Rufio Stats — Privacy Policy

Last updated: July 31, 2026 · Provided by Arbito LLC

Rufio Stats is a volleyball stat-tracking app operated by Arbito LLC ("Arbito," "we," "us"). This policy explains what information Rufio Stats collects, how we use it, who we share it with, and the choices you have. Rufio Stats uses an Arbito account (our shared sign-in, hosted at id.arbito.co) for optional cloud features; the Arbito account privacy practices are summarized here and, where Arbito operates as the identity layer, in the Arbito account notice.

Rufio Stats works fully on your device with no account required. An Arbito account is optional and only needed for cloud sync, the web dashboard, and following teams. If you never create an account, your stat data stays on your device and is not sent to us.

1. Who this is for, and a note about minors

Rufio Stats is a tool for adults — coaches, scorekeepers, team parents, and club administrators — to record and view volleyball statistics. Accounts are for people 13 and older. We do not permit children under 13 to create their own accounts, and our sign-up flow asks you to confirm you are at least 13.

Rosters and stats often describe players who may be under 13. That information — a player's name, jersey number, position, optional photo, and game statistics — is entered by an adult operator, not collected from the child directly. We treat this data carefully: see Section 9 (Children's data / COPPA).

2. Information we collect

Data you create in the app

Without an account, this stays in local storage on your device. With an account, it syncs to our servers so you can use it across devices and share it.

Account & profile data (only if you sign in)

Feature & usage data

3. How we use information

We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.

4. Third parties we use

ProviderPurposeWhat they receive
Arbito (id.arbito.co)Account & sign-in (identity layer, operated by Arbito LLC)Email, sign-in identifiers
Apple / Google Sign-InOptional third-party sign-inThe identifier you authorize at sign-in
RailwayServer hostingData processed/stored to run the service
DeepgramSpeech-to-text for voice entry (only when used)The short audio clip to transcribe
ResendTransactional email (invites, billing notices) and delivery of feedback you send usRecipient email + message content, including any screenshot you chose to attach to feedback
SentryCrash and error reportingTechnical error details (stack trace, app version, device model/OS); your account id but never your name, email, or stats content
StripeSubscription billing (only if you subscribe)Payment details you enter with Stripe

These providers process data on our behalf under their own terms; we share only what each needs for its function.

5. Sharing & public team pages

You control who sees your data:

6. Data retention

We keep your data while your account and teams are active. Deleted teams and games are soft-deleted and recoverable for a limited window (about 30 days), after which a background process permanently removes them. We limit retention of information about children to what is reasonably necessary for the purpose it was provided and do not retain it indefinitely. You can delete data or your whole account at any time (Section 8). Deleting your account follows the same rule: data only you can reach is removed permanently, and shared team/organization data you no longer have any part of is anonymized rather than deleted outright, so it doesn't disappear out from under your teammates.

7. Security

We use industry-standard measures to protect data in transit and at rest, restrict access to systems, and maintain a written program for safeguarding children's information, including periodic review. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place. A limited security audit trail — who changed account roles or made billing changes, and when — is retained even after account deletion; it identifies the action, not remaining personal profile detail, and exists to investigate fraud and abuse.

If a breach affects your personal information, we will notify you and any regulator that must be told without undue delay, consistent with applicable law, and tell you what happened and what to do about it.

8. Your choices & rights

Depending on where you live, you may have additional rights (access, correction, deletion, portability). Contact us to exercise them.

9. Children's data (COPPA) & the adult-operator model

Rufio Stats is directed to adults who run and follow volleyball teams, not to children. We do not knowingly allow children under 13 to create accounts, and we ask users to confirm they are 13 or older at sign-up.

Information about players who may be under 13 is entered by an adult (a coach, scorekeeper, or parent) acting as the operator of that team's data. We:

If you believe a child under 13 has created an account or that we hold a child's information without appropriate adult authorization, contact us at support@arbito.co and we will address it promptly.

10. California privacy rights (CCPA/CPRA)

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights. Here is the short version of how it maps onto Rufio Stats.

What we collect. In the last 12 months we have collected, from you directly and from your use of the app:

We do not collect sensitive personal information beyond what is listed above, and we do not use it to infer characteristics about you. We collect this information for the purposes described in Sections 2–4 above — running the product, enabling the sharing you choose, operating optional features like voice entry and subscriptions, and keeping the service secure — and we do not use it for anything materially different without telling you.

We do not sell or share your personal information as "sell" and "share" (cross-context behavioral advertising) are defined by the CPRA, and we have not done so in the past 12 months. We do not sell or share the personal information of anyone under 16.

Your rights. You can ask us to tell you what personal information we hold about you and how we use it, give you a copy in a portable format, correct it if it's wrong, or delete it. You can also use the app's built-in export and account-deletion tools to do the first and last of these yourself, right away. We will not discriminate against you — no worse price, no degraded service — for exercising any of these rights.

How to exercise them. Email support@arbito.co from the address on your account, or use the in-app export and delete tools described in Section 8. We verify requests by confirming control of the account email; for larger requests we may ask for more. An authorized agent may make a request on your behalf if they provide written permission signed by you, and we may still ask you to verify your own identity directly.

11. International users

Rufio Stats is operated from the United States and is directed to users in the United States. We store and process data on U.S.-based infrastructure, and our providers may process it in the U.S. on our behalf. We do not offer the service to, or target it at, people outside the U.S.; if you use it from elsewhere anyway, you understand your information is processed in the United States and you consent to that.

12. Changes to this policy

We may update this policy as the product and applicable law evolve. We will revise the "Last updated" date and, for material changes, provide a more prominent notice.

13. Contact

Arbito LLC · 212 N. 2nd St. Ste 100, Richmond, KY 40475
Support: support@arbito.co · Feedback: feedback@arbito.co