State888 Privacy Policy

Effective date: 22 August 2026. Last updated: 12 November 2026.

This Privacy Policy explains how BARDOS IT SOLUTIONS LTD (“BARDOS”, “we”, “us”) collects, uses, stores, shares, retains and deletes personal data in connection with State888 (“State888”, “the app”), the active-lifestyle social platform built around the 8 · 8 · 8 balance. It covers the Android app distributed under package com.state888.com and the corresponding iOS app with bundle identifier com.state888.com.

This page is the official State888 privacy policy. It describes the behaviour of the current version of the app: it does not describe features that do not exist, and it does not leave out ones that do.

Note on status. This policy is a professional draft prepared from the current State888 implementation and is published so that users and app store reviewers can see how State888 actually handles data. It has not yet been reviewed by external legal counsel. Where a specific retention period has not yet been formally set, that is stated explicitly below rather than implied.

1. Introduction and scope

This policy applies to anyone who uses State888, visits the State888 pages on this website, or contacts us about State888. It does not cover other BARDOS websites or products, such as UniX, which have their own policies.

State888 is a social platform for active people, available internationally. It connects athletes, coaches, clubs, venues, event organisers, and anyone building an active life, around activity tracking, the 8 · 8 · 8 daily balance, sports profiles, social discovery, communities, events, training partners, chat, match results, and Stories.

State888 is not a medical device or a health service. It does not provide medical, diagnostic, or clinical advice, and nothing in the app should be relied on as such.

2. Who controls the data

BARDOS IT SOLUTIONS LTD, a company registered in England and Wales, is the data controller responsible for personal data processed through State888. You can contact us about privacy matters at info@bardos.co.uk.

3. Information you provide

We collect the information you choose to give us when you use State888, including:

• Account information: your email address and password if you register directly, or the name and email address released to us by Google or Apple if you use Sign in with Google or Sign in with Apple.
• Username: the unique handle other people see and search for.
• Profile information: your display name, profile photo, bio, location or region, and the sports you play together with the level and roles you choose to show, and your account type (athlete, coach, club, or venue).
• Date of birth, used to confirm you meet the minimum age for a State888 account and, where relevant, to show age-appropriate content and features.
• Sport and activity information: activities you record or log, your 8 · 8 · 8 daily balance entries, and the sports and training preferences you set.
• Photos and media you upload to your profile, Stories, posts, events, or chats.
• Voice and audio where you record and send a voice message in chat.
• Messages you send in one-to-one and group chats.
• Events you create, join, or respond to, including the details you publish about them.
• Communities you create or join, and the content you post in them.
• Match results you record, including opponents, scores, and related detail you enter.
• Organisation, coach, and venue information where you set up or manage a club, coaching, or venue presence.
• Support and reports: the content of messages you send us, the category you select, and — only if you choose to attach them — a screenshot and basic device diagnostics (operating system version, app version, language, and timezone). We also store reports you submit about other users or content.

State888 does not ask for payment card details, and does not process payments inside the app.

4. Sport, activity and location data

State888 records activity so you can see, review, and share what you did. Depending on the features you use, this can include:

• GPS / location data collected while you are recording an activity, so the app can produce a route, distance, pace, and duration.
• Tracked activity details such as sport type, start and end time, moving duration, distance, elevation gain, and the summary metrics derived from them.
• Approximate location where you choose to use location-based discovery — for example finding nearby venues, events, clubs, or training partners.

Location is used for the feature you invoked. To keep recording an activity you started when your screen turns off, State888 continues to use the location access you granted while using the app, only for as long as that recording runs; your device shows a location indicator (iPhone) or a persistent notification (Android) the whole time. State888 does not request “Always” or “Allow all the time” location access. You can withdraw location permission at any time in your device settings; activity recording that depends on GPS will stop working until you grant it again.

Routes you record are private to your account. They are not shown to other users and are not included when you share a Story unless you deliberately add a route map sticker to it.

You also control how precisely your location is shared with other users, in State888 under Settings → Privacy. The available levels are exact place, city only, country only, and hidden. Choosing a stricter level deletes the more precise information already stored — it is not merely hidden from view.

5. Health and fitness data — overview

State888 can connect to the health store built into your device, if you choose to allow it: Apple Health (HealthKit) on iOS and Health Connect on Android. The integration is optional on both platforms, and the app is fully usable without it — every category can be logged manually or with the in-app timer instead.

Across both platforms, State888 reads exactly six categories:

• Sleep — sleep records, which fill in your Sleep balance.
• Exercise / workout sessions — which fill in the sport part of your Life balance.
• Heart rate — used for the time window of an activity you recorded in State888, so the app can show a real average and maximum for that session.
• Active calories / active energy — used for the same purpose, for the same activity window.
• Steps — your daily total, shown in Today’s activity.
• Distance — your daily walking and running distance, shown in Today’s activity.

That is the entire list. State888 reads health data only while you are using the app — when a relevant screen opens, when you return to the app, or when you pull to refresh. It does not read health data in the background, and it does not request access to health history beyond the platform’s standard window.

Three different kinds of information are described in this policy and should not be confused. Raw platform health records — the individual sleep, step, distance, heart-rate, active-energy and workout samples held by Apple Health or Health Connect — are read on your device and are not uploaded by State888. Derived values are small summaries State888 computes from them, such as minutes per pillar in your daily balance. State888’s own activity data is what you record in the app itself, such as a GPS-tracked run. Section 12 sets out exactly which of these leaves your device.

6. Apple Health (HealthKit) on iOS

On supported Apple devices, and only if you explicitly authorise it, State888 can read health and fitness data from Apple Health through Apple’s HealthKit framework. Access is optional, you control it, and State888 requests only the data types its current features actually use.

The read categories State888 requests on iOS are:

• Sleep — the sleep-analysis stages that mean you were actually asleep. Time recorded as awake or merely in bed is not counted as sleep.
• Workouts.
• Heart rate.
• Active energy.
• Steps.
• Walking + running distance — only this distance type. Swimming and cycling distance are not requested, because nothing in the app uses them.

Writing to Apple Health

On iOS only, State888 writes an activity you record in State888 itself — a run, walk, hike, or ride you started and finished in the app — back to Apple Health as a workout, so it appears in Apple Fitness alongside your other sources. Nothing else is ever written. Write access is requested separately from read access, at the point you first save a tracked activity, so if you never record one you are never asked for it.

Changing or revoking access

You can review, change, or fully revoke State888’s access at any time in the iOS Health app under your profile → Privacy → Apps & Services → State888, and from Settings → Connected Services inside State888. Revoking stops any further reading immediately.

A limit set by Apple, not by us. Apple deliberately does not disclose to an app whether read access to a given category was granted or refused — a refused category is indistinguishable from one that simply has no data. State888 therefore cannot display a reliable per-category permission status on iOS, and does not claim to. Where a category returns nothing, the app leaves the figure blank rather than estimating it.

Health data read from Apple Health is used only to provide the State888 features you asked for. It is not used for advertising, marketing, or cross-app tracking, it is not sold, and it is not disclosed to data brokers. It is not shared with other State888 users unless you choose to share an activity, result, or Story that contains it. Health access is not required to use the core app.

7. Health Connect on Android

On Android, State888 integrates with Health Connect, the platform health store provided by Android. Health Connect is a separate app or system component; where it is not installed or needs updating, State888 tells you so and can take you to install it, but never does so on its own.

State888 declares and requests exactly seven Health Connect read permissions:

• Sleep — sleep sessions, for the Sleep / Recovery part of your daily balance.
• Exercise — workout sessions, for the Life part of your daily balance.
• Heart rate — for the time window of an activity you recorded in State888.
• Active calories burned — for the time window of an activity you recorded in State888.
• Steps — for today's step count on Home.
• Distance — for today's walking and running distance on Home.
• Total calories burned — not shown in State888; Health Connect requires it to return workout sessions together with their totals, so without it workouts cannot be read at all.

These seven are read permissions only. State888 does not write anything to Health Connect and declares no Health Connect write permission. It also does not request background health reads, and does not request access to health history beyond Health Connect’s standard window.

Granting, refusing, and partial access

• Health Connect access is optional. State888 explains what it is asking for before the system permission screen appears, and only after you have chosen to connect.
• Permissions are granted and revoked individually in the Health Connect permission sheet, or later in Health Connect’s own app-permission settings.
• Partial permission is fully supported. If you allow some categories and refuse others, State888 uses what it can read and leaves the rest blank. It never estimates or fills in the gap, and refusing one category never suppresses another.
• State888 continues to work without any health access at all. Every category can be logged manually or with the in-app timer.
• Choosing “Not now” is respected — State888 does not keep asking.

Health records available through Health Connect may have been written by other compatible apps and devices — for example a watch, a fitness tracker, or another fitness app that makes its data available through Health Connect. See section 13.

Health data read through Health Connect is used only to provide the State888 features you asked for. It is not used for advertising, marketing, or cross-app tracking, it is not sold, and it is not disclosed to data brokers.

8. Today’s activity — steps and distance

State888’s Home screen has a Today’s activity card showing your daily steps and daily distance. Where you have granted access, these two figures are read from Apple Health or Health Connect for the current local calendar day and displayed to you.

Both figures are obtained through the platform’s own aggregation, where supported — HealthKit’s statistics query on iOS, and Health Connect’s aggregation on Android. State888 does not read individual step or distance records and add them together. That matters for accuracy: steps and distance are the metrics most likely to be reported by several sources at once — a phone in a pocket and a watch on the wrist describing the same walk — and the platform’s own aggregation resolves those overlapping contributions to one figure instead of counting the same morning twice.

Where the platform reports nothing — no health store, no permission for that category, or simply nothing recorded — State888 shows an empty state rather than a zero or an estimate.

These daily totals are application-state values used to render the card. They are not uploaded to our servers as health-history records. See section 12.

9. Health data and the 8 · 8 · 8 balance

The 8 · 8 · 8 module divides your day into three pillars — Sleep, Work, and Life. Where you have granted health access, real health information can contribute to two of them:

Health data never determines your Work hours. State888 does not infer employment, working patterns, or work hours from Apple Health or Health Connect. The Work pillar is filled only by the in-app timer and by entries you make yourself.

Steps and distance are cumulative quantities with no honest duration, so they never become 8 · 8 · 8 minutes. State888 does not convert a step count into hours in any pillar; those figures stay in Today’s activity, separate from your balance.

Heart rate and active calories are used for activity detail where applicable — specifically, for the exact time window of an activity you recorded in State888, so the app can show a real total-calorie figure and a real average and maximum heart rate for that session instead of an estimate. They do not contribute minutes to any pillar.

If a manual entry and an imported health record disagree about the same period, your manual entry is treated as correct. Imported data is a convenience, not the final word on your day.

10. Health permissions and your control

• Connecting a health store is optional on both platforms, and is never a condition of using State888.
• Permission is requested only after you act — State888 explains what it is asking for and why, and the system permission screen appears only once you have chosen to continue. Health access is never requested automatically on launch.
• You can decline, and declining is respected. The app does not keep asking.
• You can revoke access later — in the iOS Health app’s sources settings, in Health Connect’s app-permission settings, or from Settings → Connected Services in State888. Revoking stops further reading immediately.
• Partial access still works. On Android you can grant some of the six categories and refuse the rest; State888 uses what it can read. On iOS the same is true at the data-type level in the HealthKit sheet.
• The app remains usable with no health permissions at all. Sleep, work, and life time can all be logged manually or with the timer.

If you revoke access outside the app, State888 reconciles its stored connection status the next time it can. On Android it can read the true per-category state and does so; on iOS, because Apple does not disclose read authorisation, State888 deliberately leaves the stored status alone rather than replacing it with a guess.

11. Data minimisation

State888 aims to request only the data its active features actually need, and to store as little of it as possible.

• Only the six health categories in section 5 are requested. State888 does not request or access blood pressure, nutrition, reproductive health, body weight, blood glucose, oxygen saturation, mindfulness, or any other health category, because nothing in the app uses them.
• On iOS only walking + running distance is requested; swimming and cycling distance are not, as no feature uses them.
• No background health reads and no extended health-history access are requested on either platform.
• On Android, State888 requests no write permission and no activity-recognition permission — steps are read from Health Connect, which does not require it.
• Raw health records are processed on your device and are not uploaded (section 12).

If a future version of State888 needs a category not listed above, this policy will be updated before that version ships, and the operating system will ask you for the new permission separately.

12. What is stored, and what stays on your device

Raw health records are not uploaded

Raw records held by Apple Health or Health Connect — individual step records, distance records, sleep records, heart-rate samples, active-calorie samples, and workout records imported from other apps — are read through the platform health APIs on your device and used there. State888 does not upload those records to our servers, and does not upload information about which device or which app originally recorded them.

Your daily steps and distance totals are held as application-state data for display in Today’s activity. They are not stored as health-history records on our servers.

Derived and app-owned values that are stored

A small number of derived summaries and values you create in State888 itself are saved to your account so the app works across sessions and devices:

These stored values are private to your account by default. They are not used for advertising, and they are not shown on your public profile unless you explicitly choose to share a specific activity or achievement.

13. Third-party apps and devices

Apple Health and Health Connect can contain information written by other apps and devices you use. State888 reads the information made available through the platform health store, according to the permissions you granted — it does not connect to any watch, tracker, or fitness brand directly, and it has no direct integration or API relationship with any wearable manufacturer.

In practice this means the health information State888 sees may originate from compatible apps and devices that make their data available through Apple Health or Health Connect. What those apps and devices collect, and what they do with it, is governed by their own privacy policies and by your settings in Apple Health or Health Connect, not by this policy.

14. Information collected automatically

• Authentication session data managed by our authentication provider so you stay signed in.
• Device and app information such as device type, operating system version, and app version, used to deliver the app correctly and — where you attach diagnostics to a support request — to diagnose problems.
• Push-notification tokens issued by Apple or Google via our messaging provider, used to deliver notifications to your device.
• Basic activity and presence signals within the app, such as when content was created, so feeds, events, and conversations are ordered correctly.

15. Device permissions

State888 requests the following permissions, each tied to a specific feature. Every one of them is optional at the operating-system level and can be changed later in your device settings.

16. Content, chat and Stories

Messages, voice messages, shared media, posts, community content, event details, match results, and Stories are stored so State888 can deliver them to the people they are meant for and let you access them again. Content you send in a chat or group is visible to the other participants. Content you post to a community, event, or your profile is visible according to that surface’s audience. Stories are short-form posts shared with the people who can see your profile or follow you. Messages are not end-to-end encrypted.

You can block other users and report profiles, messages, events, communities, results, or Stories that you believe breach our Terms of Service. Reports are reviewed by BARDOS, and reported content and the surrounding context may be retained while we investigate.

17. How we use information

• Create and operate your account, username, and sports profile.
• Provide State888 features: activity tracking, the 8 · 8 · 8 balance, Today’s activity, social discovery, following and connections, communities, events, training-partner matching, organisation, coach and venue presences, chat, match results, and Stories.
• Show your content to the audience you selected.
• Send notifications about activity relevant to you.
• Respond to support requests and review reports.
• Maintain the security of the platform and prevent fraud, abuse, and breaches of our Terms.
• Comply with legal obligations.

18. Advertising, analytics and tracking

As of this policy’s last update:

• State888 does not sell health data, or any other personal data.
• State888 does not share health data with advertisers, ad networks, or data brokers.
• State888 does not use raw health information — or any health information — for personalised advertising.
• State888 does not use health information for cross-app tracking, and does not track you across other companies’ apps or websites.
• State888 contains no advertising SDK and does not collect an advertising identifier.
• State888 currently uses no third-party analytics or crash-reporting service. No behavioural tracking or crash telemetry is collected or transmitted beyond what is described in this policy.

If this ever changes, this policy will be updated before the change ships, and — where consent is required — you will be asked for it.

19. Legal bases for processing

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract — processing necessary to create your account and provide the features you use.
• Consent — for optional processing you actively enable, such as location access, Apple Health or Health Connect access, photos, microphone, and push notifications. You can withdraw consent at any time in your device settings.
• Legitimate interests — for platform security, fraud and abuse prevention, moderation, and improving the service, balanced against your rights.
• Legal obligation — where we must comply with applicable law or a valid legal request.

Health data and, in some jurisdictions, precise location are treated as sensitive categories of data. We process them only on the basis of your explicit consent, given through the operating-system permission prompt, and only to provide the feature you asked for.

20. Infrastructure and service providers

State888 runs on Google Firebase and Google Cloud Platform. The services we rely on are:

• Firebase Authentication — account creation and sign-in, including email/password, Sign in with Google, and Sign in with Apple.
• Cloud Firestore — our database, storing profile, activity, social, community, event, chat, results, and Stories data, together with the derived values listed in section 12.
• Firebase Storage — storing photos, video, voice messages, data exports, and other media you upload.
• Firebase Cloud Messaging — delivering push notifications through Apple and Google notification services.
• Cloud Functions — server-side logic such as notification delivery, moderation actions, and account-deletion cleanup.
• Resend — delivering the emails State888 sends you, such as a password-reset code or link. Resend receives your email address and the content of that email, and nothing else from your account.

Firebase does not automatically receive your health data. Reading from Apple Health or Health Connect happens on your device, through the platform’s own APIs. Firebase holds your account and app data — profile, content, social graph, the activities you record in State888 — and the small set of derived values in section 12. It does not receive the raw health records State888 reads from a health platform.

Sign in with Google and Sign in with Apple are authentication providers: when you use them, they confirm your identity to us and release a limited set of details (such as your name and email address, or Apple’s private relay address if you choose to hide your email). We do not receive your Google or Apple password.

Map and location services provided by your device’s operating system, and Google’s maps and places services, are used to display maps and routes and to look up places you search for.

21. When information may be shared

• With other users — as determined by the feature you use and the audience you choose. A message goes to its recipients; a Story goes to the people who can see it; an event, community post, or match result is visible to that surface’s audience; your profile is visible according to your profile settings.
• With our service providers — principally Google/Firebase, and Resend for the emails we send you — who process data on our behalf solely to operate State888, under their standard data-processing terms.
• For legal reasons — where required by law, legal process, or to protect the rights, safety, or property of BARDOS, our users, or the public, or to investigate fraud or a breach of our Terms.
• Business transfers — if BARDOS is involved in a merger, acquisition, or asset sale, data may transfer as part of that transaction, subject to this policy.

We do not sell personal data, and we do not share it with third parties for their own advertising or marketing purposes. We do not disclose health data — from Apple Health, from Health Connect, or derived — to third parties for advertising, marketing, or data-brokerage purposes.

22. International and global use

State888 is a global product, available internationally, and you can use it wherever you train. It runs on Google Firebase / Google Cloud Platform, whose default infrastructure is commonly located outside the United Kingdom, including in the United States. Your data may therefore be stored and processed outside your own country by Google, acting as our data processor, under Google’s standard contractual data-processing terms and applicable transfer safeguards (such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, where relevant).

Because State888 is a global platform, content you make visible to other users may be seen by people in other countries.

23. Security practices

Account credentials are handled by Firebase Authentication rather than stored by us directly. Data in transit is encrypted using industry-standard transport security. Access to data in our database is controlled by security rules that restrict reads and writes to your own account, to people you interact with (such as chat participants, community members, or event attendees), and to administrators with explicit permissions; administrative actions are themselves logged. Raw health records are processed on your device and are not transmitted to us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

24. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. Where a fixed retention period has not yet been formally set by BARDOS, this is stated explicitly rather than implied.

25. Account and data deletion

You can delete your State888 account and the associated data at any time, from inside the app under Settings → Delete account. Full instructions, including how to request deletion if you can no longer access the app, are on the State888 account deletion page. Deletion is permanent and cannot be undone.

What is deleted

• Your authentication credentials and sign-in record.
• Your profile, username, sports profile, bio, profile photo, preferences, and app settings.
• Your logged sessions and manual activities, your GPS-tracked activities and their routes, and your daily 8 · 8 · 8 balance summaries — including the derived calorie and heart-rate figures stored with an activity you recorded.
• Your health connection metadata — which health store was connected, the connection status, and the scope names you granted.
• Your privacy settings, notification settings, and notifications.
• Your Stories, posts, community content, events, and media you uploaded, and any data-export files.
• Your following, follower, and connection records.
• Your chats, and your support records.
• Match results you recorded.
• Your push-notification token.

Once your own data has been removed, your sign-in account is deleted. A server-side function then verifies the sign-in account is genuinely gone, completes it if the client could not, and performs the cleanup a client is not permitted to do on its own — for example withdrawing you from other members’ rosters and releasing any venue claim held under your account.

What may remain

Content you shared with other people may remain accessible to them — for example messages already delivered in a chat, community posts, event records, and match results that another participant recorded and that form part of their own record. Reports, moderation records, and the minimal deletion record described in section 24 may also be retained for the reasons explained there.

Deleting your State888 account does not delete anything held by Apple Health or Health Connect, including workouts State888 wrote to Apple Health. Those records are yours and are managed through those platforms.

Timing

Deletion carried out in the app takes effect when you confirm it. For identity-verified requests made outside the app, we act without undue delay and, under UK GDPR, within one month of verifying your identity (extendable by a further two months for complex requests, as permitted by law).

Uninstalling the app does not delete your account, and logging out does not delete your account.

26. Getting a copy of your data

You can request a copy of your data at any time from Settings → Export your data in the app. State888 generates a JSON file containing your profile, targets, activity history, balance summaries, and settings. The file is available to download for seven days, after which it is automatically deleted.

27. Public content and other users

State888 is a social platform. Your username, display name, profile photo, sports profile, and the content you publish can be seen by other users according to the audience and profile settings you choose. Social discovery, training-partner matching, communities, events, and venue or club pages are designed to make people findable to each other. Please be mindful of what you share — we cannot control what other people do with information after you have shared it with them.

28. Children and minimum age

You must be at least 16 years old — or the minimum age of digital consent in your country, if higher — to create a State888 account. This is checked at sign-up from the date of birth you provide.

State888 is not directed at children, and we do not knowingly collect personal data from children under the applicable minimum age. If we become aware that we have collected data from someone under it without appropriate consent, we will take steps to delete that information and the associated account. If you believe a child has created an account, contact us at info@bardos.co.uk.

29. Your rights

If UK GDPR, EU GDPR, or an equivalent data protection law applies to you, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to receive a copy of it in a portable format, and to withdraw consent for any processing based on consent — including location, Apple Health, Health Connect, photos, microphone, and notifications, each of which can be revoked in your device settings. Many of these actions are available directly in the app: you can edit your profile, adjust your privacy settings, block users, delete individual content, export your data, and delete your account without needing to contact support first. For anything else, contact us at info@bardos.co.uk.

UK-based users also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. Users elsewhere may have the right to complain to their local supervisory authority.

30. Changes to this policy

We may update this policy as State888 evolves. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, notify you in the app. This page is the official, current version.

31. Contact and complaints

BARDOS IT SOLUTIONS LTD, registered in England and Wales. For privacy questions, requests, or complaints about State888, contact us at info@bardos.co.uk, or visit State888 support.

State888 — a product of BARDOS IT SOLUTIONS LTD, London, United Kingdom.