DraftThis wording hasn’t been reviewed by a lawyer yet and may change.
Rally is run by Caan Vilailuck (trading as Rally), the data controller for your personal data under Thailand’s Personal Data Protection Act (PDPA). Questions or requests: privacy@rallylessons.com.
Everyone: your email address (to sign you in), your name, your bookings and any fees (and, if you book for someone else, their name and whether they’re under 18), your messages (including photos and voice notes you send), the devices you allow alerts on, your alert and email settings, questions you send to the team, and a record of what you agreed to and when.
Tips in the app: which tips and getting-started steps you’ve seen, how many times each was shown, and whether and when you finished or dismissed each one, so the app doesn’t keep showing them. A tip you close without “Got it” may come back a few times before it stops. We also record whether you finished or skipped the setup steps after signing up; like the rest of your account, that can be read by the people who can already see your account (your coaches and your students, coaches you’ve opened a chat with and people who’ve opened a chat with you as a coach, people who are or were in a coach’s squad group with you and, if you’ve applied to coach, the Rally team), though the app doesn’t show it to them. All of this is kept with your account, deleted with it, and included in Download my data.
If you leave them on in Profile: when you’ve read messages, when you’re typing, and when you were last online. Each can be switched off; then you don’t see other people’s either. Photos are shrunk on your phone and their location data removed before they’re sent.
If you add a profile photo (optional, any account): one photo on your account, shrunk to a small square on your phone with its location data removed before it’s sent. Who sees it: you; if you coach, anyone while your page is live, and your students; your coaches (once they’re approved) and the members of a coach’s squad group you’re in; other players (your player profile, hitting partners, the map’s player list, player chats and groups players made) only if you switch on “Show my photo to other players” on your player profile, which is off until you do, and only while your profile is shown; if you’ve applied to coach and weren’t turned down, the team that reviews coaches (it helps them check it’s you); and, for a report about you, the team handling it, but only a photo the person reporting could see. Nobody you’ve blocked, or who has blocked you, sees it, and nobody does while your account is being deleted.
If you choose a password: your password is stored only as a one-way hash by our sign-in provider, never the password itself, so nobody at Rally can see it. When you choose one, your phone checks it against known data breaches by sending Have I Been Pwned only the first 5 characters of a one-way code made from it (with your IP address, as for any web request), never the password or your email address.
If you sign in with Google, Google tells us your email address and your name (and a link to your profile picture, which we don’t show). We never get your Google password, contacts or anything else in your Google account.
If you turn on a calendar link (Profile), we keep a fingerprint of its secret address, never the address itself, and when a calendar app last used it. The link shows only your own lessons: times, places, the lesson and the other person’s name. Turn it off and it stops working at once.
If you make a player profile (optional): a player name (your profile photo shows with it only if you choose, below), up to three districts you play in, chosen from a list (or “other”; the first is your main one), your self-rated level, a UTR if you give one (shown as self-reported), whether you play singles or doubles, a short note on when you play, whether it’s Private or Public, and whether you’re looking for a hitting partner or want your main district shown on the map. We also keep who you follow, who has asked to follow you and whom you’ve asked, and who you block, and short-lived counts of how often you use the player lists and suggestions (to stop scraping).
If you post (optional): the text of each post, up to four photos (shrunk on your phone with their location data removed before they’re sent), who it’s for (everyone or your followers), and who liked it.
Location: we never collect where you are or where you live. On the map, a player who chooses to show their district is counted at a fixed point for that district, never at a point of their own; signed-in players who tap the district see them in its list (player name, level and, if they show it to players, their photo). Coaches put a pin on the courts where they teach; that pin is public. If you use “I’m at the court” while placing a pin, your phone’s location is used once to place the pin and is not stored.
Coaches also give us a public profile (name, area and district, experience, levels taught, lessons, prices, courts and their map pins, hours, and which ways students can pay), the payment details they choose to add (such as a PromptPay number, shown only to their own students with a lesson or fee to pay for), whether they’ve marked a lesson as paid (seen only by them) and, while applying, screening information: an ID card or passport, qualifications, coaching experience, references and, for coaches of under-18s, a police criminal record certificate.
If you’re on the Rally team: your role, whether two-factor sign-in is set up, your team-alert settings, and a record of changes to the team and of the decisions you make there (who, what, when and the reason), which is kept. Team alerts about new coach applications, reports and fee reviews come to you by push and email; you can switch each kind off in the console.
To run bookings, fees, reminders and chat between you and your coach, which is the service you signed up for.
To check coaches before their page goes live. ID documents and police certificates are used only with your explicit consent, asked for separately before you upload them.
To suggest people you might want to follow and hitting partners, and to put lists of coaches and hitting partners in order, from what you’ve already chosen to share (set out under “Who sees it”). Nothing extra is stored for this.
To keep the service working, safe and secure: error reports with message and booking text removed, limits that stop spam and scraping, and acting on reports (which can include limiting an account, set out below).
Your coach or your students see your name, your bookings with each other and your messages to each other. In a group chat, the members see your messages from when they joined, and your name as set out below. Anyone with a coach’s link can see that coach’s public profile, lessons, prices, courts and cancellation policy.
The Rally team reviews coach applications. A coach’s public page shows which checks the team passed (for example identity and qualification), never the documents, notes or results behind them; checks the team waived aren’t shown. Nobody on the team reads chats or browses lessons: the team sees a lesson’s details only when a disputed fee comes to them, and a message (with its photo or voice note) only when someone reports it.
You don’t have a player profile until you make one. When you first save it, it’s shown as Private (below); you can switch it off at any time, and then only you see it. Once shown, signed-in people aged 20 and over can see it as set out below (Private or Public). A Public profile can be followed straight away and messaged by someone who also shows their profile, or when you’re looking for a hitting partner. A Private profile can only be asked to follow, and only the followers you approve, and people you already know through Rally (your coach or students, a coach’s squad you’re both in, or a group chat you’re both in), can start a new chat with you; chats that already exist carry on. Nobody you block, or who blocks you, can see it. Signed-out visitors never see player profiles, posts or the map. In a chat that started from a player profile, each of you sees the other’s player name; your account name shows beside it only to someone who already sees it, such as your coach or a student of yours. In a group a coach starts, the members see each other’s account names and photos, and the line that adds you says so; such a group only includes people connected to its members through lessons or coach chats, never someone known only from a player chat. In a group anyone else starts, being in it together shows nobody’s account name: you see a member’s account name only if you already know each other as coach and student; otherwise you see their player name, or “Rally player 1”, “Rally player 2” and so on (in the order they joined) if they have none. Coaches always appear under their coach page name. Wherever you appear by your player name or as “Rally player”, your profile photo shows only to people who already see your account name, or to everyone there if you’ve switched on “Show my photo to other players”; otherwise they see your initials.
If you follow someone or ask to, they see you by name in their followers or requests (your player name, and your photo if you show it to players, or your coach page name if you’re a coach with a live page) while your player profile is shown or your coach page is live; your level and areas only if they could see them on your profile anyway. If neither is shown, they see only a count of private followers.
A shown player profile is Private unless you make it Public. Private: other signed-in people see your player name, your photo if you show it to players, how many follow you and how many you follow, and can ask to follow you; your level, areas, when you play and your posts are for the followers you approve. Public: anyone signed in sees them and can follow you straight away; only a Public profile can be on the hitting-partner list or the map. Each post is for everyone signed in or your followers (a Private profile’s posts are for followers only); a post for everyone also shows to people who play in one of the same areas (“Near you”), and a live coach’s to people who play in their district or near their courts. Likes are counted, and only you see who liked yours. The Rally team sees a post only if it’s reported.
Rally suggests people to follow, using only what they already show: a coach you’ve booked, live coaches near your areas or teaching your level, members of a coach’s squad group you’re both in, and Public players who are on the map or the hitting-partner list, by their areas, level or listing. So if your profile is Public and on the map or the list, you may be suggested to players who share an area or level; a Private profile is suggested only to members of a coach’s squad you’re both in, by player name, and never with its areas or level. Suggestions never show who follows whom or who has lessons with whom.
If you add “When you play” times to your player profile (such as weekday evenings or weekend mornings), they’re shown to the same people who can see your full profile. They’re used to suggest hitting partners and, with how close your levels are, to decide the order of the people suggested for you to follow; if your profile is Public and on the map or the hitting-partner list, they also decide, with your level, where you appear in other people’s suggestions. Lists of coaches and hitting partners are put in order using what they already show: for coaches, how near they teach, the levels they teach, whether they have free times this week and their prices; for players, shared areas, level, “When you play” times and singles or doubles. Putting a list in order shows nothing extra about anyone.
When you contact the Rally team from Help, the team sees your name, whether you coach and what you write, not your email address, lessons or chats. If someone reports you or your player profile, the team sees a copy of the player profile and your profile photo as they were when reported, but only what the person reporting could see then, and nothing else about you. Otherwise the team doesn’t see players’ photos.
Service providers who process data for us, most of them outside Thailand: Supabase (database and sign-in, in Singapore), Cloudflare (hosting, through its worldwide network, and Turnstile, which checks when you sign in, sign up or reset your password that a person and not a bot is asking, by looking at your browser and IP address for that check only), Brevo (sign-in codes and account emails, in the EU), Resend (alert emails), Sentry (error reports, in the EU, only while error reporting is switched on), GitHub (encrypted backups, in the United States) and, if you choose to sign in with it, Google (in the United States).
If you allow alerts on a phone or computer, they travel through the push service of its maker (Apple, Google, Mozilla or Microsoft). What an alert says is encrypted so only your device can read it; the push service sees your device and when an alert is sent.
Brevo and Resend keep a log of each email they send for us (the address, when and whether it was delivered) for a limited time under their own policies.
Map tiles come from OpenFreeMap (OpenStreetMap data), delivered through Cloudflare. When you open a map, your browser asks them for the map pictures of the area on screen; like any website, they receive your IP address and that area, but nothing about your account, and no cookies.
Your account information stays while you have an account. You can delete it from Profile once nothing is open (upcoming lessons, unpaid fees or open disputes, which the app lists).
Accounts never set up are deleted after 30 days: if you sign up but never finish the first step (your name and the terms), and nothing else is linked to your account, your sign-in and profile are deleted once 30 days have passed since you signed up or last signed in.
Deleting your account removes your sign-in, email address, password, name and profile, your consents, alert devices and alerts, your questions to the team, your player profile, follows, follow requests and blocks, your posts with their photos and the likes you gave (your profile photo straight away, or within a day if that step fails, unless a report about it is still open or held) and, for coaches, your coach page and screening documents. The names of anyone you booked for are removed too.
So that the other person’s records stay complete, they keep the lessons and fee records you had together and your chat with them, including the messages you sent. You appear there as “Deleted user” (or “Former coach”), and nobody can send you new messages. When both people have deleted their accounts, those records are deleted too.
If the Rally team limited your account (after a report) and you delete it while the limit is running, or within 36 months of it ending, we keep a small safety record for 36 months, so a limit can’t be dodged by signing up again. It holds a one-way code made from your email address with a secret key (not the address itself, and it can’t be turned back into it), what was limited, a one-word reason (such as “spam”) and the start and end dates. If someone signs up again with the same email while that limit would still be running, the rest of it applies to the new account and the team is told; if it has ended, only the team is told. The team’s own record of the limit stays too, without your name, email or the written reason. Both are deleted automatically when the 36 months are up.
If a team member invites you to the Rally team before you have an account, we keep your email address with the invite to send it and to recognise you when you sign in. The invite email’s record is deleted 30 days after it was sent (or stopped); a withdrawn or expired invite is deleted 30 days after it closed. If you delete your account, any pending invite and invite email for your address are deleted at once.
Screening files: deleted 30 days after the decision on the application, 90 days after the last change to an unfinished application, or 90 days after a suspension unless it’s still being looked into.
Messages stay while the chat does, so they can settle a disputed fee or a report; there are no disappearing messages. If you edit a message, the earlier text is kept privately with it, so a report can show what was first sent. If you delete a message for everyone, nobody can see it any more, but its content is kept privately for 30 days so the people who received it can still report it, then deleted. Photos and voice notes are deleted 90 days after they were sent (30 days after you delete the message for everyone), except one that has been reported, which is kept until the report is dealt with, or for as long as the team holds the report.
Your posts, with their photos and likes, stay until you delete them or your account; a deleted post’s photos are removed within about an hour, unless a report still needs them.
Your player profile stays until you delete it (from your player profile screen) or your account. A hitting-partner listing ends by itself after 30 days unless you renew it. Your profile photo stays until you change or remove it (Profile) or delete your account; a replaced or removed photo is deleted straight away, or within a day or so, unless a report about you or your profile still needs it. Counts used to stop scraping are kept only for the current short window.
Alerts in your Alerts list are deleted 12 months after they were sent. Questions to the team are deleted 12 months after they were closed. When the team dismisses a report, its copy of the reported message (with any earlier versions, photo or voice note), post (with its photos), profile or profile photo is deleted 12 months after that decision; when the team takes action on a report, 36 months after it. If the team needs the copy for longer, for example for a police request or a repeated problem, it can hold the report, with a recorded reason, until the hold is released; the copy is then deleted under the same periods, at once if they have passed. The decision itself is kept.
Our sign-in provider keeps a log of sign-ins and code requests, with the email address and IP address, for 90 days.
Encrypted backups of the database are made every night and each is kept for 14 days. Anything deleted, including a deleted account’s data, can stay in a backup for up to 14 days before it’s gone.
You can ask to see, correct, move or delete your data, object to how we use it, and withdraw a consent you gave. Write to privacy@rallylessons.com. You can also complain to Thailand’s Personal Data Protection Committee.
You can get a copy of your data yourself at any time: Profile, “Download my data” gives you a file with your profile, lessons, the messages you sent, your posts, the likes you gave, the follow requests you sent, your alerts and settings. In the same place you can switch off lesson emails; emails about fees and your account still come.
Accounts are for people aged 20 and over. A parent or guardian books for anyone younger and names them as the player.
Caan Vilailuck (trading as Rally) · version 2026-10-26-final
Go to the start