← Back to BlueLineLabs

Privacy Policy for Over The Boards

Last updated: October 17, 2026

BlueLineLabs ("we", "us") makes Over The Boards, a hockey shift tracker for Android phones and Wear OS watches. This policy explains what the app processes, where that data stays, and the few cases in which any of it leaves your devices.

1. The short version

  • There is no account or sign-up, and we operate no servers that receive your heart rate, motion data, game history or profile.
  • Your data is processed on your phone, and recorded on your watch until it has synced to your phone.
  • Data leaves your devices only in the four cases listed in section 4.
  • We never sell your data, show ads, or share it with advertisers or data brokers. The app does not use the Android Advertising ID.

2. Information the app processes

  • From your watch (Wear OS). While you track a game, the watch app uses Android Health Services to record your heart rate, and your wrist's accelerometer and gyroscope. It detects your shifts live and sends the finished game (heart-rate samples, motion samples, detected shifts and a short diagnostic log) to your phone, over the connection between your own devices, handled by Google's Wear OS data-sharing service in Google Play services. The watch keeps a game until your phone has confirmed receiving it.
  • From Google Health Connect (phone). With your permission, the app reads your heart rate, resting heart rate, exercise sessions and sleep, and writes the exercise session and heart rate of games you confirm as hockey. Other apps you allow in Health Connect can read what the app writes. You can change or revoke each permission in Health Connect at any time.
  • What you enter. Age group, height, position, handedness, skill level, teams, game notes (including optional injury notes), goals and assists, and your settings.
  • What the app calculates. Shifts, ice time and bench rest, heart-rate zones, recovery, pace and readiness, and trends. All of this is computed on your device.
  • Diagnostic log. For each watch game, the watch records a short log of its own tracking decisions (timestamps, detection states and heart-rate-derived values). It is stored with the game on your phone and used to diagnose tracking problems. It is not sent to us unless you choose to share it.

All of this is stored in the app's private storage on your phone, which Android's app sandbox keeps separate from other apps.

3. Limited use of health data

Information received from Health Connect and your watch's sensors is used only to provide the features you see in the app. It is not used for advertising, not sold, and not shared with third parties for their own purposes. Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements.

4. When data leaves your devices

  1. Crash reports (always on). The app uses Google Firebase Crashlytics. A crash report contains the stack trace, device model, Android and app version, the build identifier, basic device state, and a random installation identifier. It does not contain heart-rate, motion or game data.
  2. Anonymous usage analytics (off by default). Only if you switch on "Anonymous Usage Analytics" in Settings, the app sends aggregate events to Google Firebase Analytics: screens visited; game start and stop with rounded durations and outcomes; counts of detected shifts; import outcomes (including a coarse label for how often your heart-rate source reports); which tracking path you use (watch or Health Connect); your watch brand and model; and the standard device, app and approximate-region information Firebase records. These events never contain heart-rate values, timestamps or raw data. Nothing is collected for analytics while this setting is off, and you can switch it off again at any time.
  3. Android backup (phone app). If Android backup is enabled on your phone, the app's database (your games, including their heart-rate and motion data) and settings may be included in your Google account backup and in device-to-device transfer. That is handled by Android and Google under your own account settings, and you can turn it off in Android settings. The watch app is not backed up.
  4. When you share or export. Share cards and exported files go only to the app or person you choose in Android's share sheet. An exported file can contain your heart-rate and motion data; we receive it only if you send it to us. If you email us feedback, the message is pre-filled with the app version, device model and Android version, which you can see and edit before sending.

Apart from these cases, your health and motion data is not transmitted to us or to any third party. Firebase is provided by Google LLC; see policies.google.com/privacy and firebase.google.com/support/privacy.

5. Permissions

  • Phone: Health Connect (read heart rate, resting heart rate, exercise, sleep; write exercise and heart rate); internet and network state (used by Firebase crash reporting and the optional analytics, and by Google Play services); foreground service, wake lock and run-at-startup (to finish syncing a game from your watch in the background).
  • Watch: heart rate (body sensors / health data), activity recognition (required by Health Services exercise sessions), notifications and vibration (live shift alerts), and foreground service and wake lock (to keep tracking with the screen off). The watch app does not request internet access.
  • We do not collect your location, contacts, photos or microphone.

6. Retention and deletion

  • Your data stays on your devices until you delete it. Delete a game in the app and it is removed from the app, together with the Health Connect record the app wrote for it.
  • Clearing the app's storage or uninstalling deletes everything the app holds on that device (uninstall the watch app to clear the watch).
  • Manage or delete data in Health Connect from the Health Connect app, and backups from your Google account settings.
  • We keep no account or server-side copy of your health data, so there is nothing for us to delete on our side. Crash reports and, if you opted in, analytics events are retained by Google Firebase under its own policies and are not linked to your name or your games. If you sent us a file or message, email us and we will delete it.

7. Security

Local data lives in the app's private storage. Data sent to Firebase is encrypted in transit. No system is perfectly secure, and we recommend keeping your phone locked and your Android backup protected by your Google account's security settings.

8. Children

The app is not directed at children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect personal information from them.

9. Changes to this policy

If this policy changes we will update the date above and, for material changes, tell you in the app.

10. Contact

BlueLineLabs, info@bluelinelabs.app