Privacy Policy

Your agenda, habits, tasks, notes, trackers, journal pages, and the photos, videos and voice notes you add to them are stored only on your device. We do not receive them, and the app never uploads them.

They leave your device only in these cases, all of which you control:

• Export. When you export a backup file, it goes wherever you choose to save it. The file is not encrypted.
• Your device's own backup. Android may include app data in your Google backup, and iOS in your iCloud or computer backup, depending on your device settings. That backup is held in your Google or Apple account, or on your computer. Steady never accesses it. Journal photos, videos and voice notes are left out of these backups.
• Places on journal pages. Adding or searching for a place, and opening a saved place in a maps app, sends that place's details off your device, as described under “Data the app needs to work” below.
• Living sky. If you use it, an approximate location is sent to fetch the weather, as described under “Living sky (weather and moon)” below.

Reminders are scheduled on your device. App lock uses your device's own fingerprint, face or screen-lock check (Face ID, Touch ID or your passcode on iOS), and Steady never receives biometric data.

If you turn on Show calendar events in Settings, Steady asks for permission to read the calendars on your device. Steady then shows your events on the day view, next to your routines and tasks.

• What Steady reads: each event's title, start and end time, and whether it is all day, plus each calendar's name, colour and account name. Steady reads only the days you look at.
• What stays on your device: all of it. Calendar data is read when the day view or the Settings calendar list is on screen, and never saved, copied, backed up or sent anywhere. That includes us, our analytics and our crash reporting.
• What Steady remembers: only whether the setting is on and which calendars you chose to hide. On Android it is left out of backups; on iPhone it can travel with a device backup, but Steady still asks for calendar access again on a new device before reading anything.
• What Steady never does: create, change or delete events, or send your calendar data to anyone.
• How to stop it: turn offShow calendar events in Steady's Settings. On Android 13 and later, Steady then gives up calendar access the next time the app closes; if you turn the setting back on before that, Steady asks for access again after the app restarts. You can also remove calendar access at any time in your phone's system settings (iOS: Settings › Privacy & Security › Calendars; Android: Settings › Apps › Steady › Permissions).

Living sky is part of Steady Paid. When it is on, the Today screen shows the current weather and the moon, Week shows a short forecast, and Progress notes the weather on days you closed. It is on by default for Steady Paid and can be turned off in Settings.

• What is sent: to fetch the weather, Steady asks your device for an approximate location (on Android, “approximate” location only; on iOS, location while using the app) and rounds it to about 1 km before anything else happens. Only that rounded position is sent, to the Norwegian Meteorological Institute (MET Norway), the public weather service behind yr.no. The request names the app, not you.
• When: at most once an hour, and only while the app is open on the Today screen. Nothing is sent when Living sky is off, when Steady Paid is not active, or before you allow location access.
• What stays on your device: the latest forecast and the rounded position used to fetch it, for up to an hour. This copy is left out of backups and is deleted when you turn Living sky off. When a day is closed, Steady saves that day's weather (the condition, the temperature and a short summary like “rain until 09:00”) with your other entries. That record has no location in it, but over many months a list of daily weather could hint at the region you live in. Like your other entries, it is included in exports and in your device's own backup. The moon's phase and the times of sunrise and sunset are worked out on your device and need no data at all.
• What Steady never does: use your precise location for the weather, track your location in the background, or send your location to us, our analytics or our crash reporting.
• How to stop it: turn off Living sky in Steady's Settings. Steady then stops asking for your location and deletes the cached forecast. You can also remove location access at any time in your phone's settings. If you say no when Steady asks, it won't ask again.

Diagnostics are off by default. If you turn on Share anonymous diagnostics in Settings → Privacy, the app sends the following to Google Firebase so we can find and fix crashes and slow screens, and see which features are used:

• Crash reports (Firebase Crashlytics): where in the app a crash or error happened, short app log messages that never include what you write, your device model, your operating system and app version, and the device's state at the time, such as free memory and storage.
• Usage events (Google Analytics for Firebase): which screens and features are used and when. Events never contain what you write, entry titles, or journal content.
• Performance data (Firebase Performance Monitoring): how long the app takes to start and draw screens, and network request timing.

The advertising ID (on iOS, the IDFA) is not collected, and ad personalisation is switched off. On iOS, diagnostics also leave out the identifier Apple gives to apps from the same developer on your device (the IDFV).

You can turn diagnostics off again at any time. That stops further collection straight away. It does not delete reports already sent. Crash reports are kept for 90 days. Individual usage events are kept for 2 months. Usage data linked to this install's random ID is kept for 14 months after the last usage event this install sent, because each new event restarts that period. Totals that cannot be traced to an install, such as how many people opened a screen, may be kept longer. Performance data is kept for the period Firebase sets for Performance Monitoring. Reports are tied to a random ID created for this install, not to your name or an account. The app never shows you that ID, so we cannot find the reports that came from your device.

These are sent whether or not diagnostics are on, because the features depend on them:

• App configuration (Firebase Remote Config). The app regularly downloads settings such as which features are switched on. The request includes a Firebase installation ID, the app and operating system version, and your device's language, region and time zone.
• Purchases (RevenueCat, with Google Play on Android and the App Store on iOS). Each time the app starts, it checks with RevenueCat whether Steady is unlocked on this install. It sends an anonymous app user ID and your purchase details, such as the product, price and store country. On iOS, these requests also include the IDFV. We also use RevenueCat's reports to see how many people buy Steady. Payment itself is handled by Google or Apple, and we never see your card or payment details.
• Place lookups in the journal. When you add a place to a journal page, the app asks a map service to turn a location into a place name: on Android your device's location service, usually Google Play services, and on iOS Apple's map service. If you tap “Use my current location”, your device's location is sent. If you search for a place, the text you type is sent. If you have used “Use my current location” and the app has not been fully closed since, a wide area of about 55 km around that location is sent too, so nearby results come first. Lookups only happen when you add or search for a place. The app asks for location permission only for “Use my current location”, and the place you pick is saved on your device with the entry.
• Opening a saved place. If you tap a place in your journal to open it in a maps app, its location and name are passed to that app. On Android that is Google Maps or another maps app you have, and if your device has no maps app, it opens in Google Maps in your browser. On iOS it opens in Google Maps if you have it installed, which receives the location only, and in Apple Maps otherwise.
• Update checks. On Android, when you open or return to the app, or tap “Check for updates” in Settings, it asks Google Play whether a newer version is available. On iOS, when you open or return to the app, or open Settings, it looks up Steady's App Store listing to compare versions, and “Check for updates” opens that listing in the App Store. The iOS lookup includes the app's identifier and your device's region.
• Rating the app. If you tap “Rate this app” in Settings, Google Play shows its own rating prompt on Android, and the app's App Store page opens on iOS. Any rating or review you submit goes to Google Play or the App Store, which handle it like any other review.

• No advertising, and no advertising identifiers.
• No selling of data, and no sharing of data for advertising.
• No tracking you across other apps or websites.
• No accounts. The app does not collect your name, email address or contacts.
• No AI features, and no profiling or automated decisions about you.

The services above process data to provide their part of the app. Their own privacy policies apply:

• Google Firebase (Crashlytics, Analytics, Performance Monitoring, Remote Config)
• Google Play services and Google Play
• Apple (App Store, map service and Maps, on iOS)
• RevenueCat
• The Norwegian Meteorological Institute (MET Norway), for Living sky weather. It receives a position rounded to about 1 km, and the request's IP address like every service on this page.

Each service on this page sees the IP address a request comes from. Google uses it to estimate an approximate location, such as your country.

We may also disclose information if the law requires it, for example in response to a valid court order.

• Diagnostics: your consent, given by turning the setting on. You can withdraw it at any time by turning it off.
• Purchases: performing our contract with you. RevenueCat sales reports: our legitimate interest in knowing how the app is doing.
• App configuration and update checks: our legitimate interest in keeping the app working and up to date.
• Place lookups and opening places in a maps app: performing our contract with you, because you asked for the feature.
• Living sky weather: performing our contract with you, because it is part of Steady Paid and you can turn it off at any time.
• Emails you send us: our legitimate interest in replying to you.

Data protection law gives you the right to access, correct or erase your personal data, restrict how it is used, receive it in a portable format, and object to processing based on legitimate interest. Steady has no accounts, so we usually cannot find data that came from your device and may not be able to act on those requests. You can delete what Steady stores on your device yourself, as described under “Your choices”. For an email you sent us, tell us the address you sent it from. Your purchase history is available in your Google Play or Apple account. You can also complain to your local data protection authority.

Google, Apple and RevenueCat may process data in the United States and other countries, under safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

• Turn diagnostics on or off in Settings → Privacy.
• Allow or deny location permission in your device settings.
• Turn Living sky on or off in Settings.
• Delete entries one at a time in the app. To delete everything Steady stores on your device, uninstall the app. This does not remove copies in your Google, iCloud or computer backup, or backup files you exported.

The suggestion option in Settings opens your email app with a message to support@steady.club. If you send it, we receive your email address and what you wrote, and use them only to reply.

If you have a question about your data, email zeyad.gasser@gmail.com and we will reply as soon as we can.

Steady is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, email zeyad.gasser@gmail.com and we will delete it.

When the app's data practices change, we update this page and the date at the top before the change reaches you.

Zeyad Gasser, zeyad.gasser@gmail.com