Privacy

Cardio Surf · cardio.surf · Last updated 13 August 2026

This policy covers the Cardio Surf website, the phone camera page, and the Cardio Surf app on Android TV / Google TV and Amazon Fire TV.

No account

You do not create an account. We do not ask for your name, email, or phone number in the TV app or the pairing page.

Phone camera

The TV does not use a camera. Your phone camera is the controller.

When you tap Allow Camera, the phone sends live video to the TV on your same Wi‑Fi (peer-to-peer). We do not record that video, do not store it, and do not upload it to Cardio Surf servers. Pose detection runs on the TV in the game. Close the phone page or disconnect to stop the camera.

Pairing

The TV shows a short one-time code and a QR link. That code is used only to connect this phone to this TV. Signaling (so the two devices can find each other) goes through a hosted realtime service. The video itself does not.

The QR image is drawn by a third-party QR service from the pairing URL. Do not share the code with people you do not want on your TV.

What we do not collect

Hosting and connection helpers

The site is hosted on Vercel. Pairing signals use Supabase. Finding a network path may use public STUN servers (including Google STUN). Those parties process technical connection data so the link can work. They are not given your workout video by us.

If you play the regular web games on a phone or computer (not the TV app), the camera stays in your browser for pose detection unless that game’s own flow says otherwise (for example a multiplayer match you start yourself).

Children

Cardio Surf is not directed at children under 13. Do not use the camera features if you are under 13.

Your choices

Deny camera access, leave the phone page, or press Disconnect on the TV. That ends the session. There is no account to delete.

Contact

Questions about this policy: use the support email on the Cardio Surf listing in Amazon Appstore or Google Play, or write via cardio.surf.

TV app · Cardio Surf