Privacy Policy

1. The short version

• When you request AI analysis, your session video is uploaded to our servers and processed to detect rallies. The full-resolution upload is deleted after processing, but a compressed 720p copy is saved to our cloud storage so you can replay it and restore it on a new device — kept for 7 days on the free plan, or for as long as your subscription is active on a paid plan. You can delete it anytime from the app.
• Analysis runs on AI models we developed ourselves, on our own cloud infrastructure. Your video is never sent to any external AI provider and is never used to train AI models.
• You can browse the app as a Guest with local-only data; AI analysis and cloud storage require signing in.
• If you sign in, we sync your session records and settings so they're available on your other devices.
• Subscriptions are processed by Apple/Google; we never see your card details. Purchase state is managed through RevenueCat.
• We don't sell your data, we show no ads, and we don't use your data for advertising or cross-app tracking.

2. Information we collect

2.1 Account information

If you sign in with Google or Apple, we receive your email address and display name from that provider through our authentication service (Supabase Auth). We never see or store your Google/Apple password.

2.2 Content you create

• Session records: title, activity type (Match, Rally, Lesson, Practice), tags, notes, match score, win/loss, and duration.
• Video files (for analysis): when you attach a video and request analysis, the file is uploaded over an encrypted connection to our processing servers (Google Cloud) and analyzed to detect rally segments. The full-resolution upload used for processing is deleted afterwards, but a compressed 720p copy is saved to our cloud storage so you can replay and re-download your analyzed videos (see “Cloud backup” in 2.3 and retention in section 6). Your original full-resolution video always stays on your device.
• Analysis results: the detected rally segments (start/end timestamps), the video duration, and any custom segments/clips you create (label, start/end time, favorite status).
• Profile settings: your self-reported NTRP rating, custom tags, and tag colors.
• Contact messages: if you use the in-app "Contact Us" form, we receive your message and, optionally, an email address to reply to.

2.3 How video analysis works (and what happens to your video)

Because your match videos are the most sensitive data we handle, here is the exact lifecycle:

• Upload: when you request analysis, the video is transferred over an encrypted (TLS) connection to a private storage bucket on Google Cloud that only our analysis service can access. It is never made public.
• Processing: the video is analyzed by AI models developed in-house by us, running on our own cloud servers. No external or third-party AI service (such as an LLM or vision API provider) ever receives your video or frames from it.
• Processing copy deleted: the full-resolution copy uploaded for analysis is deleted automatically once processing finishes, whether the analysis succeeds or fails.
• Cloud backup (“keep”): after a successful analysis we save a compressed 720p copy of your video, plus a poster image and per-rally preview thumbnails, to our private cloud storage (Cloudflare) so you can replay your session and restore it after reinstalling the app or switching devices. On the free plan this copy is kept for 7 days and then deleted automatically; on a paid plan it is kept while your subscription is active, and is scheduled for deletion after a short grace period if you cancel. This copy is private to your account, and you can delete it yourself at any time from the app.
• No training: we do not use your videos, frames, or any content derived from them to train or improve AI models.
• No human review: our staff do not watch your videos. Limited technical access may occur only if strictly necessary to investigate a processing failure or abuse, and is logged.
• Your original stays with you: the full-resolution video on your device is untouched; sharing a highlight exports a clip locally on your device and goes only where you choose to send it.

2.4 Purchase information

If you subscribe to a paid plan, payment is handled entirely by the App Store or Google Play — we never see or store your card details. To activate your plan across devices we process your subscription state (plan, purchase and renewal events), a user ID, and a device identifier through RevenueCat, our subscription-management provider. We also track how much monthly analysis time you've used to enforce your plan's quota.

2.5 Automatically collected information

Standard, non-identifying technical information (app version, OS version) may be used for stability and debugging purposes.

3. How we use your information

• To provide the core features of the app: AI rally detection on uploaded videos, segment editing, highlights, and session history.
• To sync your session records and settings across the devices you sign in on.
• To manage your subscription and enforce your plan's monthly analysis-time quota.
• To respond to support requests submitted through the Contact form.

4. Where your data is stored

Your original full-resolution video files stay in the app's private storage on your device and are deleted when you uninstall the app. Data created in Guest mode stays on your device only.

Videos submitted for analysis are processed on Google Cloud infrastructure; the full-resolution upload is deleted automatically once processing finishes.

After a successful analysis, a compressed 720p copy of your video, a poster image, and per-rally thumbnails are stored in our private cloud storage on Cloudflare, so you can replay and restore your sessions across devices. Access is restricted to your own account. This copy is deleted after 7 days on the free plan, or when your subscription ends (after a short grace period) on a paid plan — see section 6.

If you sign in, your session metadata, settings, subscription state, and contact messages are stored with Supabase, our database and authentication provider, which enforces per-user access controls so only you can read or write your own records.

5. Third-party services

We use a small number of service providers (processors) to operate OverRally. Each receives only the data required for its role:

• Supabase (authentication & database): your account identity (email, display name, user ID), session records and settings, subscription state, and contact messages. Privacy policy
• Google Cloud (video processing infrastructure): the video you submit for analysis, held temporarily as described in section 2.3, and the analysis compute. Privacy policy
• Cloudflare (cloud storage & delivery for the backup copy): the compressed 720p copy of your analyzed video, its poster image, and preview thumbnails, stored privately and served back only to your account, with the retention described in sections 2.3 and 6. Privacy policy
• RevenueCat (subscription management): your user ID, a device identifier, and purchase/renewal events. RevenueCat never receives your videos, session content, or payment card details. Privacy policy
• Apple App Store / Google Play (payments): subscription billing is handled entirely by the store you purchased through; we never see your payment details.
• Google Sign-In / Sign in with Apple (optional login): used only to authenticate you; governed by their own terms when you use them.

No external AI providers. The AI that analyzes your videos is developed and operated by us; we do not pass your videos or personal data to third-party AI/model providers.

Some providers above process data outside your country (for example, RevenueCat in the United States). We rely on their standard contractual safeguards for such transfers. We do not sell your personal data, share it with advertisers or data brokers, or disclose it to anyone else except when required by law.

6. Data retention

• Uploaded videos (processing copy): the full-resolution upload is deleted automatically as soon as processing completes (success or failure).
• Cloud backup copy (720p video, poster, thumbnails): on the free plan, kept for 7 days after analysis, then deleted automatically. On a paid plan, kept for as long as your subscription is active; if you cancel or your subscription lapses, it is scheduled for deletion after a short grace period. You can delete it sooner from the app at any time.
• Session records, settings, subscription state: retained until you delete them in-app or delete your account, at which point they are permanently removed.
• Contact messages: retained only as long as needed to handle your request.
• Local device data (original videos, thumbnails): retained on your device until you delete it in-app or uninstall the app; we cannot access or delete it remotely.

7. Your rights and choices

• Delete individual sessions, segments, or tags at any time from within the app.
• Delete your account entirely from Settings → Account → Delete Account, which permanently removes your cloud-synced data.
• Uninstall the app to immediately remove all local data, including video files.
• Contact us at any time to request deletion or ask questions about your data.

See our Delete Account & Data page for step-by-step instructions.

8. Children's privacy

OverRally is not directed at children under 14, and we do not knowingly collect personal information from them.

9. Changes to this policy

If we make material changes to this policy, we'll notify you in-app at least 7 days before they take effect.

10. Contact