it has been submitted, including sent messages.

The Service does not currently provide an automated feature for downloading or exporting a copy of all personal information associated with your account.

RIYADA is intended only for users who are at least 18 years old. Users under 18 may not create or use an account.

RIYADA requires users to provide their date of birth as part of account setup or age verification. Date of birth is used to determine whether a user meets RIYADA's minimum age requirement and is not displayed publicly on profiles or other social features of the Service.

If the information provided indicates that a user is under 18, the user will not be permitted to complete onboarding or access the Service.

We use technical and organizational measures intended to help protect information and operate the Service securely.

However, no method of transmission, storage, or electronic processing is completely secure, and we cannot guarantee absolute security.

California residents may have rights regarding personal information under applicable California law, subject to applicable requirements, limitations, and exemptions.

Depending on the circumstances and applicable law, these may include rights to request information about personal information collected, request correction or deletion, and obtain information regarding certain disclosures or uses of personal information.

RIYADA does not currently sell personal information or share personal information for cross-context behavioral advertising.

California residents may submit applicable privacy requests or questions by contacting support@getrallyactive.com. We may take reasonable steps to verify a request before responding where required or permitted by applicable law.

The Service may be accessed from locations outside the United States.

If you access the Service from another jurisdiction, information may be processed or stored in jurisdictions different from the one in which you live.

Applicable privacy rights may vary depending on your location.

We may update this Privacy Policy as the Service, our practices, or applicable requirements change.

When appropriate, we may provide notice of material changes through the Service or by other reasonable means.

The current version and its last-updated date will be made available through the Service.

If you have questions about this Privacy Policy, RIYADA's privacy practices, your personal information, or a privacy, safety, legal, or support matter, contact us at:

support@getrallyactive.com