Rufio Stats is a volleyball stat-tracking app operated by Arbito LLC ("Arbito," "we," "us"). This policy explains what information Rufio Stats collects, how we use it, who we share it with, and the choices you have. Rufio Stats signs you in with an Arbito account (our shared sign-in, hosted at id.arbito.co); the Arbito account privacy practices are summarized here and, where Arbito operates as the identity layer, in the Arbito account notice.
Rufio Stats is a tool for adults (coaches, scorekeepers, team parents, and club administrators) to record and view volleyball statistics. Accounts are for people 13 and older. We do not permit children under 13 to create their own accounts, and our sign-up flow asks you to confirm you are at least 13.
Rosters and stats often describe players who may be under 13. That information (a player's name, jersey number, position, optional photo, and game statistics) is entered by an adult operator, not collected from the child directly. We treat this data carefully: see Section 9 (Children's data / COPPA).
Except for local video files, this data is written to local storage on your device first, so tracking works offline, and syncs to our servers under your account so you can use it across devices and share it. Anything you enter on the built-in demo team, which you can explore before signing in, stays on your device. While you use the demo, the app may still send the anonymous usage counts described below.
Recording is optional. Camera access records the game or scans a camera-link QR code. Microphone access records sound when you choose Record sound. Bluetooth and, on iPhone and iPad, local-network access can send the score, game identifiers, rally timing and selected stat graphics between your stat device and filming device. On Android 11 and earlier, Android requires location permission for Bluetooth scanning; Rufio Stats does not use that permission to read or send your geographic location. Internet camera links use our authenticated game service. A camera-link QR code contains a pairing key: share it only with the person filming.
The recording file, its local score and timing logs, and exports stay on the filming device. Shared YouTube sync markers and game data can sync to teammates. They can remain there after you sign out; signing out does not erase the recording library. Use Settings > Data & storage > Recordings to manage or delete them. Saving or sharing an exported video creates a separate copy in the destination you choose. Deleting our server account data does not delete copies in Photos, another device or an external service.
On iPhone and iPad, you can choose to stream directly to Facebook, YouTube or a custom destination. The destination receives your live video, recorded sound if enabled, and any scoreboard or stat graphics you choose to show. A scoreboard can include team names; stat graphics use jersey numbers by default, and can include player names if you turn them on. Rufio Stats does not relay or host this stream. Set the audience in your destination service before you go live and obtain the permissions you need to film and share the people shown, especially minors. A stream may be retained by the destination under its settings and privacy policy. Facebook uses Meta's privacy policy; YouTube uses Google's privacy policy.
The stream key is stored in secure storage on your filming device and sent to the destination to publish your stream. We do not sync it to your team or our servers. Facebook and YouTube presets use encrypted RTMPS. A custom rtmp:// destination is unencrypted; use rtmps:// when available. Local stream diagnostics include quality, connection events, battery and heat information, with the destination host but not the stream key.
If you tap Check upload in Streaming settings, the device sends random test bytes to Cloudflare's speed-test service to estimate upload capacity. Cloudflare receives the connection's IP address and network request information. The test does not send your video, stream key, account details or team data, and uses up to about 15 MB of data.
Rufio Court is our play-design studio on the website (rufiostats.com, under Court). It works without an account and keeps your plays in your own browser. If you sign in with your Arbito account on the website, you can also save your plays to a cloud Playbook, so they follow you across browsers, and create share links. Nothing in Court is sent to us unless you are signed in and cloud sync is on.
When cloud sync is on, we store the plays you save. A play can contain roster and player names (which may be names of players under 13), team names and colors, player heights and builds, caption and note text, a small JPEG thumbnail of the court (which can show name labels), and any logo images you upload. We also store your brand kit (your logo image, net band text, and end card address) if you set one.
A share link stores a title, the ids of the plays you chose, an expiry date, and whether it shows player names. The default expiry is 90 days, and you can choose 30 or 365 days; there is no link that never expires. Anyone who has the link can open it and see those plays without signing in. The page does not show your name, email address, or account id. A share link hides player names by default: our server removes the names from the plays before it sends them (players show by number or position instead, and a name you typed into a caption or note is replaced the same way), and it leaves out the court thumbnails, which can show name labels. Only if you tick “Show player names” when you create the link does it show the names and thumbnails; if you do, consider first names or initials, since players may be minors. A link shows your plays as they are now, so later edits appear in it, and a play you delete drops out of it. You can revoke a link at any time, and a revoked or expired link stops working at once.
We keep your cloud Playbook while you use Rufio, until you delete it. Delete my cloud Playbook in the Court account menu removes every play, image, brand kit and share link. Deleting your account does the same. Deleting a single play blanks its content right away and keeps only an empty placeholder (an id, a revision number, and a time) so your other browsers learn that it was deleted. If your plan changes so that cloud features are no longer included, your copy is kept, you can still read, download, and delete it, and share links stop working until the features are included again. If your account has no Rufio activity for 12 months (no sign-in or use of the Rufio Stats app, the Rufio Stats website, or Rufio Court), we delete your Court cloud data automatically: every cloud play, image, brand kit and share link. We send a warning email to the address on your account at least 30 days before deletion. If there is no address or our mail provider does not accept the email, we retry and do not start the deletion countdown; signing in to Rufio before the date keeps everything, and the 12 months start again. Plays kept only in your own browser are not affected. Our security audit trail records when a share link is created or revoked, when a warning is sent, and when a Playbook is deleted in full (the action, your account id, and the time, never the plays).
Court cloud storage uses the same hosting provider as the rest of Rufio Stats (Railway). It adds no new third-party service.
Rufio Stats offers optional paid plans (Rufio Pro and Rufio Club), with a free trial. If you start a trial or subscribe, we record your plan, its status (for example trialing, active, canceled, or ended), when it renews or ends, and where you bought it (the Apple App Store, Google Play, or our website). We never receive or store your payment card number.
We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
| Provider | Purpose | What they receive |
|---|---|---|
| Arbito (id.arbito.co) | Account & sign-in (identity layer, operated by Arbito LLC) | Email, sign-in identifiers |
| Apple / Google Sign-In | Optional third-party sign-in | The identifier you authorize at sign-in |
| Railway | Server hosting | Data processed/stored to run the service |
| Deepgram | Speech-to-text for voice entry (only when used) | The short audio clip to transcribe |
| Resend | Transactional email (invites), delivery of feedback and contact-form messages you send us, and update emails you opted into | Recipient email + message content, including any screenshot you chose to attach to feedback |
| YouTube (Google) / Facebook (Meta) / chosen streaming destination | Embedded YouTube playback, or live publishing you start on iPhone/iPad | Playback requests, or your live video/audio, chosen score/stat overlays, stream key and connection information. The destination controls its audience and retention. |
| Cloudflare speed test | Optional upload check | Random test bytes and connection information including IP address; no game video, account details or stream key |
| RevenueCat | Reads purchase and subscription status from the Apple App Store and Google Play for in-app purchases | Your Arbito account id (as your app user id) and your Rufio Stats purchase history; no name or email |
| Apple App Store / Google Play | Payment, billing, and refunds for subscriptions bought in the apps | Whatever you give them when you buy, under their own privacy policies; they tell us your purchase status |
| Stripe | Payment and billing for subscriptions bought on the website | Your card and billing details and email address, collected by Stripe; we keep a customer id and subscription id |
| Sentry | Crash and error reporting | Technical error details (stack trace, app version, device model/OS); your account id but never your name, email, or stats content |
Railway, Sentry, Resend, Deepgram and RevenueCat help us operate the service. Sign-in and payment providers, YouTube playback, the optional Cloudflare upload test and streaming destinations also handle information under their own policies. A destination you choose for a live stream controls its audience and retention; it is not our video-hosting processor.
You control who sees your data:
We keep your data while your account and teams are active. Deleted teams and games are soft-deleted and recoverable for a limited window (about 30 days), after which a background process permanently removes them. We limit retention of information about children to what is reasonably necessary for the purpose it was provided and do not retain it indefinitely. You can delete data or your whole account at any time (Section 8). Messages sent through our contact form are kept for up to 12 months. Your Rufio Court cloud Playbook is kept until you delete it, or until your account has had no Rufio activity for 12 months, when it is deleted automatically after a warning email about 30 days before (see Section 2 and Section 8). Deleting your account follows the same rule: data only you can reach is removed permanently, and shared team/organization data you no longer have any part of is anonymized rather than deleted outright, so it doesn't disappear out from under your teammates.
We restrict access to our systems and maintain a written program for safeguarding children's information, including periodic review. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place. A limited security audit trail (who changed account roles, and when) is retained even after account deletion; it identifies the action, not remaining personal profile detail, and exists to investigate fraud and abuse.
If a breach affects your personal information, we will notify you and any regulator that must be told without undue delay, consistent with applicable law, and tell you what happened and what to do about it.
Billing records after deletion: deleting Rufio Stats data removes our account entitlement and pending checkout details. If a website cancellation is not yet confirmed, we keep only the Stripe customer or subscription identifier and retry information until it is confirmed. Apple, Google, Stripe, and RevenueCat maintain separate purchase records. Records needed for tax, accounting, refunds, fraud prevention, or legal obligations may be retained under their policies. For other processor-held personal data, email support@arbito.co; we verify the request, arrange deletion with the processor where applicable, and explain any records that must be retained. Deleting an account does not cancel an Apple or Google Play subscription.
Depending on where you live, you may have additional rights (access, correction, deletion, portability). Contact us to exercise them.
Rufio Stats is directed to adults who run and follow volleyball teams, not to children. We do not knowingly allow children under 13 to create accounts, and we ask users to confirm they are 13 or older at sign-up.
Information about players who may be under 13 is entered by an adult (a coach, scorekeeper, or parent) acting as the operator of that team's data. We:
If you believe a child under 13 has created an account or that we hold a child's information without appropriate adult authorization, contact us at support@arbito.co and we will address it promptly.
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights. Here is the short version of how it maps onto Rufio Stats.
What we collect. In the last 12 months we have collected, from you directly and from your use of the app:
The anonymous usage counts described in Section 2 are also product-interaction information, but we keep them only as daily totals for each feature and platform, which are not linked to you, your account, or your device.
We do not collect sensitive personal information beyond what is listed above, and we do not use it to infer characteristics about you. We collect this information for the purposes described in Sections 2–4 above: running the product, enabling the sharing you choose, operating optional features like voice entry, improving the product, and keeping the service secure, and we do not use it for anything materially different without telling you.
We do not sell or share your personal information as "sell" and "share" (cross-context behavioral advertising) are defined by the CPRA, and we have not done so in the past 12 months. We do not sell or share the personal information of anyone under 16.
Your rights. You can ask us to tell you what personal information we hold about you and how we use it, give you a copy in a portable format, correct it if it's wrong, or delete it. You can also use the app's built-in export and account-deletion tools to do the first and last of these yourself, right away. We will not discriminate against you (no worse price, no degraded service) for exercising any of these rights.
How to exercise them. Email support@arbito.co from the address on your account, or use the in-app export and delete tools described in Section 8. We verify requests by confirming control of the account email; for larger requests we may ask for more. An authorized agent may make a request on your behalf if they provide written permission signed by you, and we may still ask you to verify your own identity directly.
Rufio Stats is operated from the United States and is directed to users in the United States. We store and process data on U.S.-based infrastructure, and our providers may process it in the U.S. on our behalf. We do not offer the service to, or target it at, people outside the U.S.; if you use it from elsewhere anyway, you understand your information is processed in the United States and you consent to that.
We may update this policy as the product and applicable law evolve. We will revise the "Last updated" date and, for material changes, provide a more prominent notice.
Arbito LLC · 212 N. 2nd St. Ste 100, Richmond, KY 40475
Support: support@arbito.co · Feedback: feedback@arbito.co