Hi App Review team, This build adds one to many team chat to Rally, a private app for paddle and tennis league players. Every account is tied to a verified player on a real, named club team; chat is strictly within a single team's roster (no DMs, no global chat, no random matchmaking, no anonymous accounts). Text-only — no media. Demo credentials are in the confidential field. Tap the Chat tab to enter a populated demo channel. Filtering objectionable material. Three layers on every message. (1) On-device wordlist runs before send and rejects slurs, threats, and sexual content. The matcher is obfuscation-resistant — it normalizes Unicode confusables, leet substitutions, repeated letters, and inter-letter punctuation, so "n!gger", "n.i.g.g.e.r", "níggér", and "k1ll y0urself" all match while names like "Fagan" and "Nigeria" don't false-positive. (2) Backend re-runs the same matcher on Stream's `message.new` webhook and soft-deletes anything that slips through, before push fanout. (3) Stream's own AI moderation runs in the Stream dashboard as a backstop. The same filter also runs on user-typed poll questions/choices and activity-feed comments. Reporting offensive content. Every other user's message has an inline Report action with a reason picker. The instant the reporter submits, the offending message disappears from their view (persisted on-device). Reports persist server-side and SMS the on-call moderator. We commit to acting within 24 hours. When the moderator takes action, the reporter receives a push confirming their report was acted on. Blocking abusive users. Every message has an inline Block action. After blocking: their existing messages disappear immediately; history endpoint excludes them on pagination; realtime messages are dropped client-side; push fanout skips a blocker. Settings → Privacy & Legal → Blocked users lets users review and unblock. Deleting your own messages. Long-press a message you sent → Delete. Server enforces owner-only; deletion fans out to all teammates in realtime; audit row written. Suspending/banning. When an admin marks an account suspended or banned, their Stream session token is revoked (any open mobile app loses its websocket); the next call to `/api/stream/token` returns 403; the chat webhook drops in-flight messages from them server-side. No long-lived bypass. Published contact info. Settings → Support opens an in-app contact form. Same Get support link on the sign-in screen. support@lovetorally.com (also at lovetorally.com). Terms + age at signup. Two explicit checkboxes required: "I confirm I am at least 13 years old" and "I agree to Rally's Terms of Use and Privacy Policy." Both links open live web pages; submit stays disabled until both are checked. Acceptance time, Terms version, and age attestation are persisted on the user. Our Terms (lovetorally.com/terms) include a Community Standards section expressly prohibiting hate speech, slurs, threats, harassment, doxxing, sexual content, and other objectionable content; reserves the right to remove content and permanently terminate offending accounts; and commits to a 24-hour review window. Verification (under 2 minutes). From Chat: tap Report on a teammate's message — it disappears from your view immediately. Tap Block on the same teammate — their previous messages disappear too. Type "k1ll y0urself" → send — rejected client-side. Long-press your own message → Delete — disappears immediately. Sign out → Sign Up; leave either checkbox unchecked — submit disabled. Defense-in-depth. Stream webhook is HMAC-SHA256 signature-verified (invalid → 401). Every moderation action writes an immutable audit row. Reports and sends are rate-limited. Follow-ups: ross@lovetorally.com. Thanks for the review. — The Rally team

- New Activity Feed to keep you up to date in one place - Filter tour feed by by Team, Series, Club, or All - Like and comment on activity

• Added Face ID for faster, more secure sign-in • Improved “Hey Rally” voice experience • New in-app notifications so you never miss an update • Visual polish and small bug fixes