Privacy & child safety

Plain-English promises about the information Rally holds — written for the parents, volunteers, and organizers who use it. Last updated August 2026.

The short version

Rally helps schools and community groups run fundraisers. To do that we store the minimum we need, we never sell anyone's data, and we treat children's information with extra care: nothing about a child becomes public without a guardian's consent AND the organization's approval.

What we store

• Account basics — your name, email, and a scrambled (hashed) version of your password. We never store the password itself.
• Campaign content — stories, photos, goals, and messages your organization creates for its fundraiser.
• Giving records — who gave, how much, and when, so organizations can thank donors and issue receipts. Donors can choose to appear as “Anonymous” publicly.
• An activity log — a record of important actions (like launching a campaign or approving a page) so organizations can see who changed what.

How we protect children

• Names are shortened by design. Each campaign picks how child participants appear publicly: first name plus last initial (like “Maya T.”), first name only, or initials only. Full surnames are never shown on public pages.
• Two yeses before anything is public. A child's page, photo, or story stays private until a parent or guardian consents AND the organization reviews and approves it. Either one can pull it back down at any time.
• Children don't need accounts. A parent or guardian manages the child's page. We do not knowingly collect contact details from children.

Payments

Card numbers never touch Rally's servers — payments are handled by a dedicated payment provider, and we keep only what's needed for records (like the last four digits and the card brand). In demo and practice environments, payments are simulated: no real money moves and no real card details exist anywhere.

What we never do

• We never sell or rent personal information — anyone's, ever.
• We never show donor emails or phone numbers on public pages or feeds.
• We never run third-party advertising on campaign pages.

Your choices

You can update your name, email, and password anytime from your account page. Guardians can withdraw consent for a child's page, which takes it offline right away. If you want your account or your child's information removed entirely, ask your organization's owner or contact us and we'll take care of it.

Questions

Something unclear, or something we can do better? Reach out to your organization's Rally owner, or write to us — we read everything.