Privacy & Terms

Rallio is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights under GDPR. Rallio is the data controller, is based in Lithuania, and processes data under EU law. Rallio is intended for users aged 16 and over; we do not knowingly collect data from children under 16.

Information you provide:

• Name, email address, phone number
• Date of birth, gender, skill level, city, profile photo
• Booking history and payment records
• Heart rate, calories, and workout duration — only if you connect a smartwatch (Apple Watch, Wear OS, Garmin, or Huawei) to a game or match

Collected automatically:

• Device and OS information
• Pages visited and features used
• IP address and approximate location
• Advertising click identifiers (e.g. Facebook or Google click IDs), captured only if you accept marketing cookies, used to measure ad performance

Some listings on Rallio exist before the person or club has joined us. We build them from professional information that is already published publicly. This applies to padel professionals — coaches and trainers — and to the people named as organisers on publicly listed games and tournaments.

• Coaches and trainers: name, profile photo, the club or clubs they work at, the professional description, certifications and achievements they publish, and the business contact details (phone, email) shown on those public pages
• Game and tournament organisers: the organiser name shown on the public listing, together with the venue, time and format of that listing

We take this only from sources that are public and open to any visitor:

• Padel club and arena websites, including their public coach and staff pages
• The public booking and timetable systems clubs run for their own courts and open games
• Public tournament and league listings
• Public business profiles on social media, where a club or coach publishes them as professional contact information

We use it for one purpose: to show players who coaches in their city and which games and tournaments are on, so a listing exists before every club in the market has signed up with us. We do not build profiles about anyone's private life, we do not collect special-category data, and we do not buy personal data from data brokers.

Our lawful basis is legitimate interest under Art. 6(1)(f) GDPR: running a complete, useful directory of the local padel market, balanced against the limited privacy impact of professional information the person has already published in a professional capacity. We do not use this data as a lawful basis for anything else, and we never treat public availability as consent.

If a listing about you was built this way, you can object at any time under Art. 21 GDPR — email privacy@rallio.club and we will remove it, no reason required. You can also claim the profile and control what it says. We keep a dated record of which public source every such listing came from; ask and we will tell you the source of yours. When we contact a professional for the first time, that message itself carries this notice and a one-click opt-out. If we prepare a profile this way and you never respond, we delete it after 12 months at the latest.

We use your data to:

• Process court bookings and payments
• Calculate ELO rankings
• Send booking confirmations and alerts
• Respond to support requests
• Detect and prevent fraud
• With your consent, help arena partners reach their own existing customers with ads on Meta and Google: we select matching players using profile data (e.g. city, gender, age, ELO rating), then share only an irreversibly hashed version of their email and phone number with the ad network — never the profile data itself

We never sell your data or share it in plain text with advertisers. Personalised ads are opt-in only — turn them on or off anytime in Settings → Privacy & ads. Heart rate, calories, and other health data are never used for advertising and are never shared with ad networks.

We share data only when needed to run the service:

• Payment provider (Montonio) — to process payments securely
• Arena partners — booking details for the arena you book at
• Other match participants — heart rate and workout data from a match, only if you turn on sharing for that match
• Advertising partners (Meta, Google Ads) — an irreversibly hashed version of your email and phone number, only if you opt in to personalised ads in Settings → Privacy & ads
• Analytics & monitoring (Google Analytics and Datadog on the web, Datadog in our mobile app) — usage, error, and performance data, including limited session replay on our website to help us diagnose bugs

All processors are GDPR-compliant and bound by data processing agreements.

We keep account data while your account is active. Booking and payment records are kept up to 3 years for accounting. You can delete your account anytime in Settings → Delete account.

Under GDPR you have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Data portability
• Withdraw consent at any time, including for personalised ads and marketing cookies

You can delete your account and data anytime in Settings → Delete account. To exercise any other right, email privacy@rallio.club — we respond within 30 days.

Using Rallio is also governed by our Terms of Service, which cover who you contract with when you book, payments and cancellations, ratings, conduct and liability.

Read the Terms of Service

Rallio uses strictly necessary storage for authentication. With your consent, we also use optional cookies for analytics (Google Analytics on the web) and advertising (Meta Pixel and Google Ads on the web, to measure arena partner ad performance). Our website and mobile app use Datadog to monitor performance and diagnose errors, which on the web includes limited session replay. You can manage your choices in the cookie banner or Settings → Privacy & ads.

For privacy questions or data requests, contact us at privacy@rallio.club.

For general queries, visit the Contact page.