This Privacy Policy explains how Altiora Systems LLC, a Virginia limited liability company that operates Corrally ("Corrally," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you use the Corrally mobile app for iOS and Android and the website at corrally.com (together, the "Service"). Corrally is a social app for race athletes that helps you discover races, join corrals — communities built around events — and connect with other athletes.
By creating an account or using the Service, you agree to this Policy. If you do not agree, please do not use the Service.
1. Information We Collect
Information you provide
- Account & authentication. When you sign up, we collect your email address and a password, or — if you choose Sign in with Apple or Sign in with Google — the account identifier and email those providers share with us. If you use Sign in with Apple and choose to hide your email, we receive only Apple's private relay address.
- Profile. Your username, display name, and optionally your real name, bio, profile photo (avatar), home city/region/country, experience level, and preferred sports, distances, and terrain.
- Content you create. Posts, comments, reactions, messages you send in direct messages and corrals, photos and other media you upload, and the events and corrals you save or join.
- Communications. Messages you send us (for example, to contact@altiorasystems.com) and support requests.
Information collected automatically
- Approximate & precise location. With your permission, we use your device location to show races and corrals near you and to power map and discovery features. You can grant or revoke this permission at any time in your device settings; the app works with location turned off, but nearby discovery will be limited. You may also set a home location manually in your profile.
- Device & usage data. Device model and operating system, app version, language, and basic usage and diagnostic information.
- Push notification tokens. If you enable notifications, we store a push token so we can send the alerts you opt into.
- Crash & performance data. Diagnostic logs that help us find and fix bugs and keep the Service reliable.
Permissions we may request
- Location — to find nearby races and corrals.
- Photo library / camera — only when you choose to upload an avatar or attach media.
- Calendar — only when you choose to add an event to your device calendar.
- Notifications — to deliver the alerts you opt into.
We request each permission at the point you use the related feature, and the Service remains usable if you decline.
2. How We Use Your Information
- Create and manage your account and profile.
- Provide core features — race discovery, corrals, the social feed, messaging, friendships, and saved/joined events.
- Show you relevant races, corrals, and athletes, including by location and your stated preferences.
- Send notifications and service-related communications you have enabled.
- Maintain safety and security, prevent fraud and abuse, and enforce our Terms of Service.
- Diagnose problems, analyze usage, and improve the Service.
- Comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
3. How Information Is Shared
With other users
Corrally is social by design. Your username, display name, avatar, and the content you post in corrals or the feed are visible to other users. You control much of what others see through your privacy settings in the app — for example, whether your real name or city is shown, whether you appear in search and member lists, and who may message you. Direct messages are visible to the participants of that conversation.
With service providers
We share information with vendors that operate the Service on our behalf:
| Provider | Purpose |
|---|---|
| Supabase | Account authentication, database, and media storage (backend hosting) |
| Apple | Sign in with Apple and push notification delivery (APNs) |
| Sign in with Google and Google Maps (map display and geocoding) | |
| Expo | Push notification delivery infrastructure |
These providers may process your information only to provide their services to us, under contractual confidentiality and security obligations.
For legal and safety reasons
We may disclose information if required by law or valid legal process, or where we believe it is necessary to protect the rights, safety, or property of Corrally, our users, or the public. If Corrally is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
4. Data Retention
We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal information within 30 days, except where we are required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Content you shared in shared spaces may persist in others' copies (for example, a message already received), and backups are purged on a rolling schedule.
5. Your Rights & Choices
Deleting your account. You can delete your account and its associated data at any time — directly in the app under Settings → Account → Delete account, or by requesting deletion through our web form at corrally.com/delete-account. See that page for what is removed and the timeline.
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information (much of which you can edit in-app).
- Delete your information.
- Object to or restrict certain processing, and withdraw consent (for example, by turning off location or notification permissions).
- Request a copy of your information in a portable format.
To exercise any of these rights, contact us at contact@altiorasystems.com. We will not discriminate against you for exercising your rights. You also have the right to lodge a complaint with your local data protection authority.
6. Security
We use industry-standard safeguards — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.
7. Children's Privacy
Corrally is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the minimum age required in your country, such as 16 in parts of the EU). If you believe a child has provided us information, contact us at contact@altiorasystems.com and we will delete it.
8. International Users
Corrally is operated from the United States (Virginia), and your information may be processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we rely on appropriate safeguards for international transfers.
9. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised Policy.
10. Contact Us
Questions about this Policy or your information? Email us at contact@altiorasystems.com.