Volleyball Scout

Privacy Policy

Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Version 1.1 – Last updated: October 6, 2026

Translation provided for convenience. In case of conflict, the Italian version prevails.

1. Data controller

The data controller is Tortiolaware F.R., a sole proprietorship of Francesco Rasi, Via Tortiola 39/H, 44049 Vigarano Mainarda (FE), Italy, VAT no. (P.IVA) 02100360383.

For any privacy question write to support@volleyball-scout.com or to the certified email (PEC) francescorasi@pec.it. No Data Protection Officer (DPO) has been appointed, because it is not mandatory for our activity.

2. Who this notice applies to

This notice concerns those who use the VolleyballScout and VolleyballScoutVideo apps and those who visit the volleyball-scout.com site and its subdomains. It describes how we process your personal data as controller.

The data of athletes that a coach or a club enters in the apps follows different rules, explained in section 4.

3. What data we process, why and for how long

Purpose	Data processed	Legal basis	Retention
Creation and management of the account, activation of licenses	Email, user ID, login method (for Google or Apple: name and email provided by the service), licenses, linked devices	Performance of the contract (Art. 6.1.b GDPR)	As long as the account exists. Deletion within 30 days of the request. Inactive accounts: 24 months
Cloud sync and AI Coach (Studio Plan)	Matches, teams and statistics you save in the cloud, questions asked to the AI Coach	Performance of the contract	As long as the account exists. After Studio expires: 12 months. AI Coach conversations stay only on your device
Payments and subscriptions	Email, customer ID, product, amount, date, subscription status, tax code or VAT number and billing address if you enter them. Card data is handled by Stripe or the stores and we do not see it	Performance of the contract; legal tax and accounting obligations (Art. 6.1.c)	10 years
Support	Email, content of messages, files you choose to send us	Performance of the contract; legitimate interest in handling requests (Art. 6.1.f)	Messages: 24 months from the closing of the request. Files: deleted when the request is closed
Security, abuse prevention, backend operation	IP address, user ID, technical identifiers, date and time of requests	Legitimate interest in the security of the Service	90 days
Reporting of app crashes (Firebase Crashlytics, “Necessary” category), always active in the published versions of the apps on Android, iOS and macOS	Technical data of the device and the app, error trace and, if you are logged in, your account ID	Legitimate interest in fixing errors	90 days
App statistics (Google Analytics for Firebase, “Statistics” category)	Analytics identifier on the device, your account ID if you are logged in, screens viewed and usage events (plans viewed, start of a purchase, purchase, match completed, report exported, question to the AI Coach, DataVolley import and export), device model, operating system, approximate country	Consent (Art. 6.1.a), requested at the first launch of the app and revocable at any time from the “Privacy” entry in the app settings. Without consent, statistics are not collected	14 months
Measurement and personalization of advertising from the apps (“Marketing” category): Meta SDK in the Android and iOS apps, Google Consent Mode advertising signals, Google Signals	For Meta: installation and opening of the app, usage and purchase events, device advertising ID, device model and operating system. We never send Meta your account ID or your email. For Google: the advertising signals, the device advertising ID and, through Google Signals, the link to the data of your Google account if you have turned on ad personalization	Consent (Art. 6.1.a), requested at the first launch of the app and revocable at any time from the “Privacy” entry in the app settings. On iPhone and iPad your permission is also required in Apple’s tracking prompt: if you deny it, Meta and the advertising ID stay off	Google Analytics: 14 months. Meta: according to Meta’s rules
Site statistics and measurement and personalization of advertising (Google Analytics; with the Marketing consent also Google Signals, Google Consent Mode advertising signals, Meta Pixel, Meta Conversions API)	Cookie identifiers, IP address, browser, pages visited, purchase events and, for Meta Conversions API, email in encrypted form (hash), user ID, IP address and browser at the time of purchase	Consent (Art. 6.1.a), given through the cookie banner and revocable at any time	Google Analytics: 14 months. Meta: according to Meta’s rules. Details in the Cookie Policy
Legal obligations and defense of our rights	The data necessary in the specific case	Legal obligation; legitimate interest	For the periods required by law or until the end of any dispute

Google Signals. Google Signals is active on our Google Analytics property, both for the site and for the apps. Thanks to Google Consent Mode it works only for those who have accepted the Marketing category: it links visits and app usage to the Google accounts that have ad personalization turned on, in order to obtain demographic data and build audience segments in Google Ads. For the data used in Google Signals and Google Ads, Google acts as an independent controller.

We do not use your data to send you promotional emails and we do not send push notifications.

At the first launch on Android, iOS and macOS the apps ask for your consent with three categories:

Necessary: crash reporting (Firebase Crashlytics). It is always active, because it is needed to fix errors.
Statistics: Google Analytics for Firebase, as described in the table.
Marketing: the Meta SDK (Android and iOS only), Google Consent Mode advertising signals, the device advertising ID and Google Signals. The advertising ID is collected only if you accept this category. On iPhone and iPad, after you accept it, Apple’s tracking prompt appears: if you deny it, Meta and the advertising ID stay off.

With “Accept” you turn on all the categories; by closing the prompt with the X you reject them; with “Customize” you choose category by category. The apps use identifiers stored on the device which, except for the necessary ones, are subject to your consent.

Your choice stays only on the device. We ask you again after 6 months if you rejected at least one category, or when the text of the prompt changes. You can change or withdraw your consent at any time from the “Privacy” entry in the app settings. If you turn off Statistics, the Analytics identifier on the device is reset.

On Windows and Linux the apps do not collect statistics, marketing data or crash reports.

Providing the data for the account and payments is necessary to use the paid features. Without this data you can only use the Base version without an account. We do not make decisions based solely on automated processing that produce legal effects on you (Art. 22 GDPR).

4. Athlete data entered by users

Coaches and clubs can enter in the apps data of players, such as first name, last name, nickname, jersey number and statistics.

Base and Premium Plans: this data stays on the user’s device and we do not process it.
Studio Plan: when cloud sync or the AI Coach are used, we process this data on behalf of the coach or club, which is the controller. We are the processor pursuant to Art. 28 GDPR, under the Data Processing Agreement attached to the Terms.
AI Coach: to answer, it sends to Google (Gemini service, paid version) a summary of the match with jersey numbers, first and last names of the players. Google does not use this data to train its models and may process it also in the United States (section 6).

If you are an athlete, or the parent of a minor athlete, and you want to exercise your rights over this data, contact the coach or club that entered it. If you write to us, we will forward the request.

On the instruction of the coach or club, we may anonymize the data synced to the cloud, removing first names, last names, nicknames and any identifying element, to improve our products and train artificial intelligence models. We do not use images or videos. Anonymous data does not allow anyone to be identified and is not personal data.

5. Who we share data with

We do not sell your data. We share it only with those necessary to provide the Service.

Recipient	Role	Activity
Google (Firebase)	Processor	Authentication, cloud database (EU), portal hosting, sending of service emails, Crashlytics, app statistics (only with your consent)
Google (Gemini API)	Processor	AI Coach answers
Amazon Web Services	Processor	Backend (Ireland) and distribution of VolleyballScoutVideo
Stripe	Processor for payment processing; independent controller for its own legal obligations	Payments on the site, receipts
RevenueCat	Processor	Management of in-app purchases
Apple, Google (App Store, Google Play, login with Apple or Google)	Independent controllers	Distribution of the apps, in-app purchases, login with their account
Aruba	Processor	Hosting of the volleyball-scout.com site and support mailbox (Italy)
Meta Platforms Ireland	Joint controller for collection through Pixel, Conversions API and the apps’ SDK; independent controller for subsequent processing	Campaign measurement on the site and in the Android and iOS apps, only with your Marketing consent
Google (Google Analytics, Tag Manager)	Processor	Site statistics, only with your Statistics consent
Google (Google Signals, Google Ads)	Independent controller	Google Signals and advertising signals on the site and in the apps, only with your Marketing consent
Advisors (accountant, lawyer), authorities	Independent controllers	Legal compliance, defense of rights

For the collection of data through Meta Pixel, Meta Conversions API and the Meta SDK in the apps we are joint controllers with Meta Platforms Ireland Ltd., on the basis of Meta’s joint controllership agreement (Controller Addendum). We inform you and collect consent; Meta ensures the exercise of rights over the data it receives. You can also exercise them directly with Meta, as indicated at www.facebook.com/privacy/policy.

6. Transfers outside the European Union

Some providers, such as Google, Meta, Stripe, RevenueCat and Apple, may process data in the United States or in other countries outside the European Economic Area. In these cases the transfer takes place:

on the basis of the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers;
or with the standard contractual clauses approved by the European Commission.

You can ask us for a copy of the safeguards adopted by writing to support@volleyball-scout.com.

7. Your rights

You can exercise at any time the rights provided by Arts. 15-22 GDPR:

access to your data and a copy;
rectification of inaccurate data;
erasure, also directly from the premium.volleyball-scout.com portal for the account;
restriction of processing;
portability, also by exporting matches from the apps;
objection to processing based on legitimate interest;
withdrawal of consent, without affecting the lawfulness of processing already carried out, from the “Cookie preferences” link on the site or from the “Privacy” entry in the app settings.

Write to support@volleyball-scout.com or to the PEC francescorasi@pec.it. We reply within one month, extendable in the cases provided by law. We may ask you for information to verify your identity.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

8. Minors

You must be at least 14 to create an account. If we find out that an account was created by a younger person, we delete it. Purchases by minors must be made or authorized by a parent, as provided by the Terms.

9. Security

We adopt appropriate technical and organizational measures to protect data, including encrypted connections, encryption of scout data on the device and access to cloud data reserved to the account holder. However, no system is 100% secure.

10. Changes

We may update this notice. We will tell you about important changes by email or in the apps. The date of the last update is always shown at the top.