Privacy Policy

1. Who this policy covers

This policy applies to the Steady mobile app, Apple Watch app, widgets, website, and related services. “Steady,” “we,” and “us” refer to Vextra Capital LLC, the company operating Steady. For questions or privacy requests, contact saiprakyath@vextracapital.co or visit Support.

Website previews & preferences

The interactive check-in and Coach examples on this website are local, scripted demonstrations. Entries remain in the page’s memory; they are not sent to an AI provider or saved to a Steady account. Reloading the page resets them. Please do not enter sensitive information into a demonstration.

The website stores your light or black theme preference in browser local storage. You can clear it in your browser’s site-data settings. Our hosting provider may process request information, including IP addresses and technical logs, to serve and protect the website. App Store links take you to Apple, where Apple’s privacy practices apply.

2. Information Steady handles

• Account information: your email address, authentication-provider identifiers, account status, and consent records.
• Profile and wellness context: age, height, weight, goals, experience, schedule, equipment, food preferences, and health conditions or limitations you choose to provide.
• Activity you record: check-ins, training plans, workout sets and notes, measurements, progress entries, meals, nutrition logs, reminders, and Coach conversations or remembered preferences.
• Photos and videos you choose: profile or progress photos, meal photos submitted for estimation, and exercise-form photos, clips, or extracted frames submitted for review.
• Connected-health summaries: only after permission, selected sleep, activity, workout, heart-rate, recovery, temperature, oxygen, body-composition, or related summaries made available by Apple Health, Health Connect, or a connected provider.
• Optional subscription information: if you purchase Steady Pro through Apple, we receive purchase identifiers, the selected product, subscription status, expiration or revocation dates, and verification timestamps. These records are linked to your Steady account to verify and restore access. Apple processes payment; Steady does not receive your payment-card details.
• Technical information: app version, device platform, notification preferences, sync status, request timestamps, and privacy-filtered error stack information when error monitoring is enabled. Network services necessarily process connection information such as an IP address to deliver and secure requests, and providers may retain limited security logs under their documented schedules.

3. How we use information

We use information to create and adapt your plan, save and synchronize your records, display progress, provide requested meal or Coach features, connect health sources, deliver opted-in reminders, verify optional subscription access, protect accounts, prevent abuse, diagnose technical failures, and comply with law.

Steady is a general wellness product. Your information is not used to diagnose, treat, prescribe medication, or replace a qualified clinician.

4. Optional health and AI processing

Health connections and personalized Coach analysis are separate, optional controls. You can use Steady’s deterministic training and nutrition tools without enabling AI analysis, and you can disconnect health sources or turn AI processing off in Settings.

When you request an AI-powered Coach, meal-photo, meal-generation, or form-review feature, Steady sends only the context needed for that request to its server and AI processor. The app does not include your email address in Coach context, and provider-side response-history storage is disabled. Completed, schema-checked results may be saved privately in your Steady account so they remain available across the app.

5. Service providers and disclosures

Steady uses service providers to operate the product, including Supabase for authentication, database, file storage, and server functions; OpenAI for optional AI requests; Apple, Google, and connected-health providers when you authorize their services; and Sentry for privacy-filtered error reporting when configured.

For optional Apple subscriptions, Apple handles billing and supplies purchase and renewal information. A verification service hosted on Cloudflare checks Apple-signed purchase information before Steady grants access. This service does not receive your health, fitness, meal, or Coach content. Verified subscription status is stored in Supabase; signed purchase payloads are processed for verification rather than retained as account content.

Providers may process information only to perform the requested service under their own applicable terms and privacy commitments. We may also disclose limited information when required by law, to protect people or the service, or as part of a business transaction subject to appropriate safeguards.

6. Health-data commitments

• We do not sell health data or use it for advertising, marketing profiles, credit, employment, or insurance decisions.
• Connected-health access is permission-based and can be revoked in Steady and in your device or provider settings.
• Wearable signals provide context only. Your symptoms, clinician instructions, and direct training feedback take priority.

Google Health and Fitbit

If you choose to connect Google Health, including a linked Fitbit or Pixel Watch account, Steady requests read-only access to activity and fitness, health measurements, and sleep. Depending on the categories you approve and the data your account provides, this includes steps, active energy, exercise duration, resting heart rate, heart-rate variability, breathing rate, sleep duration and stages, temperature, oxygen saturation, fitness estimates, weight, and body composition. Steady uses these summaries for your private health trends, check-ins, recovery context, and training guidance. It does not write to Google Health. You may decline a category and use the others.

Selected summaries are stored in your account in Supabase and cached on your device. Authorization credentials are encrypted and held on Steady’s server, not in the app. Google Health data and signals derived from it are excluded from requests to external AI providers, including OpenAI. They are not sold, used for advertising, or used to train general-purpose AI models.

Disconnecting Google Health in Steady removes its stored connection credentials, stops further imports, and requests revocation with Google. You can also revoke access in your Google Account. Previously imported summaries remain in your Steady history until you delete your account or request deletion through Steady Support.

Steady’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. This includes Google Health data and information derived from it. Any transfer as part of a business sale requires your prior explicit consent; the general business-transaction provision above does not override this limit.

7. Storage, retention, and deletion

Some information is stored locally on your device, while account-backed records and selected media are stored in your private Steady account. We retain account data while your account is active or as needed to provide the service.

Temporary exercise-form frames are designed to be removed after processing. Short-lived authorization states expire after ten minutes. When you delete your account in Steady, the service initiates deletion of your account records and private uploaded media. Limited security records, provider backups, or legally required records may remain for the shortest period required for security, recovery, dispute resolution, or legal compliance and are then deleted or de-identified under the applicable provider schedule.

Resetting fitness cloud data preserves your subscription access. Deleting your entire Steady account also removes its subscription records and purchase-to-account link from Steady. Apple retains its own purchase records under its policies. Account deletion and app removal do not cancel an Apple subscription; manage or cancel it separately in your Apple Account subscriptions. See our subscription terms.

8. Your controls and rights

You can edit profile information, disable AI analysis, disconnect health sources, change notification permissions, remove individual photos, or delete your account from the app. Depending on where you live, you may also have rights to access, correct, export, restrict, object to, or delete personal information.

For a privacy request or account-deletion problem, visit Steady Support. We may need to verify that the request belongs to you before acting on it.

9. Security and international processing

We use access controls, row-level database security, private storage, encrypted transport, and account-scoped synchronization. No service can guarantee absolute security. Information may be processed in countries where our providers operate, subject to applicable contractual and legal safeguards.

10. Children and changes

Steady is not intended for children under 13. If local law requires parental consent for a teenager to use an online wellness service, a parent or guardian must provide it. We may update this policy as the product or law changes and will post the effective date on this page.