This policy explains how StadiaFi Limited ("StadiaFi", "we", "us")
collects, uses, stores and shares personal information when you use
stadiafi.com and the StadiaFi app. We handle personal information in
accordance with the New Zealand Privacy Act 2020.
What we collect
- Account information — when you create an account:
your email address, display name, and a password (stored only as a
secure hash — we cannot read it). If you sign in with Google, we receive
your name, email address and profile picture from Google.
- Activity in the app — the team you back, points and
rewards activity, predictions you make, and reward redemptions. This is
the core of how the loyalty programme works.
- Venue check-in location — when you use a venue
check-in feature, we collect your device's location (latitude and
longitude) at the moment you check in, and the distance this places you
from the venue. This is used to verify you were actually at the venue,
award points accordingly, and review suspected misuse. We only collect
location at the moment of check-in — StadiaFi does not track your
location in the background or at any other time.
- Signup source — when you create an account, we may
record how you found us, such as a referral code, QR code, club
campaign, or social media link. This helps us understand which
channels and partners are driving signups and engagement.
- Mailing list and marketing preferences — if you join
our waitlist, or tick the optional "keep me updated" option when
registering, your email address is collected and stored by our email
provider, Mailchimp, so we can send you updates. This is separate from
agreeing to our Terms of Use and Privacy Policy. If you register with
email, you accept them before your account is created. If you
register with Google, your account may be created first, but you
must accept them before continuing to use StadiaFi. Joining the
mailing list is optional either way — you can unsubscribe from
marketing emails at any time without affecting your account.
- Technical information — standard web server logs
(IP address, browser type, pages requested) used for security and to
keep the service running.
What we use it for
- Running your account and the loyalty programme — tracking points,
applying rewards, showing leaderboards.
- Contacting you about the beta, service changes, or things you've
asked us about.
- Keeping the service secure — detecting abuse, rate-limiting, and
protecting the reward economy.
- Understanding how the service is used, so we can improve it.
- Producing anonymised, aggregated insights about fan engagement, which
we may share or sell to partners in de-identified form (see below).
We do not sell information that identifies you personally.
We do create anonymised and aggregated data — insights about how fans
engage, drawn from combining many people's activity — and we may share or
sell that aggregated data to partners such as clubs, sponsors, and reward
partners. This data is de-identified: it describes patterns across groups of
fans, not you as an individual, and is prepared so that you cannot
reasonably be re-identified from it. Your name, email, and account details
are never sold. Where we report survey results to a partner, we report
grouped totals only: written answers are never passed on, answers to
questions marked sensitive are excluded, and any group too small to be
reported safely is left out rather than shown.
Cookies and similar technologies
We use a small number of cookies and browser storage for things the
service needs to function: keeping you signed in, remembering your team
and preferences, and caching data so the app works on poor stadium wifi.
We use Google Analytics to understand, in aggregate, how the site and
app are used — for example, which pages are visited and how often.
Google Analytics uses cookies and similar technology to do this. We do
not intentionally send your StadiaFi name, email address or account
details to Google Analytics. You can read about Google's own data
practices at
policies.google.com/privacy.
We may also use third-party advertising services, such as Google
AdSense, on our content pages. These services may use cookies to serve
ads, including ads based on your prior visits to this or other websites.
Google's use of advertising cookies is described at
policies.google.com/technologies/ads,
and you can opt out of personalised advertising at
adssettings.google.com.
Who we share it with
- Service providers that host and run StadiaFi: our
hosting providers (currently Railway and Netlify), Google (if you use
Google sign-in, and via Google Analytics as described above),
Mailchimp (mailing list), and licensed sports-data providers (match
data only — not your personal information).
- Sponsors and reward partners see aggregate,
de-identified engagement information (for example, how many fans
redeemed an offer) — not your identity, unless a specific reward
requires it and you choose to redeem it.
- When the law requires it — if we're legally obliged
to disclose information, we will.
Some providers store information outside New Zealand. Where they do,
we take reasonable steps to ensure it's protected by comparable
safeguards.
How long we keep it
Different categories of information are kept for different lengths of
time, depending on what they're for:
- Account and activity information (your points, team, predictions
and redemptions) is kept while your account is active, so the loyalty
programme keeps working correctly.
- Venue check-in location data is used to verify the check-in and
review any suspected misuse.
- Technical and security logs support security and abuse
prevention.
- Aggregated, de-identified data (see above) may be kept for longer,
since it no longer identifies you.
We have not yet finalised exact retention periods for any of the
categories above, and do not currently have an automated process that
deletes this information after a set time. We are defining appropriate
retention periods for these categories and will update this policy
before any real-world pilot launch. You can ask us to delete your account and
associated personal information at any time; deletion requests are
reviewed and actioned by our support team.
Your rights
Under the Privacy Act 2020 you can ask us for a copy of the personal
information we hold about you, and ask us to correct it. Email
info@stadiafi.com with "Privacy" in
the subject line. If you're not happy with how we handle a request, you
can complain to the Office of the Privacy Commissioner
(privacy.org.nz).
Changes to this policy
If we change this policy in a way that matters, we'll update this page
and note the new date at the top. Significant changes affecting account
holders will be flagged in the app or by email.
Contact
StadiaFi Limited, Auckland, New Zealand ·
info@stadiafi.com
