Legal & Privacy

Privacy Policy

This Privacy Policy explains how Keestone Innovations LLC ("we," "us," or "our") collects, uses, discloses, and protects your information when you access or use our mobile application and related web and API services (collectively, the "Platform" or "Rally").

1. Information We Collect

A. Information You Provide Directly

• Account Credentials: Full name, email address, and phone number.
• Profile Details: Profile photo, bio, graduation year, and optional social media links.
• User-Generated Content (UGC): Messages, comments, documents, shared files, media uploads, poll votes, and chapter group activity.
• Media & Hardware Permissions: With your explicit permission, we access your device's Camera and Photo Library to allow photo sharing, avatar updates, points submissions, and document uploads. We do not access continuous GPS/geolocation coordinates or your microphone.

B. Information Collected Automatically & Through Third Parties

When you interact with our platform, backend infrastructure and payment APIs automatically collect standard operational data:

• Log & Network Telemetry: IP address, device type, operating system version, and system timestamp logs necessary to maintain secure sessions and prevent fraud.
• Crash Reports: When the app crashes or hits an unexpected error, it sends a crash report (the error, where in the app it happened, the app version, and device and operating system details) to Google Firebase Crashlytics so we can find and fix the problem. We do not attach your name, contact details, or account to crash reports.
• Payment Metadata: Payments and financial transfers are processed by our secure, certified third-party payment processing partners. We do not store or process your full payment card details or bank account numbers. Payment processors collect, encrypt, and process payment details under strict PCI-DSS Level 1 compliance and their own privacy policies.

2. How We Use Your Information

We process your data for the following business purposes:

• To create, verify, and maintain your account.
• To facilitate group interactions, chapter operations, dues invoicing, event ticketing, file sharing, and communication.
• To route payment processing and calculate platform service fees via certified payment gateways.
• To ensure platform safety, investigate abusive conduct, and enforce our Terms of Service.
• To maintain server stability, monitor diagnostics, and prevent unauthorized security breaches.

3. Third-Party Service Providers

We share data with trusted third-party infrastructure providers strictly to operate the platform:

• Google Firebase / Google Cloud Platform: User authentication, backend database (Firestore), real-time messaging, media/file storage (Cloud Storage), and crash reporting (Crashlytics).
• Certified Payment Processing Partners (PCI-DSS Level 1 compliant): Facilitating transactions, processing card and bank payments, onboarding group accounts, and distributing platform processing fee differentials.

We do not sell, rent, or monetize your personal information or user content to data brokers or advertising networks.

4. Children's Privacy (COPPA)

Our platform is primarily intended for users aged 18 and older, and we do not permit children under the age of 13 to register or use the Service. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will delete that data immediately.

5. Data Retention, User Rights & Account Deletion

• Automated Data Retention Schedules: To prevent indefinite storage of operational and ephemeral data, the Platform runs scheduled cleanup routines that automatically purge records according to retention schedules:
  • System rate limits & security counters: 7 days.
  • Email sign-in challenges & verification codes: 48 hours.
  • System email delivery logs: 30 days.
  • Dues reminder send audit records: 90 days.
  • Inactive push notification device tokens: 180 days.
  • Processed payment webhook events: 30 days.
• User File Deletion & Storage Purging: Uploaders, media managers, and chapter administrators can delete shared files, media albums, and event photos. Deleting these items immediately and permanently purges both the Firestore metadata records and the underlying binary files stored in Google Cloud Storage.
• Personal Data Export (Right of Access & Portability): In compliance with GDPR, CCPA, and applicable privacy laws, members can export a portable copy of their personal data at any time in the app under Profile > Account & Security > Export Personal Data. The export package (JSON format) includes your profile information, dues assignments and balance, payment history, merchandise orders, event tickets, attendance records, points history, and signed chapter agreements.
• In-App Account Deletion: In compliance with Apple App Store and Google Play standards, you can delete your account in the app under Profile > Account & Security > Delete Account. If you founded your chapter or are its only admin, first transfer ownership or make another member an admin; if nobody active is left, reactivate an alumnus or approve a join request first. This is not needed when nobody else is left in the chapter; the chapter and its records then stay as they are. https://rally-platform.com/delete-account explains the same steps and how to ask us to delete your account if you cannot use the app.
• What We Delete: your profile (name, contact details, photo, bio, social handles and settings) and any unused chapter credit on it, your notifications, blocked-member list and card list, your sign-in account, your phone and email sign-in records and our log of the sign-in and account emails we sent to your address, your profile photo and the photos you submitted for points, your devices' push notification registrations, and any pending request to join a chapter or a chat.
• What We Cancel: any chapter spending card issued to you is cancelled, and your cardholder record with our card issuing partner is deactivated. If that partner does not cancel a card, a note in your chapter's finance audit log tells its finance officers. That partner keeps its own records as the law requires.
• What We Anonymize: chat messages (including photos you sent in chats) stay so conversations still make sense, but show "Former member" instead of your name and photo. Comments you posted show "Former member" too in your current chapter and in any chapter where you sent a chat message or still belong to a chat; comments in other chapters you left keep your name and photo, and you can email us to have those anonymized too. You are removed from group chats, and the nicknames you set in chats, including chats you left, are deleted. Direct messages with you stay readable for the other member, who sees you as "Former member".
• What We Keep: your chapter's financial records (dues and dues reminders, payments, card records, shop orders, finance audit logs and reimbursements), event tickets and attendance, signed chapter agreements, the chapter's membership log (which notes the deletion and any credit forfeited) and session security records (which also stop your old sign-ins from working) are kept, as retention is needed for financial records, tax obligations, or dispute resolution. Of these, the dues reminder log, card records, shop orders, finance audit logs, reimbursements, event tickets, attendance and signed chapter agreements still show your name as it was when they were made. The dues reminder log (the address each reminder was emailed to), reimbursements, signed chapter agreements and any finance audit log entry for a payout bank account change you made also still show your email address. Everything else you added to your chapter, such as event and album photos, shared files, ideas, bids, poll votes, election records and points, stays with the chapter, with your name where it showed it. Reports you filed about content or bugs are kept for safety and support; bug reports still show your name and email address.
• Manual Requests: You may also request data access, correction, or permanent deletion by emailing us directly.

6. Contact Information