Privacy policy

Who decides about your information

Your organization (the church, venue or company you started or joined) decides what goes into RallyComs and who on the team can see it. RallyComs keeps and handles that information for your organization. Questions about what your team records are best asked of your team lead or your organization's owner first.

What RallyComs keeps

• Your account: name, email, password (stored only as a one-way scramble that nobody can read back), phone number if you add one, profile photo, and your roles and teams.
• What your team writes: incident reports and the people named in them, photos, chat messages, alerts and who answered, schedules and check-ins, and playbook documents.
• Your phone: a push token so RallyComs can send you alerts. RallyComs does not track your location.
• Records that keep the service safe and working: sign-in times, the device and browser used, and error logs.
• How the app is used: which screens are opened, which buttons are tapped, and when things like a report, a message or an alert are sent, plus recordings of how a screen was used with every word and every typed field hidden. These are tied to your account's id number, not your name.

How it is used

Only to run RallyComs for your organization: to show your team its reports, messages, schedule and playbooks, to send alerts and email, to keep the service secure, and to find what is broken or hard to use so it can be fixed. RallyComs does not sell your information, does not show ads, and uses no advertising cookies. The only cookie keeps you signed in; the web app also keeps a usage id in your browser's storage so visits can be counted.

Who else handles it

• Google Cloud (United States) hosts the app, the database and photos.
• Mailgun sends RallyComs email, such as invites and password resets.
• Expo, Apple and Google deliver phone alerts.
• Sentry (United States) receives error reports from the web app, the phone app and the server: the screen it happened on, the device or browser, the app version, the part of the app that failed, and your account's and organization's id numbers.
• PostHog (United States) receives how the app is used, from the web app and the phone app: screens opened, buttons tapped, named steps such as a report sent, and screen recordings with every word, typed field and picture hidden, tied to your account's and organization's id numbers.
• Neither Sentry nor PostHog ever receives what your team writes or says (reports, messages, alert notes, voice), file and photo names, names, email addresses, phone numbers or exact locations. RallyComs removes them before anything leaves your device or our server.
• Google's Vertex AI answers questions asked of the Assistant, using only playbook steps you are allowed to see. Google does not use these questions to train its models.
• Planning Center, only if your team connects it, to bring in your service schedule.

Each handles your information only to provide its part of RallyComs.

How it is kept safe

Everything travels encrypted and is stored encrypted. Each organization's information is kept apart from every other organization's, and inside an organization each team sees only what its roles allow.

How long it is kept, and removing it

Information stays while your organization uses RallyComs. Your organization can remove people, reports and messages. To delete your own account, open Me and choose Delete my account. It is erased 30 days later, and you can cancel until then. You can also email support@managebee.com. Backup copies that still hold removed information are cleared within 30 days.

Children

RallyComs is for adults on security teams and is not meant for anyone under 16. A report may name a child when staff record what happened; only that organization's team can see it.

Changes and questions

If this policy changes, the date at the top changes, and big changes are shown in the app. Questions: support@managebee.com.