Rallyhaven

Privacy / Updated September 6, 2026

Your data.
Clear boundaries.

Rallyhaven processes account, exercise, device and purchase information to provide shared training exercises. It does not use advertising or cross-app tracking. Minimal pseudonymous billing records are retained separately from exercise content, including after account deletion.

Who operates Rallyhaven

Ohev Tech GmbH operates Rallyhaven. For privacy questions, access requests or deletion assistance, contact jean@ohevtech.ch. This policy describes the current TestFlight service and hosting features.

Account and shared exercise information

Sign in with Apple provides an opaque account identifier; Rallyhaven stores it and your display name, not an Apple password or payment-card number. The service stores exercise membership, roles, invitation records, scenarios, objectives, reports, exercise coordinates, optional submitted photos, resource and shelter updates, assignments, audit history, assessments and improvement actions. Authorized exercise members can access shared content according to their roles. Avoid unnecessary personal or sensitive information in training data.

Device information and notifications

The app creates an installation identifier and, with notification permission, registers an APNs device token. Registrations are associated with your signed-in session so alerts reach the correct account. We store notification preferences, inbox entries, read state, delivery attempts and error status. Presence information records last contact, pending-update counts and explicit closing confirmations; it is not proof of device availability. Apple receives device tokens and generic exercise alerts with opaque record identifiers. Lock-screen alerts do not contain the full incident report.

Purchases and hosting access

Apple processes purchases and payment details. Rallyhaven verifies signed purchase records and stores a pseudonymous account token, product and transaction identifiers, purchase environment, signature timestamp, subscription expiry/revocation state, credit consumption, free-trial usage and creation-retry records. These support hosting access, restore, refunds and prevention of duplicate credits. The token remains linkable to the same account; it is not anonymous.

Local data and exports

Authentication sessions are stored in the device Keychain. Selected exercise data and pending changes are cached locally. PDF and text exports contain exercise content you choose to share; recipients and destinations you select handle those copies under their own practices. The app does not collect background GPS. Reported coordinates describe exercise records; Apple Maps supplies map content. Uploaded photos are normalized and EXIF metadata is removed.

Service providers and hosting location

The shared API and database run on Google Cloud in us-central1 (United States). Google Cloud also provides secret storage, backups and operational logging. Apple provides authentication, StoreKit purchases, maps and APNs delivery. Requests and service logs can include technical request metadata such as IP addresses, timestamps, status codes and errors. We do not sell exercise information or use it for targeted advertising.

Retention and deletion

Account deletion removes the active account, sessions and device registrations, and deletes exercises you own. Contributions to another person's exercise may remain as shared exercise history with account references removed or replaced where supported. Recipients retain reports already exported to them. Minimal pseudonymous purchase, trial and creation-retry records are retained after deletion to reconcile purchases and prevent replay; no automatic expiry is currently configured for that ledger. The operational logging bucket retains logs for 30 days. The database is configured to retain seven scheduled backups; deleted data can remain in those backups until rotation. Contact us about retained data or deletion requests.

Your choices

You can disable device notifications in iOS settings, choose alert categories in the app, stop sharing exercise information, export reports and request account deletion. Revoking notification permission does not erase your exercise inbox. Cancelling an Apple subscription is separate from deleting your Rallyhaven account. For access, correction or deletion assistance, contact jean@ohevtech.ch.

This website

This website has no advertising, analytics scripts, tracking cookies or contact-form database. Fonts and product images are hosted with the site. The website hosting provider processes technical request information to deliver and secure pages. Emailing support sends information through your and our email providers; do not email sensitive exercise records.

Provider policies

Get help with your dataService terms