A sub-processor is a company that handles personal information on our behalf, following our instructions, to help us run Rally & Roam. This page lists them, what each does and the information it handles. Our privacy policy explains why we use your information and your rights.

Some providers are only used where the feature that needs them is switched on, for example travel providers only when you book travel through us, and analytics only if you allow it in the cookie choices.

Running the platform

Provider	What they do for us	Information involved	Where
Our hosting provider	Runs our servers, database, file storage and backups	Everything stored on the platform	See the provider's terms
Cloudflare	Delivers the site securely, blocks attacks, runs the Turnstile check that tells people from bots, and stores uploaded videos in R2	IP address, browser details, the pages you request, Turnstile tokens, and the videos you upload	See Cloudflare's terms
Resend	Sends our emails and tells us whether each one was delivered, bounced or opened	Name, email address and the content of the email	See Resend's terms
Sentry	Reports errors from our servers so we can fix them	Technical details of the error. Names, emails and IP addresses are not sent by default	See Sentry's terms
Expo	Delivers push notifications to our mobile app	A device token and the text of the notification	See Expo's terms
Meilisearch, if in use	Search across clubs, coaches, places and guides	Public listing information and your search words	See Meilisearch's terms
ip-api.com, if in use	Works out your town from your IP address when our own city database cannot	IP address	See the service's terms
Have I Been Pwned	Checks a new password against known leaks	The first few characters of a coded version of the password, never the password itself	See the service's terms

Payments and memberships

Provider	What they do for us	Information involved	Where
Stripe	Takes card payments, runs memberships, refunds, payouts to clubs, coaches and operators, and fraud checks	Name, email, card details (entered with Stripe, not us), amounts, IP address of a payment attempt, and payout details for partners	See Stripe's terms
Apple (App Store)	Takes payment for memberships bought in our iPhone app; we check the receipt with Apple	The purchase receipt and its status	See Apple's terms
Google (Google Play)	Takes payment for memberships bought in our Android app; we check the purchase with Google	The purchase token and its status	See Google's terms

Provider	What they do for us	Information involved	Where
Google	Sign in with Google, if you choose it, and Google Wallet passes	Name, email address, an account identifier, and the booking on the pass	See Google's terms
Apple	Sign in with Apple, if you choose it, and Apple Wallet passes	Name, email address, an account identifier, and the booking on the pass	See Apple's terms

AI and video analysis

Provider	What they do for us	Information involved	Where
Anthropic	Its Claude models write replies in the trip concierge and help assistant, short notes on training plans and racket finder results, and translations of messages you ask to translate	The text you type or ask to translate, and the trip or plan details needed to answer	See Anthropic's terms
Modal	Runs our video analysis service	The video you ask us to analyse, which is deleted from the service when the job ends	See Modal's terms

Our AI features page and video and training data page explain these features.

Provider	What they do for us	Information involved	Where
PostHog	Measures which features are used and runs small tests of changes	Account number, role and language if signed in, and the pages and features used	European Union
Google Analytics	Measures visits to the site	Cookie identifiers, pages viewed and device details	See Google's terms

Travel and shop orders

When you book travel or order from our shop, these companies receive what they need to provide it. Travel providers and the airlines and hotels behind them also use the information under their own terms.

Provider	What they do for us	Information involved
Duffel	Flight and stay bookings	Each traveller's name, date of birth, gender as on their passport, email and phone
LiteAPI	Hotel bookings	Guest names and contact details
Mozio	Airport transfer bookings	Passenger names, contact details and journey details
Gelato, Printful, Inkthreadable, Teemill and Prodigi	Printing and delivering print-on-demand shop items	Name, delivery address, phone number and the order

Changes to this list

We update this page when we add or remove a provider. The date at the top shows when it last changed, and earlier versions are listed on this page. If you have a question about a provider, contact us through the Help centre once you are signed in or by following our complaints page.

Running the platform

Payments and memberships

Sign-in and wallet passes

AI and video analysis

Analytics, only with your consent

Travel and shop orders

Changes to this list

Sub-processors