HOW WE PROTECT YOU WHILE YOU PLAY.

• /Your email, to send your sign-in link.
• /A sign-in key made and kept by your phone. We store only the public half.
• /Your health data readings, once you allow them. Up to 58 types, including heart rate, HRV, sleep stages, steps, distances and weight. The full list is below.
• /Each game you connect: its name, publisher, and when you allowed it.

The app only reads your health data. It never writes to it. You pick which types to share in your phone's health settings. The first sync sends your last 14 days, then new readings go up about once a day.

1. 01In the game, choose Connect Staminabar. A web page opens with a QR code.
2. 02Scan the code with the Staminabar app.
3. 03The app shows the game's verified name and publisher. We take those from our records, never from the game.
4. 04Tap Allow or Deny. The code works once and expires after five minutes.

Every game connects through its own server, which we verify first. There is no other way in.

Open the app, go to Games with access, and tap Remove access. The game loses access within about a minute, and its server is told the connection has ended.

To stop sending health data, tap Disconnect in the app, or turn off access in your phone's health settings. Readings already sent stay in your account until you delete it.

• /Stored with Amazon Web Services in the US (us-east-1, northern Virginia).
• /Encrypted in transit and at rest.
• /Keys are encrypted with AWS Key Management Service. Secrets live in AWS Secrets Manager.
• /We never hold a game's private key. Each game's server makes and keeps its own.
• /Our services talk over a private network closed to the internet.
• /Sign-in codes stay out of our logs, and errors about a reading never log its value.
• /No passwords to steal. You sign in with a one-time email link, then your phone's own key.
• /The app has no third-party analytics or ad code.

The full picture, including what is still being built, is on our Trust Center.

There is no password. Sign up with your email and tap the link we send. Your phone becomes your sign-in device and signs you in with its own key from then on.

To delete your account, open Settings in the app and tap Delete account. Deletion happens right away. It removes your account and email, your sign-in devices and keys, your game connections (each game is cut off and its server is told), your health data readings and your daily summaries.

Our database keeps backups for recovery. Copies of deleted data can remain in them until they age out within 35 days.

You can also email privacy@staminabar.io.

Privacy questions go to privacy@staminabar.io. App help goes to support@staminabar.io. When this page changes, so does the date at the top. Full details are in our Privacy Policy.