Privacy Policy
Last updated: March 17, 2026
The short version: We collect only what we need to run Rally. We don't sell your data. We don't track you across the internet. Your care circle information stays private.
Who We Are
Rally is operated by Kyudo Growth Pty Ltd (ABN 92 632 421 875), based in Queensland, Australia. When we say "Rally", "we", or "us", we mean Kyudo Growth Pty Ltd.
We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What We Collect
| Data | Why We Need It | Lawful Basis |
|---|---|---|
| Email address | Sign-in, account verification, notifications | Consent; necessary for service delivery |
| Display name | Shown to your circle so they know who you are | Consent; necessary for service delivery |
| Circle and task data | Core app functionality | Necessary for service delivery |
| Device push token | Send you task reminders and updates | Consent |
| Device install ID | Recognise your device for seamless access | Legitimate interest |
| Aggregate usage data | Understand how Rally is used so we can improve it (no individual identification) | Legitimate interest |
What We Don't Collect
- Your location (unless you manually enter it for a task)
- Your contacts or phone number
- Photos or media from your device
- Browsing history or app usage patterns that identify you
- Payment or credit card information (all payments are handled by Apple and Google)
- Health or medical information (Rally coordinates tasks, not care itself)
How We Use Your Data
We use your data to:
- Run the Rally app and sync your circles
- Send you task reminders you have opted into
- Notify you when helpers claim or complete tasks
- Improve Rally based on aggregate, anonymous usage patterns
- Respond to support requests
- Comply with legal obligations
We do not use your data for profiling, automated decision-making, or targeted advertising.
Who Sees Your Data
- Your circle members see your display name and tasks you interact with
- Cloud infrastructure providers (Supabase for database hosting; SiteGround for web hosting) process your data under strict data processing agreements
- Transactional email providers deliver notifications on our behalf under data processing agreements
- Nobody else — we do not sell, rent, or share your data with advertisers, data brokers, or any other third parties
Where We Store Data
Your data is stored on Supabase (database) and SiteGround (web hosting), with servers located in the United States and Australia.
Where your data is transferred outside Australia, we take reasonable steps to ensure the overseas recipient handles your information consistently with the Australian Privacy Principles, in accordance with APP 8. Our service providers are bound by data processing agreements that require them to protect your information to standards equivalent to or exceeding Australian requirements.
Data Retention
- Active accounts: Data is retained while your account is active and for the period necessary to fulfil the purposes described in this policy
- Deleted accounts: Personal data is deleted within 30 days of account deletion. Anonymised, aggregate data may be retained for product improvement
- Inactive circles: Archived after 12 months of inactivity. You will be notified before archival
Data Security
We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls limiting who within our organisation can view personal data, and regular review of our security practices.
No system is completely secure. If you believe your account has been compromised, please contact us immediately at privacy@rally-around.us.
Data Breach Notification
In the event of a data breach that is likely to result in serious harm to you, we will notify affected users as soon as practicable and no later than 30 days after becoming aware of the breach. Where required, we will also notify the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.
Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access your personal information that we hold
- Correct your personal information if it is inaccurate, incomplete, or out of date
- Delete your account and have your personal data removed from our systems
- Export your data in a portable format
- Withdraw consent for optional data processing (such as push notifications) at any time
- Complain to the OAIC if you believe we have breached your privacy
To exercise these rights, email privacy@rally-around.us. We will respond within 30 days.
If you are located in the European Union or the United Kingdom, you may also have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.
Cookies and Tracking
The Rally website uses essential cookies and privacy-conscious website analytics. We use Google Analytics 4 to understand broad website usage patterns such as page views, referral sources, and key website actions like App Store clicks or waitlist sign-ups. We have configured this to avoid advertising features and do not use social media pixels or ad retargeting trackers on the site.
We use this analytics data in aggregated form to improve the website, understand which pages and channels are working, and prioritise product and marketing decisions. We do not use website analytics to identify you personally.
Children's Privacy
Rally is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@rally-around.us and we will delete that information promptly.
Users aged 13 to 17 may use Rally with parental or guardian consent.
App availability
Rally is available on the Apple App Store. Android early access may be requested through the Rally waitlist. If you have questions about how this policy applies to Rally, please contact us.
Changes to This Policy
We may update this policy from time to time. For material changes that affect how we collect, use, or share your personal information, we will notify you by email or in-app notification at least 14 days before the changes take effect. For material changes, we will seek your active consent before continuing to process your data under the updated terms.
Non-material changes (such as clarifications or formatting updates) take effect when posted. The "Last updated" date at the top of this page will always reflect the most recent revision.
Contact Us
Privacy questions or requests? Contact us:
- Email: privacy@rally-around.us
- Mail: Kyudo Growth Pty Ltd, Brisbane, QLD 4000, Australia
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.
Your privacy matters. Rally exists to help people show up for each other — not to harvest their data.