Privacy Policy

Last updated August 24, 2026

Rally is an app for clubs, student organizations, fraternities, and sororities. This policy explains what Rally collects, why, who can see it, and how long it is kept.

The short version. Rally does not sell your data, does not show ads, and does not use advertising or analytics trackers. Your information is visible to your own organization and to nobody else. Location sharing is off until you turn it on, works only while the app is open, and is deleted automatically after 90 days.

What Rally collects

Data	Why
Email address	To sign you in. Rally uses an emailed one-time code, so there is no password to store.
Display name and username	So members can recognize you in chat, on the roster, and on the map.
Organization membership and role	To show you the right calendar, chats, and dues, and to control what admins and treasurers can do.
Events you create or are invited to	To run the shared calendar.
Messages you send	To deliver group chat.
Approximate or precise location	Only when you turn sharing on, to place you on your organization's map and to confirm you are at an event when you check in.
Dues charges and payment records	So members can see balances and treasurers can track who has paid.
Reports and blocks	To keep the app usable and to act on abuse.

Rally does not collect your contacts, your photo library, your browsing activity, or any advertising identifier.

Location, specifically

Sharing is off by default and must be turned on by you.
It is foreground only. Rally does not track you in the background and has no background location capability.
Ghost mode hides you from everyone immediately, without turning the feature off.
Only members of your own organization can see your position. Nobody else can, including other organizations.
Location history is deleted automatically after 90 days by a scheduled job. This is not a promise to delete on request; it happens on its own.
Rally does not calculate or display speed, driving behavior, or travel history.

Payments

Rally never sees or stores card numbers or bank details. Where card payment is offered, it is processed by Stripe, and money settles to your organization's own account. Rally is not the merchant of record. Cash and payment-app transfers are recorded manually by your treasurer, and Rally only stores the amount and the date.

Who can see your information

Members of your organization see your name, your role, your messages in shared threads, and your position on the map when sharing is on.
Admins and treasurers of your organization additionally see roster status and dues balances.
Nobody outside your organization can see any of it. This is enforced at the database level, not just in the app.
Rally does not sell, rent, or trade personal information, and does not share it for advertising.

Service providers

Rally uses a small number of providers to operate:

Supabase — database, authentication, and file storage.
Expo and Apple — app delivery and, where enabled, push notifications.
Stripe — payment processing, where card payment is offered.

These providers process data on Rally's behalf and are not permitted to use it for their own purposes.

How long data is kept

Location pings — deleted automatically after 90 days.
Messages, events, and roster records — kept while your account exists.
Dues records — may be retained by your organization in anonymized form after you delete your account, so a treasurer's ledger stays consistent. Nothing in that record identifies you.
Everything else — deleted when you delete your account.

Deleting your account

Open Settings in the app and choose Delete Account. This is available inside the app, takes effect immediately, and does not require emailing anyone. It removes your profile, memberships, messages, and location history.

Your choices

Turn location sharing on or off at any time, or use ghost mode.
Leave an organization, or delete your account entirely.
Request a copy of your data by emailing [email protected] with the subject "Data request".

Children

Rally is intended for college and university students and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has created an account, email us and we will remove it.

Security

Data is encrypted in transit. Access is restricted at the database level so that a member of one organization cannot read another organization's data. No system is perfectly secure, and we will notify affected users if we become aware of a breach involving personal information.

Changes to this policy

If this policy changes materially, we will update the date at the top and, where the change is significant, notify you in the app.

Contact

Questions about privacy: [email protected].