PRIVACY

Your information stays under your control.

Ralluno stores household information in a private, access-controlled cloud vault. Records are not shared automatically. This notice describes what we collect, why, who processes it, and the rights you can exercise at any time.

Notice at collection — what is stored and why

We store only what you enter to build your preparedness plan: plan selection, household details and addresses, emergency planning, home-hardening answers, inventory and insurance worksheet entries, pet profiles, contacts (including any mutual-aid notes you add about them), reminders, records, watched-home ZIP codes, settings, secure-vault reference URLs, and attachments you upload. Activity history records action names, not sensitive field values. Every category is used solely to provide the preparedness features you see in the app — we do not sell or share personal information for advertising, and we do not use it for profiling.

Location lookups

ZIP codes you provide are used to look up public government data on your behalf: FEMA National Risk Index profiles, FEMA IPAWS alerts, National Weather Service forecasts, EPA AirNow air quality, USGS earthquake activity, and NIFC wildfire incidents. Only the ZIP code (or its map coordinates) is sent to these services — never your name, address, or household details.

Service providers (processors)

Ralluno runs on a small set of infrastructure providers acting on our instructions: Supabase (database, authentication, and file storage), Vercel (application hosting), and Stripe (payment processing — Ralluno never sees or stores your card number). Each processes data only to provide their service to us.

Protecting your information

Data and backups are encrypted at rest with AES-256. Connections are protected with TLS 1.2 or newer, and account-level access rules isolate each household's records. Avoid storing passwords, credentials, or complete financial account numbers.

External secure vaults

Ralluno stores only the external repository bookmark you provide. Ralluno does not verify, manage, encrypt, or control that repository. Do not include passwords, recovery keys, or temporary access tokens in the URL, and review the repository provider's access settings.

Your rights (GDPR, CCPA/CPRA, and similar laws)

Wherever you live, you can exercise these rights directly in the app, on every plan:

Access & portability: Settings → Download your information exports everything you have stored as CSV. Correction: every field is editable in place. Deletion: Settings → Delete household data permanently removes your household's records, attachments, and snapshots; account deletion removes your sign-in as well. No sale or sharing: we do not sell or share personal information, so there is nothing to opt out of. We will never discriminate against you for exercising any right.

For anything you cannot do in the app — or to exercise rights by request — email support@virgasecurity.com. We respond within the timelines required by applicable law (30 days for GDPR requests, 45 days for CCPA requests).

Legal basis (GDPR)

We process your information to perform our contract with you (providing the preparedness service you signed up for) and, for optional lookups like weather and risk data, on the basis of your request each time you use those features. We do not process personal data for marketing without consent.

Data retention

Your data stays until you delete it. Archived records remain restorable until you permanently delete them. Deleting your household or account removes the underlying records and attachments from our systems; backups age out on a rolling basis.

Children

Ralluno accounts are for adults. Household member profiles you create for children are your household's own records, visible only to your household.