Rally Text is an SMS communication platform for youth sports teams. This policy explains how we collect, use, and protect information belonging to coaches, team staff, athletes, parents, and guardians who use Rally Text.
Frequency 42 LLC ("Rally Text," "we," "us," "our") operates the Rally Text SMS communication platform and related web services at rallytext.app. This Privacy Policy applies to all data we collect through our website, platform, API, and SMS messaging system.
By using Rally Text you agree to the collection and use of your information as described in this policy. If you disagree, please do not use the service.
When coaches or administrators create a team account we collect:
When athletes, parents, and guardians join a team we collect:
To operate the service and comply with Safe Sport and A2P 10DLC regulations we log:
A team can let people who are not on its roster text the team's number to report something, such as a trail problem or a lost hiker, either through a public report line or by texting a group's report keyword. For each report we keep the message text, any photos sent with it, the sender's phone number, and the time, as part of that team's message log. Photos are stored with the team's file attachments. We forward the report by text to that group's leads (or the team's leaders), and send the sender an automatic acknowledgement, at most once an hour. The team's leads can text the sender back from the team's number about that report. Texting STOP ends all messages from that team's number. Reporters are not added to the team's roster and receive nothing beyond their report's acknowledgement and replies.
Location (optional). When a team turns it on, the acknowledgement includes a link, valid for 48 hours, where the reporter can choose to share where they are. If they allow it, the page reads their device location; they can also drop a pin on the map instead. We store the location they submit (latitude, longitude, accuracy, and whether it came from the device or a dropped pin), along with any issue type and note they add, with the report, and share it only with that team. We do not read location unless the reporter opens the link and chooses to share it. The map on that page loads from OpenStreetMap's tile servers, which receive the visitor's IP address and the map area viewed; OpenStreetMap is a separate service with its own privacy policy.
When someone opts in to an event (by texting its keyword or using its sign-up page), we keep their phone number, the races they picked, whether they are racing or following along, how they joined, and whether they chose to STAY after the event. A web sign-up is held until the person confirms by text; unconfirmed sign-ups are deleted after 24 hours. People who joined only for an event are removed from the team's list when the event expires unless they reply STAY. A results link sent to an event is a tracked short link, so the team sees how many times it was opened.
A trail organization can publish a public status page, and embed it on its own website, showing each trail's status, notes, grooming photos, and the first name and last initial of the person who posted the update. Anyone can text STATUS to the team's number for a summary; we use the number only to send that reply.
If a team turns on volunteer hours, members can log hours by text or the team can enter them. Each entry keeps the hours, the date of the work, an optional note, how it was logged, its review status and reviewer, and the volunteer's name as it was at the time. Team staff can view and export these records.
We do not use your information for advertising, marketing profiling, or sale to third parties. Email addresses collected through Rally Text are used exclusively for platform administration and support — account verification, password resets, billing notifications, and responses to your support requests. We will never send unsolicited marketing emails or share your email address with third parties for promotional purposes.
Head coaches and team administrators can see the name, phone number, and role of all verified team members. Athletes can view their own profile. Guardians can see their linked athlete's profile. Reports texted to a team (and any location a reporter chooses to share) are visible to that team's staff and are forwarded to the members the team chose to receive them.
| Provider | Purpose | Data shared |
|---|---|---|
| Telnyx | SMS delivery | Phone numbers, message bodies |
| Stripe | Payment processing | Name, email, billing address, card token |
| Cloudflare | Network security and delivery for all traffic to rallytext.app; bot protection (Turnstile) on public forms | All data in transit to and from rallytext.app (Cloudflare decrypts and re-encrypts it at its edge), IP address and browser signals |
| RackNerd | Unmanaged server hosting (we operate the servers), including the encrypted tunnel to our own AI server | All application data. Phone numbers, integration tokens and backups are encrypted; other data is protected by access controls and is not encrypted at rest |
| OpenStreetMap Foundation | Map images on report-location and public issue map pages | The viewer's IP address and the map area shown |
| HeyCatch | Website analytics on public marketing pages and the sign-in/sign-up page only | Pages visited, clicks, referring link and campaign tags, browser and device type, IP address, and a random visitor ID stored in the browser. No team data, and not loaded in the dashboard |
| Google Workspace | Transactional email | Email address, verification tokens |
| Google (OAuth, opt-in only) | Calendar push (opt-in); Google sign-in | Encrypted OAuth tokens and the connected Google account email for Calendar; your name + email for sign-in. See Google User Data section for full details. |
We share only what each provider needs for the purpose listed, and we use written data-protection terms with providers where the law requires them. Google Analytics and HeyCatch, described under Cookies, run only on our public marketing pages and receive website-visitor information, not team data.
Our Data Processing and Confidentiality Addendum, a written commitment about how we process, share and protect team data, is part of our Terms on every plan. Teams can sign a copy in Settings.
We may disclose information if required to do so by law, court order, or valid government request, or to protect the rights, property, or safety of Rally Text, our users, or the public.
If Rally Text is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify users via email before any such transfer takes effect.
We never sell personal data. We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing or commercial purposes — ever. Email communications from Rally Text are limited strictly to platform administration, account management, and support matters.
This section contains disclosures required by U.S. mobile carriers for A2P 10DLC registered messaging programs. Rally Text is a registered messaging service for communications from organizations to people who have opted in to hear from them.
Rally Text delivers recurring SMS messages from organizations that use it (sports teams, clubs, schools, congregations, nonprofits, trail organizations, and event organizers) to people who have joined or opted in: members, coaches and staff, athletes, parents and guardians, volunteers, followers, and event participants. Message types include practice and event reminders, schedule updates, cancellation notices, attendance requests, practice summaries, event and race updates, trail status and grooming updates, and acknowledgements of and replies to reports someone texted in.
Message frequency varies by team activity and season. Typical active-season frequency is 2–5 messages per week. Frequency may be higher during race weeks or emergency weather events. Off-season frequency is minimal or zero.
Msg & Data Rates May Apply. Standard message and data rates from your mobile carrier apply to all Rally Text messages.
Reply STOP to any message to unsubscribe. Additional opt-out keywords: STOPALL, CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE, OPTOUT. You will receive one confirmation and no further messages will be sent from that team's number. To resubscribe, reply START.
Reply HELP or INFO for assistance, or contact support@rallytext.app.
Available on all major US carriers including AT&T, T-Mobile, Verizon, and regional carriers.
By joining a Rally Text team, texting a team's join, event, or trail keyword, or confirming a sign-up made on a team's web form, you consent to receive recurring SMS messages from that team about what you signed up for. If you text a report to a team's number, you consent to an acknowledgement and to replies about that report. Consent is not a condition of any purchase.
Your mobile phone number is used exclusively for team communications through Rally Text. We do not share your number with third-party marketers or any party outside of that organization's staff (and, for a report, the members it chose to receive reports) and Rally Text's messaging infrastructure.
No sharing of SMS opt-in data: Information gathered through the Rally Text SMS campaign — including your mobile phone number, opt-in status, and any consent records — will not be shared with any third parties or affiliates for marketing purposes. We do not sell, rent, lease, or transfer SMS subscriber data to any third party for promotional, advertising, or marketing use. This restriction applies regardless of whether you remain an active subscriber or unsubscribe.
Rally Text's messaging service is currently available to teams based in the United States. We are working toward supporting teams and members outside the U.S. — including Canada and the United Kingdom — and this section will be updated with the applicable regional consent and disclosure requirements (including Canada's Anti-Spam Legislation, CASL) before that service becomes available to any team.
The Rally Text web dashboard uses:
SameSite=Strict and HttpOnly flags to prevent cross-site request forgery and script access. Cleared when you close your browser or sign out.Our public marketing pages (rallytext.app and related pages) use Google Analytics 4 to understand aggregate traffic and page performance. Google Analytics collects anonymized data including pages visited, session duration, and general geographic region. We do not use Google Analytics inside the authenticated dashboard. You can opt out using the Google Analytics Opt-out Browser Add-on.
The same pages also use HeyCatch to see which pages and links bring visitors to Rally Text. HeyCatch records pages visited, clicks, the referring link and campaign tags, and browser and device type, using a random visitor ID stored in your browser. It is not loaded inside the authenticated dashboard or admin pages, and we do not send it your name, email address, or any team data.
We do not use third-party advertising cookies, behavioral tracking pixels, or retargeting tools. You can disable cookies in your browser settings; this will prevent you from logging in to the dashboard.
Rally Text offers two optional OAuth integrations with Google. Both are strictly opt-in — they are never used unless you explicitly authorize the connection.
You may choose to sign in to Rally Text using your Google account instead of an email + password. This integration uses the standard openid, email, and profile scopes (non-sensitive) to verify your identity and pre-fill your name and email at signup. We do not access any other Google data through this integration. If you disconnect Google sign-in, your Rally Text account remains and can be accessed via email + password.
A head coach or team director may optionally connect their own Google account so Rally Text can keep a dedicated Google Calendar (named "RallyText – " followed by the team name) up to date with the team's schedule. This integration requests:
https://www.googleapis.com/auth/calendar.app.created: lets Rally Text create one secondary calendar and add, update and remove events on it. Google limits this permission to only calendars that Rally Text creates: Rally Text cannot see or change any other calendar or event in your Google account.openid and email: used only to show which Google account is connected and to recognise the same account if you reconnect.What is sent to Google: the details staff enter for each team event (type, title, date and time, location and staging location, directions and sign-up links, notes, group names, and whether it was cancelled and why), plus a link to the team's Rally Text calendar page. No member names, phone numbers or email addresses are ever sent to Google, and no guests are added to events, so Google never emails anyone on Rally Text's behalf.
What Rally Text reads from Google: once a day, the list of events on the Rally Text calendar, only to detect and undo edits made in Google to events Rally Text manages. Nothing is copied from Google into your team's Rally Text data. Events you add yourself to the Rally Text calendar are never changed.
What Rally Text does NOT do: it does not read any other calendar, does not share Google user data with third parties, does not sell it, does not use it for advertising, and does not use it to train artificial intelligence or machine learning models.
The OAuth refresh token and short-lived access token are encrypted at rest in our PostgreSQL database and are never written to logs. We also store the connected Google account's email address and account ID, the permissions Google granted, the ID of the calendar we created, and, for each pushed event, its Google event ID and a fingerprint of what we last sent.
Disconnect at any time from Calendar → Google Calendar → Disconnect in the Rally Text dashboard. On disconnect we revoke our access with Google (unless the same Google account is still connected to another Rally Text team, which keeps working), delete the stored tokens, account details and event IDs from our database, and stop updating the calendar. The calendar stays in your Google account unless the person who connected it ticks "also delete the Rally Text calendar from my Google account". If a team is deleted from Rally Text, its stored Google data is deleted too and the calendar stays in the connected Google account. You can also revoke access at https://myaccount.google.com/permissions. For any other deletion request, email support@rallytext.app.
Rally Text's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
All payment processing is handled by Stripe. When you subscribe to a plan or buy a credit pack:
For questions about a charge, contact support@rallytext.app. For Stripe's privacy practices, see stripe.com/privacy.
Rally Text serves youth sports teams. This means athlete data — including names and roster information — may belong to children under 13. We take this responsibility seriously.
If you believe we have inadvertently collected personal information from a child under 13 without proper parental consent, contact us immediately at support@rallytext.app and we will delete that information promptly.
We retain your data as follows:
Despite these measures, no internet transmission is 100% secure. If you discover a security issue, please report it responsibly to security@rallytext.app.
You may request a copy of your personal data at any time by emailing support@rallytext.app. We will provide a machine-readable export within 30 days.
You may update your name, phone number, and email directly from the Rally Text dashboard. Contact us if you need help correcting other information.
You may request deletion of your personal data by emailing support@rallytext.app. We will complete deletion within 30 days, except where retention is required by law (e.g., billing records) or to honor opt-out requests.
You may ask us to restrict how we use your personal data, or object to a particular use, by emailing support@rallytext.app. We will honor your request except where we have a legitimate, overriding reason to continue (for example, retaining a suppression record so we don't re-contact someone who opted out).
If you are located in the European Economic Area or the United Kingdom, the following applies in addition to the rights listed above:
California residents have additional rights under the California Consumer Privacy Act:
To exercise your California privacy rights, contact us at support@rallytext.app with the subject line "California Privacy Request."
Reply STOP to any Rally Text message at any time to stop receiving messages from that team. This is always free, always immediate, and always honored.
For privacy questions, data requests, or to report a concern:
We will respond to all privacy inquiries within 5 business days and complete requests within 30 days.
Rally Text may update this Privacy Policy from time to time. We will notify users of material changes via email at least 14 days before the changes take effect. Changes to our Data Processing and Confidentiality Addendum follow the 30-day notice described in that addendum. The updated policy will also be posted at this URL. Continued use of Rally Text after the effective date constitutes acceptance of the updated policy.