← Back to Arbito
Arbito Market Privacy Policy
Effective Date: October 3, 2026 · Last Updated: October 3, 2026
Arbito LLC ("we," "us," or "our") makes Arbito Market and runs the Arbito account service it connects to at id.arbito.co (together, the "Service"). Arbito Market is the companion wallet for the Arbito apps: it shows the points you have earned in each app, lets you swap your own points between apps, and lets you spend them on avatar cosmetics. It also holds your Arbito account settings.
Arbito Market is free. It has no in-app purchases, no subscriptions, no ads, no analytics, and no crash-reporting service. Points are earned only: they cannot be bought, sold, cashed out, or sent to another user, they have no monetary value, and they are not cryptocurrency.
The Arbito Account Privacy Policy covers sign-in for every Arbito app. This policy covers the same account in more detail, plus your wallet, swaps, avatar, and leaderboards.
1. Information We Collect
1.1 Your account
- Account details: email address, username, and an optional bio (up to 500 characters) and avatar image link.
- Sign-in: a password (stored only as a salted bcrypt hash; we cannot read it), or the identifier Apple or Google returns if you sign in with them. For Sign in with Apple we also keep a token from Apple so we can disconnect the link when you delete your account.
- Security: whether your email is verified; one-time codes we email you (stored hashed); two-factor settings (the authenticator secret is stored encrypted, and recovery codes hashed); passkeys you add (the public key, a device name you can see, and when it was last used); and sign-in sessions.
- Confirmations: when you confirmed you are at least 13 and accepted the Terms, and how you signed up (email, Apple, or Google). We do not collect your date of birth.
- Sign-in records: the IP address you signed up from and last signed in from, sign-in count and last-active time, and a sign-in history (time, IP address, browser or device type, and whether it succeeded). We use these to protect your account.
1.2 Points, swaps, and avatar
- Balances: your points in each Arbito app (for example Mojo from TaDo and Bookmarks from Chapter & Verse) and Arbito Market's shared reward points.
- History: each time points are earned, spent, or swapped: the amount, the app, a short description, and the time.
- Avatar: your avatar's design and the cosmetic parts you own, and how you got each one.
- Leaderboards: whether you have chosen to hide yourself from leaderboards.
1.3 Connected apps
When you sign in to an app with your Arbito account, we record that you allowed it and what it may access, so you can review and revoke that access in Arbito Market (Profile → Linked Apps).
1.4 What we do not collect
Arbito Market does not collect your location, contacts, photos, health data, or advertising identifiers, and does not track you across other companies' apps or websites. It does not use analytics, crash reporting, or push notifications. Your avatar is built from cosmetic parts; you do not upload a photo.
2. How We Use Your Information
- To sign you in to Arbito apps and keep your account secure, including spotting suspicious sign-ins.
- To keep your balances and history accurate, carry out swaps you start, and record avatar parts you unlock.
- To show leaderboards, unless you hide yourself.
- To send account emails: verification links, sign-in and deletion codes, password resets, and security notices (for example when two-factor or a passkey changes). We do not send marketing email to your account address.
- To prevent abuse and meet legal obligations.
We do not use your data for advertising, and we do not sell it.
3. Who Can See Your Information
| Who | What |
|---|
| Anyone | Your public profile (username, avatar, bio, and join date) and your rendered avatar image. Leaderboards show your rank, username, avatar, and the leaderboard's value (such as a points total) unless you turn on Profile → Hide me from leaderboards. |
| An Arbito app you sign in to | Your user ID, username, avatar, and bio; your email address only if the app asked for it when you signed in; and, for apps that use points, your balance in that app's points. |
| Our team | Account and sign-in records, to support you and protect the service. |
4. Service Providers
| Provider | Purpose | Privacy Policy |
|---|
| Railway | Hosts our servers, database, and server logs | Railway Privacy Policy |
| Resend | Delivers our account emails (your email address and the message) | Resend Privacy Policy |
| Apple | Sign in with Apple, if you use it | Apple Privacy Policy |
| Google | Sign in with Google, if you use it | Google Privacy Policy |
| Have I Been Pwned | Checks whether a new password appears in known breaches. Only the first 5 characters of a one-way hash of the password are sent; never the password or your email. | HIBP Privacy |
We may also disclose information if the law requires it, or to a successor if the business is transferred, under this policy.
5. On Your Device
- Face ID is optional. Your device checks it and only tells the app whether it passed; your biometric data never leaves the device.
- Sign-in tokens are kept in the iOS Keychain. Your user ID, email, and sign-in tokens are also placed in a Keychain group shared by Arbito apps on the same device, so you stay signed in across them. No other company's apps can read it.
- Small preferences, such as recent swap pairs, are stored on the device. Deleting the app removes them.
6. Retention and Deletion
- We keep your account, balances, history, and sign-in records while your account exists. One-time codes expire within 10 minutes and are deleted within about an hour after that; expired sign-in sessions are deleted within a day.
- Deleting your account: in Arbito Market, go to Settings → Delete account and confirm with a code we email you or your password. You can also follow the steps at arbito.co/account or email support@arbito.co.
- Deletion is immediate and permanent. We delete your account, profile, avatar, balances, transaction and swap history, sign-in records, passkeys, and connected-app records, and we disconnect Sign in with Apple. Your points are forfeited.
- In the same step we tell every connected Arbito app (currently TaDo and Chapter & Verse: Merge Books) to delete the data it holds about you. We retry for up to about three days if an app cannot be reached. Rufio Stats keeps its own data and has its own deletion page at rufiostats.com/account-deletion.
- What remains for a limited time: our record that a deletion notice was sent to an app (your user ID only, deleted 30 days after delivery), and our hosting provider's server logs, which can include email and IP addresses and are kept for a limited period. If our team deletes an account, an internal audit entry of that action is kept.
7. Security
Data is encrypted in transit (HTTPS). Passwords are hashed with bcrypt, one-time and recovery codes are hashed, and authenticator secrets are encrypted. Sign-in uses short-lived signed tokens, with rate limits on sign-in and optional two-factor and passkeys. No method is perfectly secure, but we work to protect your information.
8. Your Rights
You can see your balances and history in the app, hide yourself from leaderboards, revoke connected apps, and delete your account at any time. Depending on where you live, you may also have the right to request a copy of your data, correct it, restrict or object to how we use it, or receive it in a portable format.
- EEA and UK (GDPR): we process your data to provide the Service you asked for (contract), to keep it secure and prevent fraud (legitimate interests), and to meet legal obligations. You may complain to your local data protection authority.
- California (CCPA): you can ask what we collect and ask us to delete it. We do not sell or share personal information for advertising, and we will not treat you differently for using your rights.
Send requests to support@arbito.co. We respond within 30 days.
9. Children
Arbito accounts are for people 13 and older, and sign-up asks you to confirm that. We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, email support@arbito.co and we will delete it.
10. International Transfers
We are based in the United States, and our service providers may process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for those transfers.
11. Changes to This Policy
If we change this policy in a meaningful way, we will update the date at the top of this page and, where appropriate, tell you in the app.
12. Contact Us