Privacy Policy

Overview

Rally Text, Inc. ("Rally Text," "we," "us," "our") operates the Rally Text SMS communication platform and related web services at rallytext.org. This Privacy Policy applies to all data we collect through our website, platform, API, and SMS messaging system.

By using Rally Text you agree to the collection and use of your information as described in this policy. If you disagree, please do not use the service.

Information We Collect

Account & Team Data

When coaches or administrators create a team account we collect:

• Name, email address, and password (stored as a bcrypt hash — never plaintext)
• Team name, sport, and organization
• Role information (head coach, assistant coach, team manager, etc.)
• Billing address and payment method details (processed by Stripe — we do not store raw card numbers)

Member & Guardian Data

When athletes, parents, and guardians join a team we collect:

• Full name and mobile phone number
• Relationship to athlete (parent, guardian, legal guardian)
• Email address (optional — used for verification and account access)
• Athlete roster data (name, age group) as entered by coaching staff

Message & Activity Data

To operate the service and comply with Safe Sport and A2P 10DLC regulations we log:

• Outbound messages: body, timestamp, recipient count, delivery status
• Inbound messages: body, sender phone number, timestamp
• Keyword commands used by coaching staff
• Opt-in, opt-out, and STOP/START events
• Attendance records submitted via SMS keyword (e.g., ABSENT)
• Practice summaries submitted by coaching staff

Technical & Usage Data

• IP address and approximate geolocation (country/region only)
• Browser type, operating system, device type
• Pages visited, clicks, and session duration on the web dashboard
• API request logs for debugging and security auditing

How We Use Your Information

• Deliver the service — Route SMS messages between coaches and team members, process keyword commands, and maintain attendance and practice records
• Compliance & Safe Sport — Automatically CC verified guardians on messages sent to minors; maintain audit logs for nonprofit board and Safe Sport compliance reviews
• Account management — Send email verification, password reset, and billing notifications
• Support — Diagnose errors, respond to help requests, and investigate abuse reports
• Security — Detect and prevent unauthorized access, fraud, or abuse of the platform
• Product improvement — Analyze aggregate, anonymized usage patterns to improve reliability and add features

We do not use your information for advertising, marketing profiling, or sale to third parties.

Sharing & Disclosure

Within your team

Head coaches and team administrators can see the name, phone number, and role of all verified team members. Athletes can view their own profile. Guardians can see their linked athlete's profile.

Service providers

Each provider is bound by a data processing agreement and is prohibited from using your data for any purpose other than providing services to Rally Text.

Legal requirements

We may disclose information if required to do so by law, court order, or valid government request, or to protect the rights, property, or safety of Rally Text, our users, or the public.

Business transfers

If Rally Text is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify users via email or dashboard notice before any such transfer takes effect.

We never sell personal data.

SMS Messaging (A2P 10DLC)

Program description

Rally Text delivers recurring SMS messages from registered youth sports teams to verified team members — including coaches, athletes, parents, and guardians. Message types include practice reminders, schedule updates, event logistics, cancellation notices, attendance requests, and practice summary reports.

Message frequency

Message frequency varies by team activity and season. Typical active-season frequency is 2–5 messages per week. Frequency may be higher during race weeks or emergency weather events. Off-season frequency is minimal or zero.

Message and data rates

Msg & Data Rates May Apply. Standard message and data rates from your mobile carrier apply to all Rally Text messages.

Opt-out

Reply STOP to any message to unsubscribe. Additional opt-out keywords: STOPALL, CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE, OPTOUT. You will receive one confirmation and no further messages will be sent from that team's number. To resubscribe, reply START.

Help

Reply HELP or INFO for assistance, or contact hello@rallytext.org.

Supported carriers

Available on all major US carriers including AT&T, T-Mobile, Verizon, and regional carriers.

Consent

By providing your mobile phone number and joining a Rally Text team, you consent to receive recurring SMS messages from that team. Consent is not a condition of any purchase.

Phone number use

Your mobile phone number is used exclusively for team communications through Rally Text. We do not share your number with third-party marketers or any party outside of your team's coaching staff and Rally Text's messaging infrastructure.

Cookies & Analytics

The Rally Text web dashboard uses:

• Session cookies — Required to maintain your logged-in state. Cleared when you close your browser or sign out.
• CSRF tokens — Security cookies that prevent cross-site request forgery. Required for the service to function.
• Preference cookies — Store non-sensitive preferences such as your selected section in the dashboard. These persist across sessions.

We do not use third-party advertising cookies or behavioral tracking pixels. We may use privacy-preserving, self-hosted analytics (no third-party trackers) to understand aggregate page performance. You can disable cookies in your browser settings; this will prevent you from logging in to the dashboard.

Payment Data

All payment processing is handled by Stripe. When you subscribe to a plan or add-on:

• Your card number, CVV, and expiry are transmitted directly to Stripe's servers — they never touch Rally Text's servers
• We store only your Stripe Customer ID, subscription status, plan type, and billing cycle
• Stripe is PCI DSS Level 1 certified — the highest level of payment card industry compliance

For questions about a charge, contact hello@rallytext.org. For Stripe's privacy practices, see stripe.com/privacy.

Children's Privacy (COPPA)

• Athletes under 13 never receive a Rally Text account. They are listed on the team roster by a coach or parent, but they do not create their own login.
• Phone numbers for minors are not collected. All SMS communication goes to verified parents and guardians — not directly to minors' phones.
• Parental consent is built into the workflow: guardians verify their phone number and explicitly join the team. This verification serves as consent to receive messages on behalf of their athlete.
• Safe Sport auto-CC ensures every message directed at an athlete automatically copies a verified parent or guardian. There is no direct-message-to-minor capability.
• Roster data (athlete names, age groups) is visible only to authenticated team staff and linked guardians — never publicly accessible.

If you believe we have inadvertently collected personal information from a child under 13 without proper parental consent, contact us immediately at hello@rallytext.org and we will delete that information promptly.

Data Retention

We retain your data as follows:

• Active team data — Retained for the lifetime of your team account
• Message logs — Retained for 2 years to support audit and compliance needs, then deleted
• Attendance and practice records — Retained for 2 years or until deletion is requested
• Billing records — Retained for 7 years as required by financial regulations
• Deleted accounts — Account data is deleted within 30 days of receiving a deletion request; billing records are retained per the above
• Opt-out records — STOP logs are retained indefinitely to ensure we honor opt-outs even if you later re-join

Security

• All data in transit is encrypted using TLS 1.2 or higher
• Passwords are hashed with bcrypt (cost factor 12) — never stored in plaintext
• Phone numbers in logs are never stored in plaintext — stored as hashed references
• Database access is restricted to application servers via VPC; no public database endpoint
• API endpoints require authentication; webhook endpoints verify Twilio signatures
• Employee access to production data is role-limited and logged

Despite these measures, no internet transmission is 100% secure. If you discover a security issue, please report it responsibly to security@rallytext.org.

Your Rights

Access & portability

You may request a copy of your personal data at any time by emailing hello@rallytext.org. We will provide a machine-readable export within 30 days.

Correction

You may update your name, phone number, and email directly from the Rally Text dashboard. Contact us if you need help correcting other information.

Deletion

You may request deletion of your personal data by emailing hello@rallytext.org. We will complete deletion within 30 days, except where retention is required by law (e.g., billing records) or to honor opt-out requests.

California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know — What personal information we collect, use, disclose, and sell (we do not sell)
• Right to delete — Request deletion of your personal information
• Right to opt out of sale — We do not sell personal information
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, contact us at hello@rallytext.org with the subject line "California Privacy Request."

SMS opt-out

Reply STOP to any Rally Text message at any time to stop receiving messages from that team. This is always free, always immediate, and always honored.

Contact

For privacy questions, data requests, or to report a concern:

• Email: hello@rallytext.org
• Security issues: security@rallytext.org
• Mail: Rally Text, Inc. — Privacy, 825 N. Jefferson St., Milwaukee, WI 53202

We will respond to all privacy inquiries within 5 business days and complete requests within 30 days.

---

Rally Text may update this Privacy Policy from time to time. We will notify users of material changes via email or a dashboard notice at least 14 days before the changes take effect. Continued use of Rally Text after the effective date constitutes acceptance of the updated policy.