Privacy policy
How Rovify Inc. collects, uses and protects personal data across rovify.io and the Rovify platform. Written to be read, not skimmed past.
Who we are
In shortRovify Inc. runs rovify.io and the Rovify platform. Questions go to hello@rovify.io.
Rovify Inc. ("Rovify", "we", "us") operates the website at rovify.io and the Rovify platform at app.rovify.io, with teams in Lagos and Kigali.
For data you give us directly on this website, such as a demo request or newsletter sign-up, Rovify is the controller. For records a school, club, academy or league keeps on the Rovify platform about its own athletes, that institution is the controller and Rovify processes the data on its instructions.
You can reach us about anything in this policy at hello@rovify.io.
What we collect
In shortOnly what you type into a form, what your browser sends with every request, and what an institution records on the platform.
On the website:
- Demo and partner requests: name, email, phone, organisation, role, country, approximate number of athletes, sports, preferred date and time slot, your time zone and any notes you add.
- Newsletter sign-up: your email address.
- Server logs: IP address, browser and device type, the page requested, the referring page and the time. Our web server records these for every request.
- Your cookie choices, stored in your own browser so the banner does not ask again.
On the Rovify platform, depending on what an institution uses:
- Account details for staff, coaches, scouts and athletes: name, email or phone, role and organisation.
- Athlete records: date of birth, team, position, match appearances, results and statistics.
- Match media: video and photographs captured at fixtures, and highlights cut from them.
- Usage data: sign-in times, device information and actions taken in the app, used to keep accounts secure.
We do not ask for government ID numbers, health records or payment card details on the website.
How we use it
In shortTo answer you, run the service, keep it secure and improve it. Never to sell.
- To reply to demo and partner requests and arrange the call you asked for. Legal basis: steps taken at your request before a contract, and our legitimate interest in responding.
- To send the Rovify Dispatch newsletter. Legal basis: your consent, which you can withdraw from any issue.
- To provide the platform to institutions under their contract with us, including storing records, producing highlights and publishing profiles the institution chooses to make public.
- To keep the website and platform secure, investigate abuse and fix faults. Legal basis: legitimate interest.
- To meet legal obligations, such as answering a lawful request from a regulator.
We do not sell personal data and we do not use it to build advertising profiles.
Young athletes
In shortMost athletes on Rovify are under 18. Their institution and a parent or guardian stay in control.
Schools, clubs and academies that record athletes under 18 on Rovify must have the consent of a parent or guardian where the law requires it, and must tell families what is recorded and why.
A minor's profile is private by default. It becomes visible to scouts or the public only when the institution and, where required, a parent or guardian turn that on.
Parents and guardians can ask the institution or us to see, correct or remove a child's record at any time.
This website is not directed at children and we do not knowingly collect a child's data through its forms.
International transfers
In shortData can move across borders. When it does, we protect it the way the sending country requires.
Rovify serves institutions in several countries and some of our providers operate elsewhere, so personal data may be processed outside the country where it was collected.
When we transfer data out of Nigeria, Rwanda, the European Economic Area, the United Kingdom or any other country with transfer rules, we rely on the safeguards that country recognises, such as adequacy decisions or standard contractual clauses.
How long we keep it
In shortAs long as it is needed, then deleted or anonymised.
- Demo and partner requests: up to 24 months after our last contact, unless you become a customer.
- Newsletter: until you unsubscribe.
- Server logs: up to 90 days, longer only while investigating a security incident.
- Platform records: for as long as the institution's contract runs, then returned or deleted as the contract sets out. Verified results an institution chooses to keep as part of its sporting history may be held longer on its instructions.
Your rights
In shortSee, correct, delete, export or object. Email us and we answer within 30 days.
Depending on where you live, including under Nigeria's Data Protection Act 2023, Rwanda's Law No. 058/2021 on the protection of personal data and privacy, and the GDPR, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete data we no longer have a reason to keep;
- restrict or object to how we use it, including withdrawing consent;
- send your data to you or another provider in a usable format.
Email hello@rovify.io. We will confirm who you are, then respond within 30 days. If the data sits in an institution's records, we will pass your request to that institution and help it respond.
You can also complain to your data protection authority, such as the Nigeria Data Protection Commission or Rwanda's National Cyber Security Authority.
Security
In shortEncryption in transit, access limited to people who need it, and a plan for when things go wrong.
Traffic to rovify.io and the platform is encrypted with TLS. Access to personal data is limited to staff who need it for their work, and administrative access requires strong authentication.
If a breach puts your data at risk, we will tell the affected institutions, the relevant authority and, where required, you, within the time the law sets.
Governing law
In shortThis policy is governed by the laws of the State of Delaware, USA. Your local data protection rights still apply.
This policy is governed by the laws of the State of Delaware, United States, without regard to its conflict of laws rules.
Nothing in this policy takes away rights you have under the data protection law of the country where you live, including the right to complain to your local data protection authority.
Changes to this policy
In shortIf it changes, the date at the top changes. Big changes get a notice.
We update this policy when our services or the law change. The effective date at the top always shows the current version. If a change materially affects how we use your data, we will give notice on the website or by email before it takes effect.