Trust & privacy
A gentle place, kept private on purpose.
Families share their hardest seasons in a Rally circle. We treat that trust as the most important part of what we do. This page is maintained by the Rally Around You team to answer common questions about how we handle security and privacy.
This page describes our current practices. It is not a certification or independent audit. See our privacy notice and terms of service for the governing documents.
Private by default
Every Rally circle is invite-only. Only the people the family adds can see the calendar, updates, or messages inside a circle. There are no public share links, no discoverable directory of circles, and no ads placed inside a circle.
Authentication & account access
Accounts sign in with email and password or with a supported third-party provider (e.g. Google). Passwords are hashed by our authentication provider; we never see or store raw passwords. Sessions are managed with short-lived tokens.
Data storage & hosting
Rally runs on modern managed cloud infrastructure with encryption in transit (HTTPS/TLS) between your browser and our servers, and encryption at rest for the underlying database and file storage provided by our hosting partners. Access to production data by our team is limited to what's necessary to operate and support the service.
What we collect (and what we don't)
- Account info: name, email, and the details you add to your profile.
- Circle content: the events, tasks, and messages you and your circle members create together.
- Basic analytics: how the site is used at an aggregate level, so we can make it better. We use a small number of privacy-respecting analytics providers and only after you accept our cookie banner.
- We do not sell personal data. We do not run advertising inside circles. We do not use circle content to train third-party AI models.
Subprocessors & integrations
We use a small set of trusted service providers to run Rally — hosting, database, authentication, email delivery, and analytics. Each processes only the data required to provide their service and is bound by their own security and privacy practices.
Cookies & analytics
Analytics scripts (such as Google Analytics or Microsoft Clarity) load only if you accept our cookie banner. You can decline and continue to use Rally normally — no functionality depends on analytics consent.
Retention & deletion
You can delete your account and your circle content from your account settings. When you do, we delete or anonymize your data on a rolling basis, subject to short retention windows in backups and to any legal obligations.
Privacy requests
To request a copy of your data, correction, or deletion, email privacy@rallyaroundyou.com. We aim to respond within 30 days.
Reporting a security issue
If you believe you've found a security vulnerability, please email security@rallyaroundyou.com with the details. We appreciate responsible disclosure and will acknowledge your report promptly.
Shared responsibility
Rally provides the platform. Families and coordinators decide who joins each circle and what to share inside it. Keeping your account and invite links private is a shared responsibility — please invite only people you trust.
You don't have to do this alone
No one should have to ask for help alone.
Start your first Rally today. It takes less than a minute, and your people are already waiting to show up.