Privacy Policy

Effective date: October 21, 2026 · Last updated: October 21, 2026

1. Who we are

OurVBStats ("OurVBStats", "we", "us") is a team management and statistics app for junior volleyball clubs. It is operated by Victor Vasquez, an individual based in Gilbert, Arizona, USA.

This policy covers the OurVBStats iOS app, the OurVBStats website and web admin, and related services (together, the "Service"). Contact: victorvas20@me.com.

2. Clubs and us

Volleyball clubs subscribe to OurVBStats and invite their staff, players and families. The club decides who is on its rosters and what information it adds about them. We store and process that information on the club's behalf, to provide the Service to the club, and for no other purpose. Questions about the information a club holds about you can go to the club or to us. We will help, and may pass your request to the club.

3. Information we collect

4. What we don't collect

• No advertising identifiers, no ad networks, no third-party analytics or tracking SDKs. We do not track you across other companies' apps or websites.
• No precise location, no home addresses, no school names, and no access to your phone's contacts.
• Player photos are off by default. If a future version adds photos, they will require a guardian's opt-in.

5. How we use information

• To run the Service: rosters, schedules and RSVPs, live stat entry, lineups and rotations, reports, exports, calendar feeds, live scores and team messaging.
• To send messages you expect: invites, sign-in codes, schedule changes, reminders and receipts.
• To keep the Service secure, prevent abuse, and fix crashes and bugs.
• To answer support requests and manage club subscriptions.
• To meet legal obligations.

We do not use information for advertising, we do not build marketing profiles, and we do not sell or share personal information for money or for cross-context behavioral advertising.

6. Who can see what

• Each club is separate. Data is stored per club and protected in the database by row-level security, so members of one club cannot see another club's data.
• No public profiles or search. You must be signed in and a member of a club to see anything in it.
• Individual player stats are visible to the player, the player's linked parents/guardians, and the coaches and administrators of that player's club. Teammates and other families see only name, jersey number and position, unless the club turns on "share stats within team" (off by default).
• Team-level information (schedule, set scores, live scores, announcements) is visible to members of that team.
• Team messages are visible to the people in the thread. Any thread that includes a minor must include at least two adults, and coaches cannot send direct one-to-one messages to minors. Club owners and administrators can review team threads to keep members safe, and messages can be reported to them.
• Our support access. We can access a club's data only when a club owner or administrator grants a time-limited support session. That access is logged.

7. Children's privacy (COPPA)

OurVBStats is used by junior clubs, so some players are under 13. We follow the U.S. Children's Online Privacy Protection Act (COPPA) and the FTC's COPPA Rule as amended in 2025.

• Under 13: no login. Children under 13 cannot create their own accounts. They appear only as player records that their club and their parent or guardian manage.
• Guardian consent first. Beyond roster basics (name, jersey number, position, team), we do not store information about a child under 13 until a parent or guardian has given verifiable consent in the app. We record that consent.
• What is collected about children: the player-record, attendance, stats and optional emergency/medical items in section 3. Children do not send messages or give us information directly.
• How it is used and shared: only to provide the Service to the child's club and family, with the service providers in section 8. Never for ads, profiling or sale.
• Parents' rights: a parent or guardian can review the child's information, correct it, delete it, refuse further collection, or withdraw consent at any time. Use the app (child's profile → Privacy) or email victorvas20@me.com. Withdrawing consent removes everything except roster basics, or the whole record if you ask. This may limit what the club can do in the app for that child.
• Ages 13–17: teens can have their own login only after a linked parent or guardian approves it. The guardian can revoke that approval.
• OurVBStats is not listed in the App Store's Kids category. Its main users are club staff and parents.

If you think we have a child's information without proper consent, contact us and we will delete it promptly.

8. Service providers

We use a small number of providers to run the Service. They may use the information only to provide their service to us.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or transfer of the Service. In a transfer, this policy (or one at least as protective) would continue to apply, and we would notify clubs first.

9. Payments (Stripe)

Club owners pay for subscriptions through a Stripe checkout page on the web, not through in-app purchases. Families and players never pay and never see billing. Stripe processes card and bank details under its own privacy policy. We never see or store full card numbers. We receive the billing contact, plan, payment status and the last four digits and brand of the card.

10. Push notifications

Push notifications are opt-in. The app asks for permission, and you can say no. If you allow them, we store your device's push token so we can send schedule changes, event reminders, RSVP requests, live-score alerts and message alerts. You can change which notifications you get in Settings → Notifications, or turn them all off in your iPhone's Settings. Notifications show event, team and message details, not individual player stats.

11. Calendar feeds and exports

• Calendar (ICS) feeds: each member can create a private calendar link for a team or child. It contains team and event details only (title, time, location), with no player information. Anyone who has the link can see those events, so keep it private. You can revoke a link and make a new one at any time.
• Exports (PDF, CSV and MaxPreps-style CSV): coaches and admins can export stat sheets. Parents can export only their own linked players' stats. Once a file is exported or shared, it is outside the app. The person who exported it is responsible for it.

12. How long we keep data

• Club data is kept while the club has an account. Each club can set its own retention period. By default, player information from a season is deactivated one year after that season ends.
• Lapsed subscriptions: if a club stops paying, its space becomes read-only after a 14-day grace period, and its data is kept so the club can export it or come back. If a canceled club doesn't return within 12 months, we delete its data, after emailing the owner first.
• Deleted accounts are removed within 30 days. Encrypted backups roll off within 7 more days.
• Match history: when a player record is deleted, team totals and set scores for past matches stay, but the player's name and personal details are removed (anonymized).
• Billing and legal records (invoices, consent records) are kept as long as tax, accounting or consent laws require.
• Crash reports are kept for up to 90 days.

13. Deleting data and your choices

• Delete your account in the app: Settings → Delete account. We confirm when it's done.
• Delete a child's record: a linked parent or guardian can delete their child's player record from the child's profile.
• Delete a club: the club owner can ask us to delete the whole club and all its data.
• By email: send deletion, access, correction or export requests to victorvas20@me.com from the email on your account. We reply within 30 days and may need to confirm your identity or check with your club.
• Other choices: turn off push notifications, revoke calendar links, withdraw guardian consent, or revoke a teen's login.

14. Security

Data is encrypted in transit (HTTPS) and at rest. Each club's data is separated with database row-level security, and automated tests check that one club can't reach another's data. Admin access requires multi-factor authentication, and support access is time-limited and logged. No system is perfectly secure. If a breach affects your information, we will notify affected clubs and users as the law requires.

15. State privacy rights

Depending on where you live (for example California, Colorado, Virginia or Texas), you may have the right to know, access, correct, delete or get a copy of your personal information, and to opt out of its sale or use for targeted advertising. We don't sell personal information or do targeted advertising. To use any of these rights, email us. We won't treat you differently for doing so. If you are an authorized agent, include proof that you are authorized.

16. Changes to this policy

If we make material changes, we will update the date above and tell club owners by email and in the app before the changes take effect. If a change affects children's information, we will ask parents for new consent where COPPA requires it.

17. Contact us