Privacy Policy

Privacy at a glance

• We collect what’s needed to run your groups: your account, the rosters and content your groups create, and a little technical information to keep accounts secure.
• We never sell or share your personal information for advertising. We don’t show ads, we don’t work with data brokers, and we don’t use your content to train AI models.
• Your group’s information stays with your group. Members see what the group’s settings allow. A group’s public page shows facts about the group and what its leaders choose to publish, never its member list. Children’s details are visible only to leaders, the child’s own parents or guardians, and the trusted adults they add.
• Kids are protected. Children under 13 can use Grouperly only through an account their parent sets up and consents to. Messages with anyone under 18 are checked automatically for signs of harm, and a parent is told of a possible problem (Safety checks). See our Children’s Privacy Notice.
• You’re in control. You can see, fix, export, or delete your information. Email privacy@grouperly.com or visit Your Privacy Choices.

Who we are and what this covers

This Privacy Policy is from Jamnaytac LLC, doing business as OrgStrong (“OrgStrong,” “we,” “us,” or “our”). It covers the Grouperly Services:

• www.grouperly.com, including groups’ public pages and websites;
• app.grouperly.com, and account.grouperly.com, where you manage your Grouperly account;
• our sign-in pages at auth.grouperly.com and kids-auth.grouperly.com;
• every app OrgStrong runs that uses your Grouperly account, such as Just One Hour A Week. The current list is on our Legal page;
• the emails, text messages, and calendar feeds those apps send, and the in.grouperly.com addresses groups and people use to receive email.

You have one Grouperly account for all of these apps, so this one policy applies to all of them.

Our Children’s Privacy Notice adds more detail about children under 13. Our Terms of Service explain the rules for using Grouperly.

Information we collect

Information you give us

• Account information: your name, email address, and password. Passwords are stored by our sign-in system, never in plain text. If you sign in with Google or Apple, we receive your name, email address, and whether your email is verified. From Google we also receive your profile photo.
• Birthdate: asked when you sign up, so we can tell whether you’re an adult, a teen, or a child. We don’t keep your full birthdate. For adults we keep only your age group; for teens, the age group and the month and year you turn 18, so your account becomes an adult account after that month.
• Profile and contact details: your phone number, if you add one, and whether you’ve agreed to receive text messages.
• Your photo, which people in your groups see beside your name:
  • A photo you add on your Profile. We remove the location your phone saved in it.
  • If you’re an adult and haven’t added one, we use your Google profile photo when you sign in with Google. Otherwise we use your Gravatar picture, if your email address has one: our servers send Gravatar a coded form of your email address (a hash) to check.
  • Teens can choose to use their Google photo or Gravatar picture, but we never do it for them.
  • Children’s accounts never have a photo of their own.
  • You can remove your photo, or switch to your initials, at any time on your Profile.
• A card check, if you choose it: to show you’re an adult (“Verified adult”), or to set up your child’s own login, you make a $0.50 card payment through Stripe. It isn’t refunded. We keep the name on the card and the card’s brand, type, last four digits, and country as the record, and whether that name matches the one on your account. Verified adult is tied to your name: if you change it, you’ll need a new check. We never see the full card number. Your groups and our apps see only “Verified adult”.
• Requests and messages to us: what you send when you contact support or make a privacy request.

Information leaders and members provide about others

Groups keep rosters: lists of the people in the group, including people who don’t have a Grouperly account. A roster entry can include:

• name and role, such as “Den Leader” or “Scout”, and the rest of their name if the group keeps it: a prefix, a middle name, a suffix, and the name they go by;
• email address, phone numbers (a mobile number, which texts go to, and a home and a work number), and mailing address;
• other email addresses, which we never send anything to and which never sign anyone in: they only help a group recognize the person when it imports a roster file;
• their gender, if the group keeps it (female, male or another);
• whether the person is an adult or a youth, and a youth’s age group (under 13, or 13 to 17) or birthdate;
• links between a youth and their parents or guardians;
• up to three emergency contacts: people to call if something happens to them, each someone on the same roster or someone else, with their name, how they’re related, and a phone number or email address. We never contact them, and they’re never shared with apps;
• a photo of a youth, which only the youth’s parent or guardian can add;
• tags, such as “Den 3”, and notes that leaders add;
• awards, ranks, badges and training they’ve earned, such as a scout’s rank, a merit badge, a belt or a first aid course, each with the date earned and the date it was presented, and a note from whoever keeps the group’s awards; the requirements they’ve completed toward them, each with its date and whether it’s been signed off; and whether they’ve been taken off the group’s leaderboards;
• other details a group keeps, such as a member number, a shirt size, or the date a health form expires (only the date: never the form or health information). A group’s type, such as scouting, can come with some of these, and a group’s leaders can add their own.

Leaders add this information themselves or import it from a spreadsheet. Our Terms require them to have permission, and for anyone under 18, a parent’s permission. If you’re in a group’s roster and want something changed, ask the group’s leaders or contact us.

Content your groups create

• Messages and announcements, including direct messages between members.

• Events, RSVPs, and attendees, including the names of family members and guests someone RSVPs for, or that a group’s leader adds to an event.

• Documents, which can include health forms and permission slips that a group chooses to store. We keep a document’s earlier versions and edits, and who made them, until someone deletes them. For a health document, we also record who opened or downloaded it, and the person who uploaded it and the group’s owners and admins can see that record.

• Photos and videos. We remove the location your phone saved in a photo or video from what other members see. If a group on a paid plan chooses to keep original photo files, the originals may still contain it, and only the uploader and the group’s leaders can download them. We never keep originals of photos a child shares.

• Reports and blocks. If you report something, the group’s leaders see your report and your name. We keep a list of the people you’ve blocked.

• Calendar subscriptions you add, such as an outside calendar link you want shown in Grouperly.

• Linked calendars. A group’s owners and admins can link an outside calendar to the group, such as a school’s or a league’s. Everyone in the group sees its events. Only its owners and admins see the link.

• Forwarded emails. Adults who can add documents to a group can forward email to the group’s addresses at in.grouperly.com. We keep only mail sent from the forwarder’s own Grouperly account address, and never mail from anyone under 18. We keep the whole email as it came, including its attachments and the names and email addresses of everyone on it, and only the forwarder and the group’s owners and admins can download it. What we make from it depends on where it was sent:

  • To an event, a recurring event, a role or a subgroup: each email in it becomes a message kept there, read-only, shown from whoever sent it and dated when they sent it, and its attachments become documents. We match each sender to the group’s roster by email address, to show their name and so that a request to delete someone’s information reaches those messages too. Nobody is notified. See Inside your groups for who reads them.
  • To a folder: only its attachments, in the folder.
  • To the group’s own address: it waits as a document only the forwarder and the group’s leaders can see, until a leader files it. If the leaders make the group’s Inbox a shared inbox, the adults they choose to act on it read what waits there too, with its files, and each of them sees who read each email, who is dealing with it, notes, and who filed it. The email as it came, with every address on it, stays with the forwarder and the leaders.

  What we show from an email has people’s names but not their email addresses.

• Email from outside a group. A group’s leaders can let people outside the group, such as a campsite or a vendor, write to a role’s, a subgroup’s or an event’s address at in.grouperly.com. Each email becomes a message in a conversation kept there, with its attachments as documents. We keep the name and email address it came from, so that answers reach the sender, for as long as the group keeps the conversation. Answers come from that address, signed with the name of the member who wrote them and the role, subgroup or event. Members’ own email addresses are never shown to the sender, and the sender’s address isn’t shown to members. We refuse mail we can’t verify came from its sender, spam, automatic replies, and mail from anyone under 18. Each answer has a link that stops them, a group’s leaders can block an address, and the sender can ask the group or us to delete what they wrote.

Groups not on Grouperly, and your Personal section

You can add a group that isn’t on Grouperly, such as your child’s school, a sports club, or a dance studio. It becomes a group like any other: you run it, it’s private, it’s marked as run by parents, and you can invite your family and other families to it. Its name, members and what they post there are kept as any group’s are. A calendar link you give when you add it is the group’s linked calendar, so everyone you invite sees its events.

In that group, and in any other group you’re in, you can have a Personal section: a private address of yours for that group’s mail, and the emails you forward there. Your Personal section is yours alone, unless you share it with your household.

• What we keep in your Personal section:
  • a calendar link of your own, if you add one. If you’re one of the group’s owners or admins, you can give it to the group, and it becomes the group’s linked calendar;
  • for each email you have forwarded to your private address at in.grouperly.com: who it’s from, its subject, its words, its attachments, and the email as it came.
• Other people’s information: these emails can mention other people, such as the school’s staff, other families, and your children, as they did in your own inbox. We keep them only for you, and for the adults of your household you share them with.
• Who sees it: only you, and the adults of your household you share it with (below). We never show your Personal section to the group, its other members, its leaders, or apps that use your Grouperly account. Nothing in it goes to a group unless you choose to give it.
• Sharing it with your household: a household is a private group of the people you live with. If you say yes to sharing your inbox there:
  • the other adults of your household who have also said yes see the emails in your Personal section of each group they’re in too, with their files, and the group’s messages to two or more of you;
  • each of you sees who has read each one, who is dealing with it, who marked it done and what they said they did, notes, and that someone replied, with what they said they replied when they add it;
  • you can keep any group to yourself, or stop sharing, at any time, and what you shared then leaves their view;
  • only you can say yes: someone adding you to a household never shares anything of yours, and leaving it stops sharing;
  • children and teens in a household never see it, and one-to-one messages are never shared.
• The same email twice: when the same email comes to two of you, we show it once. To tell, we keep fingerprints of its sender, subject, message ID and words, made with a secret key so they can’t be turned back into them. We never keep a second copy of the address or the words.
• Counting families: if at least 3 people keep the same group here, matched by where its email comes from or by the same calendar link (their own, or one their group links), we show each of them how many. We show only that number, never a name or anything else of anyone’s. Mail through free email or a messaging service is never matched.
• Giving it to the group: if the school, club or studio starts its own group on Grouperly and you choose to give it your emails, each goes to that group’s email inbox, as if you’d forwarded it there. You and the group’s leaders can then read it, as they can any email forwarded to the group. Your own copy stays yours.
• Mail you didn’t forward: mail sent straight to that address, rather than through your own email, waits for you to keep or delete it. We never open links in these emails, including a mail service’s request to confirm forwarding. You open that one yourself. We refuse mail with a virus and mail from senders you’ve blocked, and we check attachments for malware before you can open them.
• No AI: we don’t read these emails with AI. If we offer an assistant for them later, it will be something you choose, and we’ll update this policy first.
• Adults only: children and teens can’t add a group not on Grouperly or have a Personal section.
• Your choices: you can delete an email, your Personal section, a group you added, or your account at any time, and your data export includes them. Deleting your account also deletes any group you added that nobody else has joined.

Payment information

When you pay a group, Stripe collects your card or bank details directly. We never see or store card numbers. From Stripe we receive the payment amount, status, your email address, and payment identifiers, so we can show who has paid.

If you pay a group in cash, by check, or another way outside Grouperly, a leader may record it: the amount, how you paid, the check’s number, and who recorded it. For an event, an adult leading it may record cash and checks too. Recording these never asks for a bank account or routing number. For cash and checks, the group also keeps who has the money until it’s deposited, and the deposit it went into. If your bank returns a check, the group records that it came back and why, and we email you that the amount is due again.

Reimbursements: if you ask your group to pay you back for something you bought for it, the group keeps your request:

• what it was for, and the amount;
• the receipts you upload;
• each change you make to it;
• who approved or denied it, and why.

Photos of receipts are converted on your device before they’re uploaded, which removes the location your phone saved. When the group pays you outside Grouperly, whoever records it notes how and the day, such as a check’s number. A group on a paid plan can also pay you from its own bank account: see Paying people back from the group’s bank.

Member credit: a group on a paid plan can keep credit for its members, such as each scout’s share of a fundraiser, or a reimbursement paid as credit. The group keeps:

• each person’s balance, and the part of it that’s restricted;
• each change to it: how much, what it was for, and who made it.

Credit is what the group owes its member. The money stays in the group’s own bank account, not with Grouperly, which only keeps the record.

The group’s books: a group can keep its books in Grouperly, like a checkbook. It keeps:

• the accounts where its money sits, such as its checking account or cash box: a bank’s name and the last four digits only, never account or routing numbers;
• each amount in or out of them: the date, what it was for, the event it was for, who was paid or paid in (someone on the roster, someone in the group’s contacts, or a name the treasurer types), a check’s number, a memo, and photos or PDFs of its receipts or invoice. Photos are converted on the treasurer’s device first, which removes the location their phone saved;
• each change to an entry: what it was before, and who changed it.

The group’s contacts: a group can keep a list of the people and organizations it works with who aren’t on its roster, such as a campsite’s office, a trophy shop, or a church’s facilities manager. Its leaders enter, for each one:

• their name, and for a person, their title and the organization they’re at;
• what the group contacts them for, and notes;
• their email address, phone number, website, and address;
• for paying them, an address to mail checks to and how the group’s books record what it pays them.

The group decides whether each contact is seen only by its leaders or by the whole group. We don’t contact the people in a group’s contacts, and they aren’t shared with apps. If a group keeps you as a contact and you’d like your details changed or removed, ask the group, or contact us.

The same goes for the card check above: Stripe collects the card, and we receive its brand, last four digits, country, and type, and whether the payment went through.

When a group’s owner buys a paid plan, Stripe collects the card and billing details and keeps the invoices. We keep the group’s plan, its status and renewal date, its usage (such as texts sent and storage used), the billing contact’s email address, and Stripe’s identifiers.

If you set up payments for your group, Stripe collects your identity, tax, and bank details directly to open the group’s Stripe account. We receive whether the account is ready to take payments, and the group’s payouts, fees, refunds, and disputes.

Paying people back from the group’s bank

A group on a paid plan can pay back what it owes its members, such as a reimbursement, straight from the group’s own bank account. It can pay by direct deposit, through Dwolla, or by a check that Lob prints and mails. The money goes from the group’s bank to yours. Grouperly never holds it.

The group’s bank, set up by an adult who handles the group’s money:

• Signing in to the bank through Plaid, if they choose. Plaid collects the bank sign-in directly; we never see it. Plaid gives the account’s numbers to Dwolla, and through us to Lob, and we don’t keep them. We keep the sign-in Plaid gives back, encrypted, so the group needn’t sign in again.
• Or typing the routing and account numbers, which we pass to Dwolla and Lob and don’t keep.
• We keep the bank’s name and the last four digits of the account.
• Dwolla verifies the group and the person who controls its bank account with its own form in the page. What’s typed there, such as a name, address, date of birth, and Social Security number, goes straight from the browser to Dwolla; we never see it. Dwolla tells us whether the group is verified.
• For checks, the group gives the name printed as the signer and a return address, which we keep and send to Lob with each check.

Being paid back, if you choose it on a request:

• By direct deposit (adults only). You give your bank’s routing and account numbers. We pass them to Dwolla with your name and email address, and keep only your bank’s name and the last four digits. Dwolla keeps them to pay you in any of your groups.
• By a check in the mail. You give the address checks are mailed to, and we keep it for any of your groups. A teen can give one; a child’s account never keeps an address.
• Lob receives, for each check: your name and address, the amount, the request numbers it pays, and the group’s signer, return address, and bank account numbers.
• We keep each payment’s record: the amount, how it was sent, its status, Dwolla’s or Lob’s identifiers, and, for a check, its number and when it should arrive. For direct deposit, we keep the last four digits of the account it went to. If a bank sends a payment back, we keep why.

Your choices:

• You can change or remove your bank and address in My money, and your data export includes them.
• Deleting your account removes your bank from Dwolla first.
• When a group removes its bank, or is deleted, we take the bank away from Plaid, Dwolla, and Lob.

Plaid and Dwolla keep what you give them directly, such as the bank sign-in or the verification details, under their own privacy policies, which their forms link to.

Registering for an event without an account

If a group shares an event by link, anyone with the link can register without an account, after confirming their email address. Registrants must be 18 or older.

• What we collect: the registrant’s name and email address, the names and ticket types of the people they register (who may be their children), any note they add, and payment details, which Stripe processes as described above.
• Who sees it: the group’s leaders, and those leading the event (its circle’s leaders, organizer, or lead), see all of it. Other members see only how many people registered.
• What we send: emails about that registration only. If you tick “Keep me posted”, you also get the group’s news by email until you unsubscribe. That covers only you, never the people you registered.
• Your choices: to see, change, or cancel a registration, use the link we email you after you confirm. To have it deleted, write to privacy@grouperly.com.
• How long: registrations are de-identified 2 years after the event. Payment records are kept as the group’s financial records, and the payer’s name and email are removed from them after 7 years. See How long we keep information.

Ordering from a group’s fundraiser

When a group sells ahead for a pickup or delivery day, such as dinners or wreaths, its leaders or a member can take your order, and you can order on the sale’s page, or through a member’s link, without an account.

• What we collect:

  • your name, your email, and your phone number if you give one;
  • what you ordered, and how you get it: picked up, or delivered by the member, to the address you give;
  • the member the order counts for, if it came through their link or they took it;
  • payment details, which Stripe processes as described above.

  Ordering on a sale’s page, you agree to our Terms and this policy, and we keep which version of the Terms that was.

• Who sees it: those running the sale (its event’s leaders and the group’s) see all of it. The member it counts for, and their parents, see your name, what you ordered, and the address for a delivery they make. The sale’s page shows no one’s orders. It names a member only if their parent chooses to; otherwise it says, for example, “Supporting a Troop 1075 scout”.

• What we send: once you’ve paid on the sale’s page, a confirmation from the group, and one reminder the day before a pickup. For an order taken by hand, nothing, unless you pay for it by card on your phone, when you get a receipt.

• Your choices: to change or cancel an order, ask the member who shared the link, or the group, before orders close. To have your details deleted, write to privacy@grouperly.com.

• How long: if you leave the card page without paying, your details are removed from that order after 48 hours. A delivery address is removed 90 days after the sale is settled, and your name, email, and phone 7 years after the order. The rest is kept as the group’s financial records. See How long we keep information.

Ordering from a group’s storefront

A group can sell things such as shirts, dues or event extras from a storefront. Some storefronts let anyone order from their link and pay by card, without an account.

• What we collect:

  • your name and your email;
  • what you ordered, and any note you add;
  • payment details, which Stripe processes as described above.

  Ordering, you agree to our Terms and this policy, and we keep which version of the Terms that was.

• Who sees it: the people who run that storefront and the group’s store. The storefront shows no one’s orders.

• What we send: once you’ve paid, a receipt with a link to your order, and an email if the order is cancelled or refunded. Nothing else.

• Your choices: to change or cancel an order, contact the group. To have your details deleted, write to privacy@grouperly.com.

• How long: if you leave the card page without paying, your details are removed from that order after 48 hours. Otherwise your name and email are removed 7 years after the order. The rest is kept as the group’s financial records. See How long we keep information.

Group pages, followers, and contact forms

Every group has a basic public page at www.grouperly.com, unless a leader makes the group private. Groups on Grouperly Plus can also have a website, at our address or their own. Subgroups and circles don’t get a page unless a leader publishes one.

• What a page shows: facts about the group (its name, type, description, logo, city and state, and member and follower counts), plus the posts, events, and photos its leaders publish. A page never lists the group’s members. A website may list leaders who choose to be listed, but never a young person. If something a leader is about to publish includes someone’s name, phone number, or address, we show the leader and they must confirm before it goes up. Search engines may show pages unless a leader hides them.
• No tracking: group pages and websites set no cookies and load no third-party code. We count visits without keeping visitors’ IP addresses.
• Following a group: if you follow a group, its leaders see your name and the follower count goes up by one. You get its public news in your Grouperly feed, and by email as your settings say.
• “Keep me posted”: you can get a group’s news by email without an account. We keep nothing until you confirm your address from the email we send. Then we keep your email address, where you signed up, and when you confirmed it.
• Asking to join: a request includes your name, your message, and how many children would join with you (never their names). The group’s leaders see it.
• Contact us: a group on Grouperly Plus can put a contact form on its page, for people 18 or older. We keep nothing until you confirm your address from the email we send. Then your name, email address, and message go to the role’s, the subgroup’s, or the event’s address the group chose, and are kept there exactly as an email from outside the group is (see Email from outside a group). Answers come from that address, so leaders’ own addresses aren’t shown, and you write back by answering them.
• People a group recruits: a group on Grouperly Plus can keep a record of people thinking about joining it. That’s your name, how to reach you, how many children would join and their grades (never their names), where you met the group, and notes the people recruiting write.
  • When there’s a record: you asked to join, or you wrote to the group and a leader added you, or a leader typed in an interest form you filled in and recorded that you asked to be contacted.
  • The email: for an interest form, we may then email you on the group’s behalf, from the group’s address, saying why. Each email has a link to stop them, and we never write to an address that belongs to someone under 18.
  • Who sees it: the group’s owners and admins and whoever it lets run recruiting, never its other members. It’s never on the group’s roster.
  • A group’s links: if you came by one of the group’s links, such as the QR code on its flyer, the group sees which link it was (see Cookies). It counts how many times each link was followed, and nothing about who followed it.
• Children: a child account can’t follow, subscribe, or ask to join, and nothing a child posts ever appears on a page.
• Checking before publishing: before a group publishes text or a public photo, we check it automatically for harmful content and for personal details, using Amazon Comprehend and Amazon Rekognition, which are part of Amazon Web Services. Leaders see what was found. We keep a record of each check’s result, not the text.
• Reporting: anyone can report a page, without an account. Reports go to the group’s leaders, and reports that may involve something illegal also come to us.

Information collected automatically

• Security and sign-in information: each sign-in records the time, your IP address, your approximate location (city and country, worked out from your IP address), your device and browser, and a risk assessment. When a sign-in looks suspicious, we use this to ask for your second sign-in step, block it, or alert you.
• Service logs: our servers record requests, errors, and records of the emails and texts we deliver, so we can keep Grouperly running and fix problems.
• How you found us: when you create an account by following a link from one of our websites or a campaign, we save the link’s campaign tags with your account. For example, we might note which website button you clicked. This helps us see which outreach works. We don’t do this for child accounts.
• Cookies: the apps use only the cookies needed to sign you in and keep you signed in. See Cookies.

Website analytics (our marketing websites only)

On our public marketing websites, such as www.grouperly.com, we use Google Analytics to understand which pages are useful. It records:

• the pages you view and how you arrived, including the website that sent you and any campaign tags in the link;
• buttons you click, such as “Start Your Group”;
• your approximate location, device, and browser.

We’ve set Google Analytics up so that Google processes this data only on our behalf. Google Signals, ad personalization, and Google’s data-sharing settings are all off, and we don’t send Google your name, email address, or any account information.

Google Analytics doesn’t load at all if your browser sends a Global Privacy Control signal, or if you turn it off on Your Privacy Choices. It never loads on our policy pages, which our apps link to. We don’t use Google Analytics or any other third-party analytics inside our apps, and never for children.

How we use information

We use personal information to:

• run the Grouperly Services: create your account, show your groups their rosters, messages, events, photos, and documents, and deliver the emails and texts your group sends;
• keep people safe and secure: verify sign-ins, prevent fraud and abuse, enforce our youth-protection rules, check messages with young people for signs of harm (see Safety checks), and respond to reports;
• support you: answer questions and handle privacy requests;
• process payments to groups, and bill paid plans, through Stripe;
• confirm you’re an adult with a card check, when you choose to, or to set up your child’s login;
• improve Grouperly: understand which features and pages are used, mostly through aggregate counts;
• tell you about Grouperly: for example, product updates. You can unsubscribe anytime. We never send marketing to children;
• meet legal obligations, and protect the rights and safety of our users and others;
• run the AI features your group uses, as described below.

We don’t sell your information. We don’t use it for targeted advertising, and we don’t build advertising profiles. We don’t use your content to train AI models.

AI features

Some Grouperly features use AI. They all run inside Amazon Web Services, through Amazon Bedrock, which runs AI models such as Anthropic’s Claude. Bedrock doesn’t keep what it reads or learn from it, and the companies that make the models can’t see it. The one exception is Amazon’s own safety check: an image that appears to show child sexual abuse may be kept and reported, as the law requires. No AI model is trained on your information.

• Your group’s assistant searches your group’s documents to answer questions. It uses a private copy of each document in which every young person on the group’s roster is replaced by a placeholder, such as “[Scout A]”, and their email addresses, phone numbers, street addresses, and member numbers are hidden. It only ever shows you documents you’re allowed to see.
• “Improve with AI” reads a document’s file, such as a scan or a PDF, page by page, and writes out its text for you to check. A page is read as a picture, so the AI sees what’s on it.
• Inbox suggestions suggest where a forwarded email belongs, using the email’s text with young people’s names replaced.
• Shared copies. Groups can share de-identified copies of their documents with other groups of the same type, such as other scout units, so leaders can learn from each other. Before a copy is shared, we remove people’s names, the group’s name and number, email addresses, phone numbers, street addresses, member numbers, and birthdates, and make dates less exact. Leaders can preview, edit, or exclude any copy, and we remove a copy when its document is deleted or excluded, or the group stops sharing.
• What AI never sees: health, financial, and roster documents; documents about a single member; the awards people have earned and the requirements toward them; anything taken down for review; and anything a young person posted or wrote. Messages and photos are never used, and the assistant and shared copies leave out drafts. The one exception is our safety checks, which read messages with young people only to protect them.
• Your group decides. The assistant and sharing are on unless a leader turns them off. Leaders can turn either off for the whole group, and anyone who can edit a document can turn them off for that document.

Safety checks on messages with young people

To help protect young people, we automatically check every message in a conversation that includes anyone under 18, and the photos sent in it, just after it’s sent. The checks use rules, and an AI model on Amazon Bedrock that reads the message with the few before it, with young people’s names replaced, and keeps nothing (see AI features). They look for signs of grooming, such as keeping secrets from parents or moving the conversation off Grouperly; sexual content involving a young person; bullying; threats; and self-harm.

• Who’s told: a possible problem goes to the parents of the young person it concerns, who are already in the conversation: on the message in the app, and by an email that doesn’t quote it. Signs of grooming, sexual content, or threats also go to our safety team.
• What doesn’t happen: checks never stop or hide a message, the person who wrote it isn’t told, and a group can’t turn them off. They’re automatic and can be wrong, so we never act against anyone’s account on a check alone: a person on our safety team looks first.
• Getting help: if a young person writes about hurting themselves, they see a private note with where to get help, such as the 988 Suicide & Crisis Lifeline, and their parents are told.
• Our safety team reads a flagged message, and the conversation around it, only to decide what to do. We report apparent child sexual abuse material, and apparent attempts to entice a child, to NCMEC, as the law requires.
• What we keep: a check’s result (the kind of concern, never the message) for 90 days after it’s closed, or 1 year if our safety team looked at it.

How information is shared

Inside your groups

Grouperly is for sharing with your group, so people in your groups can see information according to the group’s settings and their role:

With other groups, de-identified

If your group shares de-identified copies of its documents, other groups in the same app can find and read them, with people’s names and contact details removed. See AI features.

Across Grouperly apps

Our apps share one account system and work together. For example, an app or add-on we make can show your group’s Grouperly roster and calendar. These apps are all run by OrgStrong under this policy, so sharing between them isn’t sharing with a third party.

Apps and tools your group connects

• Tools your group’s owners connect. A group’s owners can connect another service to the group, such as a spreadsheet or a website, with an API key or a webhook. That service can read what the owner can see in the group, except young people: it sees only how many youth members the group has, and never anything a young person posted. If the owner lets it read the group’s photos or documents, those may show or mention young people, as they can for any member who sees them. The group chooses that service, and its own privacy policy applies.
• Apps from other companies. If a group’s leaders allow an app from another company, the app can see what you could see in that group, but never young people’s roster details or anything a young person posted. If the leaders let it read the group’s photos or documents, those may show or mention young people. Apps from other companies that let you sign in with your Grouperly account aren’t run by us, and their own privacy policies apply.
• Never people’s photos. Neither apps from other companies nor tools a group connects ever get the photos people add to their profiles or to a roster entry.

With service providers

We use a small number of companies to run Grouperly. They may use your information only to provide their services to us:

For legal reasons and safety

We may share information if we believe in good faith that it’s needed to:

• comply with the law or valid legal process;
• protect a child or anyone else from harm;
• investigate fraud or abuse;
• enforce our Terms.

We report apparent child sexual abuse material, and apparent attempts to entice a child, to NCMEC as the law requires.

If our business changes

If OrgStrong is involved in a merger, acquisition, or sale of assets, information may transfer as part of it. The new owner must keep honoring this Privacy Policy and our Children’s Privacy Notice, or ask for your consent (or a parent’s consent, for a child) before using information differently.

With your consent

We’ll share information in other ways only if you, or a parent for a child, tell us to.

What we never do

• We never sell personal information.
• We never share personal information for cross-context behavioral advertising.
• We never show ads, to anyone.
• We never give or sell information to data brokers.
• We never use your content to train AI models.

Children under 13

Children’s privacy gets its own page: our Children’s Privacy Notice.

In short:

• Children under 13 can’t sign up on their own. A child can use Grouperly only through a child account that their parent creates after giving verifiable consent.
• Leaders and parents may also add a child to a group’s roster without the child ever using Grouperly. Leaders must have the parent’s permission to do so.
• We collect only what a child’s account needs. Child accounts have no third-party analytics, no ads, and no public profiles, and any message with a child, from an adult or another child, includes the child’s parent. Those messages are checked automatically for signs of harm (Safety checks).
• Parents can review, change, or delete their child’s information, and withdraw consent, at any time.

If you believe a child under 13 is using Grouperly without a parent’s consent, email privacy@grouperly.com and we’ll delete the account.

Teens 13 to 17

Teens can create their own account with a parent or guardian’s permission. For teens we also:

• limit direct messages to people in their own groups, and always include a parent in any message with them, whoever sends it, another teen included;
• never text them: a teen gets their groups’ messages in Grouperly and by email, never by text message;
• check messages with them for signs of grooming, bullying, threats, and self-harm, and tell a parent about a possible problem (see Safety checks);
• never sell a teen’s information, use it for targeted advertising, or build a profile of them;
• let parents ask us to see or delete their teen’s information. Email privacy@grouperly.com from the parent’s email address on file with the teen’s group;
• let a parent be listed as their teen’s parent in a group. The parent asks with the teen’s email address and passes our card check, and someone the group chose confirms them. They then get the group’s notices about their teen, and copies of adults’ messages to them.

Your choices and rights

What you can do yourself:

• change your name, email address, password, passkeys, and two-factor sign-in at account.grouperly.com;
• update your phone number, text-message settings, and notification settings in your Grouperly profile;
• turn group emails and text messages off (reply STOP to any text);
• download a copy of your information from Profile → Your data in the Grouperly app;
• leave a group, or ask its leaders to update your roster entry;
• take yourself or your child off a group’s leaderboards, from the awards on your roster entry or your child’s. You’re then neither listed nor counted on any of them;
• delete your Grouperly account at account.grouperly.com. That ends your sign-in for every app that uses it.

What you can ask us to do. Wherever you live, you can ask us to:

• tell you what personal information we have about you, and give you a copy (access and export);
• correct information that’s wrong;
• delete your information;
• stop using your information for any optional purpose.

Email privacy@grouperly.com, or see Your Privacy Choices for what to include.

• Verification. We’ll confirm the request comes from you, usually by email from the address on your account.
• Authorized agents. Someone you’ve authorized can make a request for you. We’ll ask for proof of authorization and may confirm with you directly.
• Parents can make requests for their child under 18.
• Response time. We’ll respond within 45 days. If we need more time, we’ll tell you why, and we’ll never take more than 90 days in total.
• Appeals. If we turn down your request, you can appeal by replying to our decision. We’ll respond to an appeal within 60 days. If you’re still not satisfied, you can contact your state attorney general.
• No discrimination. We’ll never treat you differently for using your privacy rights.

Information a group holds about you. If a group’s leaders added you to their roster, you can ask the leaders directly or ask us. We may need to work with the group to handle your request.

Global Privacy Control. We honor GPC signals automatically. See Your Privacy Choices.

Cookies and similar technologies

In our apps (app.grouperly.com and our other apps), we only use cookies that are strictly necessary to sign you in, keep you signed in, and run the age question when you sign up, plus one that remembers a group’s link you followed:

Other apps use the same kinds of cookies under their own names. On account.grouperly.com, cookies starting __Host-acct- keep you signed in to your account settings for up to 12 hours. One holds a new email address for up to 24 hours, until you confirm it. The Grouperly app also saves a setting in your browser’s local storage to remember which document editor view you prefer.

Our sign-in pages at auth.grouperly.com and kids-auth.grouperly.com, run on Amazon Web Services, also set cookies that are strictly necessary for signing in securely.

On our marketing websites, Google Analytics sets the _ga and _ga_<ID> cookies, which last up to 13 months. They’re only set if analytics is on, meaning your browser doesn’t send Global Privacy Control and you haven’t turned analytics off on Your Privacy Choices. You can also use Google’s opt-out browser add-on.

We don’t use advertising cookies, tracking pixels, or social media trackers anywhere.

Text messages

If you agree to receive text messages, we use your mobile number only to send you the group messages and reminders you signed up for, and to keep a record of your consent. We never text anyone under 18.

We do not share or sell mobile numbers or text-messaging consent with third parties or affiliates for marketing or promotional purposes. We share them only with the service providers that deliver our texts.

Reply STOP to opt out or HELP for help. Message and data rates may apply.

How long we keep information

We keep personal information only as long as we need it for the reasons in this policy:

We may keep information longer when the law requires it, or to resolve a dispute or protect someone’s safety.

How we protect information

• Data is encrypted in transit and at rest on Amazon Web Services.
• Bank account numbers pass through to Dwolla and Lob and aren’t stored. A group’s bank sign-in from Plaid is encrypted again with a key of its own.
• Sign-in is protected by passwords checked against known breach lists, passkeys, optional two-factor authentication, and automatic detection of risky sign-ins.
• Access to personal information inside OrgStrong is limited to people who need it to run and support Grouperly.
• We keep a written information security program, which we review at least once a year.

No system is perfectly secure. If a breach affects your personal information, we’ll notify you and the authorities as the law requires.

Where information is stored

Grouperly is run from the United States, and your information is stored in the United States (Amazon Web Services, US East region). Grouperly is intended for people in the United States.

State privacy rights

Depending on where you live, your state’s privacy laws may give you the rights described in Your choices and rights: to know, access, correct, delete, and export your information, and to opt out of sale, targeted advertising, and profiling. Those states include California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others. Because we don’t sell personal information, don’t use it for targeted advertising, and don’t profile people in ways that produce legal or similarly significant effects, there’s nothing to opt out of. You can still use every other right by emailing privacy@grouperly.com.

California

This section is our notice at collection for California residents. It covers the 12 months before the effective date above.

• We have not sold or shared personal information, including the personal information of consumers under 16, for cross-context behavioral advertising, and we don’t do so.
• Sensitive personal information. We use it only for purposes the law permits, such as providing the service you asked for and keeping accounts secure. We don’t use it to infer characteristics about you, so there’s no “Limit the Use of My Sensitive Personal Information” option.
• Retention. See How long we keep information.
• Financial incentives. We don’t offer any.
• “Shine the Light.” We don’t share personal information with third parties for their direct marketing.

Changes to this policy

If we make material changes, we’ll tell you at least 30 days in advance by email or in the app, and update the version and effective date above. We won’t use information we’ve already collected in a materially different way without your consent. For children’s information, we’ll ask parents for consent again before any material change applies.

Contact us

Jamnaytac LLC, doing business as OrgStrong
24A Trolley Square #1752
Wilmington, DE 19806
Privacy questions and requests: privacy@grouperly.com
Phone: 929-262-1869
Support: support@grouperly.com