Stadium Health

Privacy Policy

The short version: your heart-rate data stays on your phone. We never receive it, store it, or share it. The only personal information we hold is the email address you sign up with.

This policy explains what Stadium Health collects, what it does not collect, and what your choices are. It applies to the Stadium Health mobile application and to tbs.stadiumgames.co, both operated by Stadium Games Inc. ("Stadium Games", "we", "us"), Ontario, Canada.

Biometric and heart-rate data stays on your device

Stadium Health connects over Bluetooth to a heart-rate monitor you own — a chest strap or watch. The readings are used live during a session to show your heart rate on screen and to calculate your baseline.

Those readings, your session history, and your protocol results are written to a database stored locally on your device. They are never transmitted to us or to anyone else. We cannot see them, we do not back them up, and we could not produce them if asked. Deleting the app deletes them permanently.

We do not sell biometric data, do not use it for advertising, and do not include it in research.

What we do collect

Email addressProvided when you create an account. Used to sign you in, verify your address, and send you account email. Held by Google Firebase Authentication on our behalf.
Account identifierA random ID generated at signup, used to link your account to your subscription status.
Subscription statusWhether your access is active, and the balance remaining on any access code. Held in Google Firestore.

That is the complete list. The app contains no advertising, no analytics SDK, and does not use an advertising identifier.

Payments

Payments and access-code balances are handled by Stripe, Inc. If you subscribe by card, your card details are entered on Stripe's systems and are never seen or stored by us. We hold only a Stripe customer reference and your subscription status. Stripe's handling of that data is governed by Stripe's privacy policy.

Email

Account email — address verification, activation, and balance notices — is sent through Resend. Your email address is shared with Resend only to deliver those messages. We do not send marketing email and there is no mailing list.

Service providers

We use a small number of processors, each handling only what is described above:

We do not sell personal information, and we do not share it with advertisers or data brokers.

Legal basis and retention

We process your email address and account identifier because they are necessary to provide the service you asked for. We keep them for as long as your account exists, and delete them when you ask us to close it.

Your choices

Depending on where you live you may have further rights under PIPEDA, the GDPR, or similar law. Contact us and we will honour them.

Children

Stadium Health is intended for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

Security

Data in transit is encrypted with TLS. Accounts are protected by Google Firebase Authentication. Because heart-rate data never leaves your device, it is protected by your device's own security rather than ours.

Not a medical service

Stadium Health is not a medical device. It does not diagnose, treat, or monitor any medical condition, and nothing it shows you is medical advice.

Changes

If this policy changes materially we will update this page and the date below, and — where the change affects how we handle your information — tell you by email.

Contact

Stadium Games Inc., Ontario, Canada
Privacy enquiries and deletion requests: support@stadiumgames.co

Last updated: 25 August 2026