Privacy

What Rally keeps about you, why, who else sees it, and for how long. Last updated October 2026.

Who Rally is

Rally runs registration, scoring and stores for fitness competitions. Each event and each store belongs to an organization (the gym or organizer running it). When you register or buy, you’re dealing with that organization; Rally runs the system they use.

What Rally keeps

• Your account, if you make one: your email, your name, your date of birth (for age divisions) and a hash of your password.
• Registrations: the division you entered, the waiver you signed (with the name and date you typed, and your drawn signature if you drew one), and your scores, which are public on the leaderboard. A drawn signature is kept privately, never on a public address: you, and the organization’s admins and owners, can see it, and it’s in the copy of the waiver emailed to you (and to a guardian who signed).
• Store orders, whether or not you have an account: your email, the shipping name and address when something ships, your answers to any questions the item asks (a company name for a booth, say), what you bought and what you paid.
• Fraud checks: a keyed hash of the IP address that started a checkout and of the email it gave, and Stripe’s fingerprint of the card. These can’t be turned back into the address or the card number.

Rally never sees or keeps your full card number: Stripe takes the payment.

Who else sees it

• The organization running the event or store sees your registration or order, including your email, address and answers, to run its event and ship your order.
• Stripe processes payments, refunds and sales tax, on the organization’s own Stripe account. It receives your card details, email and, for a store order, the shipping address. When you add merch while registering, your card is kept on the organizer’s Stripe account for that second charge; Rally keeps only Stripe’s id for it, never the card.
• Printful prints and ships some store items. For those, it receives your name, shipping address and what you ordered.
• Email providers deliver Rally’s emails to you (confirmations, receipts, shipping updates).

Rally doesn’t sell your data or use it for advertising.

How long Rally keeps it

• A store order’s personal details (your name, address, answers and email) are removed 18 months after the order, once the time for a card dispute has passed. What was bought, for how much, and when stays: it’s the organization’s sales record, needed for tax and to answer a dispute.
• Your account stays until you delete it. Deleting it removes your email, name and date of birth from your account, and your personal details from your store orders. Your registrations, payments and signed waivers stay as the organization’s record; a signed waiver keeps the name, email and date of birth you signed it with, and any drawn signature, as evidence of what was agreed.

Stripe and Printful keep what they received under their own policies; Rally can’t remove it from them.

Your choices

• Remove your details from a store order yourself, from the order’s page (the link in your confirmation email), once it’s paid and has shipped.
• Delete your account from your account page.
• Ask anything else, or ask for a copy of what Rally keeps about you, at privacy@rallycompetitions.com.