Steady collects the health information you voluntarily enter into the App, including symptom ratings, attack logs, dietary information, medication records, and weather data. This information is stored locally on your device and is also backed up to a secure cloud database so it survives reinstalling the App or clearing your browser data.
Your data is stored in two places. A copy lives on your device for offline access and fast loading, and a copy is synced a few seconds after any change to a cloud database provided by Supabase (supabase.com), whose servers are located in the United States and encrypt data at rest and in transit.
Your cloud copy is tied to an anonymous account created silently the first time you open the App. No email address, password, or other identifying information is required or collected. That account is specific to the device you created it on, so your history is not currently shared or transferred between devices. Each account can only read and write its own data.
Cloud data is automatically deleted after 30 days without activity, and the anonymous account is removed once its data has expired. Your local copy is never deleted by us.
Steady does not collect: your name, email address, or contact information; location data beyond what is needed to fetch weather (coordinates are sent directly to weather APIs and not stored); device identifiers; usage analytics or tracking data; advertising identifiers. We do not use cookies for tracking purposes. The anonymous account described above contains no personal information and is not linked to you as an individual.
When you use the weather feature, your device's GPS coordinates are shared directly with Open-Meteo and the National Weather Service to retrieve local weather data. These coordinates are used only for the weather request and are not stored by Steady. Please review Open-Meteo's privacy policy at open-meteo.com and the NWS privacy policy at weather.gov for their data practices.
When you use the food search feature, your search query is sent to the USDA FoodData Central API to retrieve nutritional information. Steady does not log or store your search queries. Please review the USDA privacy policy at usda.gov for their data practices.
PDF reports are generated entirely on your device. No report data is transmitted to Steady or any third party. The PDF is downloaded directly to your device. You are responsible for the security of any reports you share with healthcare providers.
Steady is a consumer wellness application and is not a HIPAA-covered entity or business associate as defined under the Health Insurance Portability and Accountability Act (HIPAA). HIPAA protections apply to covered entities such as healthcare providers, health plans, and their business associates. While Steady is not legally obligated to comply with HIPAA, we voluntarily follow its core principles: we do not sell your health data, we minimize data collection, and we give you full control over your information.
Data in the cloud database is encrypted in transit and at rest. Access is enforced at the database level so that an anonymous account can only reach its own records. The App does not use passwords, so there is no password for an attacker to guess or reuse.
You have full control over your data at all times. You can view all your data within the App, delete any individual day's data from the History tab, or clear all data at once from Settings.
Clearing the App's data or uninstalling removes the copy on your device. The cloud copy is deleted automatically after 30 days without activity. To have it removed sooner, contact us with your anonymous account ID, which is shown at the bottom of the About section in Settings.
Steady is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has entered personal health information into the App, please delete the data from within the App, and contact us with the anonymous account ID shown in Settings so the cloud copy can be removed rather than waiting for it to expire.
We may update this Privacy Policy as the App evolves. We will update the 'Last updated' date when material changes are made. Continued use of the App after changes constitutes acceptance of the revised policy. For significant changes affecting how your data is stored or shared, we will notify you within the App on next launch.
If you have questions or concerns about this Privacy Policy or how your health data is handled, please contact us at hello@steadyear.app.