Last updated October 26, 2026
RallyKit helps nonprofits prepare their volunteers: organizers write a guide for each event, and volunteers read it and sign up for shifts. This page explains, in plain language, what information we collect, why, who can see it, and how you can have it corrected or deleted.
What we collect
- Your account. Your email address and a password, which is stored scrambled (hashed) so nobody, including us, can read it. If you use Continue with Google, Google shares your name, email address and profile picture with us instead of a password.
- What organizers enter. Organization names and guides: steps, what to bring, house rules, location, schedule, links, and the names, roles, phone numbers and email addresses of the contacts they list. Organizers should only list people who have agreed to be listed.
- Your sign-ups. Which days you signed up to volunteer.
- Technical information. A cookie that keeps you signed in, and the basic request details (such as IP address and browser type) that our hosting providers log to keep the service secure and working.
We don't collect anything else, and we never ask for payment, ID or health information.
Why we use it
- To run RallyKit: sign you in, show guides, and record and show your sign-ups.
- To send account emails, such as confirming your address or resetting your password.
- To keep the service secure and fix problems.
We don't sell your information, show ads, or use advertising or analytics trackers. We only use your information for these purposes, and we'll ask you first before using it for anything new.
Who can see what
- Published guides, including their location, schedule and listed contacts, can be seen by anyone signed in to RallyKit. Draft guides are only visible to that organization's organizers.
- Your sign-ups are visible to you and to the organizers of that event, so they know who is coming. Other volunteers can't see them.
- Your email address isn't shown to other volunteers.
Where your information is stored
We use a few trusted service providers to run RallyKit. They only process information to provide their service to us:
- Supabase stores the database and accounts, in its Canada (Central) region.
- Vercel hosts the website. Its servers for RallyKit are in Montréal, and pages are delivered through its worldwide network.
- Resend sends our emails, from servers in the United States.
- Google, only if you choose Continue with Google.
Some of these companies are based in the United States, so your information may be processed outside Québec and Canada, where privacy laws can differ. We chose providers that protect information with encryption and strict access controls.
Cookies
RallyKit only uses the cookies needed to keep you signed in. There are no advertising or analytics cookies.
How long we keep it
- Your account and sign-ups are kept while your account exists.
- When an organizer deletes a guide, its schedule and everyone's sign-ups for it are deleted too.
- When you ask us to delete your account, we delete your information within 30 days. Copies in backups are overwritten as backups expire.
Your rights
You can ask us at any time to:
- see the personal information we have about you,
- correct it,
- delete it and close your account, or
- stop using it for a purpose you agreed to.
Email privacy@rallykit.org and we'll answer within 30 days. If you're not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Young volunteers
RallyKit is meant for people 14 and older. Volunteers under 14 need a parent or guardian to agree before they use it. Some organizations have their own age rules, which they explain in their guides.
Keeping it safe
All connections to RallyKit are encrypted. Access rules in our database make sure people only see what they're allowed to: for example, organizers can only edit their own organization's guides. If a breach ever puts your information at risk, we'll tell you and the authorities as the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. For important changes, we'll also let you know by email or in the app.
Contact
The person responsible for protecting personal information at RallyKit is [Name of the person responsible for personal information]. You can reach them at privacy@rallykit.org.