Privacy Policy

Rally (“Rally,” “we,” or “us”) helps parents track learning activity and manage screen time for kids on school-issued and personal devices, at home. This policy explains what information we collect across the Rally web dashboard, kids portal, browser extension, and mobile app, why we collect it, and how parents stay in control of it.

Rally accounts are created and managed by a parent or guardian. Child profiles exist only inside a parent's family account and are never independently signed up.

Parent account information — name, email address, and a securely hashed password when you sign up.

Child profile information — name, age, avatar, and coin/coins balance, set up by the parent.

Browsing & app activity — the browser extension reports the domains visited and time spent per site, plus whether a site is categorized as learning or play. We do not collect page content, search queries, keystrokes, or full URLs — only domain-level visits and durations needed to apply blocking rules and time budgets.

Assignments & gamification data — activities assigned, completions submitted for approval, coins earned and spent, streaks, and badges.

Device & technical data — a device identifier linking an installed browser extension to a child profile, and basic diagnostic logs (e.g. IP address, timestamps) used for security and troubleshooting.

• Apply the blocking rules and time schedules parents configure, and enforce coin balances in real time.
• Classify new sites and apps as learning or play, and surface unsure cases for a parent to decide.
• Track study sessions and screen time to power the Pack, Moments, and Pulse dashboards.
• Run the coins/assignments reward loop — awarding, spending, and reporting on coins.
• Send notifications for pending approvals, low coin balances, and account activity.
• Maintain account security, prevent abuse, and provide customer support.

We do not sell personal information or child data, and Rally does not run ads.

We share the minimum data necessary with:

• Apple App Store / Google Play — process Premium subscription billing. Rally never receives your payment card details.
• Hosting infrastructure (Vercel, Neon) — stores and serves Rally data on our behalf under standard confidentiality and security terms.

We may also disclose information if required by law or to protect the safety of a child or the integrity of the service.

Rally is built for parents to supervise children, including those under 13. A child never creates their own account — a parent adds each child profile and controls what data exists for it. Kids sign in with a parent-issued PIN, not an email address, and never provide payment or contact information.

A parent can view, edit, or delete any child's profile and activity data at any time from the parent dashboard, including removing a child entirely or unlinking a device.

We keep account and activity data for as long as the family account is active, so parents can see historical trends in study time, screen time, and coins. If you delete a child profile or close your account, associated personal data is removed from active systems within a reasonable period, except where retention is required for security, legal, or fraud-prevention purposes.

• Data is encrypted in transit (TLS) between Rally apps, the extension, and our servers.
• Passwords are hashed and never stored in plain text.
• Device and extension access uses scoped tokens, not shared credentials.
• Internal access to family data is limited to what's needed to operate and support the service.

Parents can access, export, correct, or delete their family's data from the dashboard, or by contacting us at support@rally.family. You can unlink a device, remove a child profile, or close your account entirely whenever you choose.

We may update this policy as Rally adds features or as legal requirements change. If we make a material change, we'll notify parents in the dashboard or by email before it takes effect.

Questions about this policy or your family's data? Email us at support@rally.family.