Privacy policy

Effective 3 November 2026

Who we are

Steady is made by Sonal Systems Private Limited (CIN U62099GJ2026PTC179785), A-3, Mehsana Nagar, Nizampura, Vadodara 390002, Gujarat, India. In this policy, "we" and "us" mean Sonal Systems.

We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act 2023 (the DPDP Act) and its Rules. This policy explains what Steady stores, where, and what you can do about it.

What stays on your iPhone

Steady is local-first. Everything you put in it is stored on your iPhone, in Steady's own storage, which only Steady, its widgets, its Apple Watch app and its Siri and Shortcuts actions can read:

• your habits: names, icons, colours, targets, schedules, time of day and reminder times;
• your history: ticks, notes on ticks, skips, slips on quit habits, and vacation days;
• your settings.

Without backup, none of this is sent to us. We can't see it, and it stays on your iPhone until you delete it or the app.

Optional backup

You can turn on backup with Sign in with Apple, so your habits and streaks survive a reinstall or a new phone. Steady works fully without it.

• From Apple: a user identifier, and an email address only if you choose to share one (it can be Apple's private relay address). Apple never shares your password with us.
• What is backed up: the habits, history and settings listed above, so they can be restored exactly.
• Where: our database with Supabase, in Mumbai, India, for everyone, wherever you live.
• Technical logs: our servers keep logs such as errors and timestamps to keep backup working and secure.

Apple Health

If you link a habit to Apple Health, Steady reads only the measure you link (steps, workouts, mindful minutes or stand hours) to tick that habit for you. Steady asks for Health access only when you link a habit.

Health data is read on your iPhone and never leaves it. Steady doesn't send it to us or anyone else, and doesn't write to Apple Health. Only the result is kept, like a tick you made yourself: for a yes/no habit, the tick (for example, "Walk: done"); for a habit that counts steps or minutes, that day's total as the habit's amount (for example, "Steps: 8,400" or "Meditate: 20 min"). If you use backup, those ticks and daily totals are backed up with the rest of your history; the Health samples behind them (individual workouts, sessions or step readings) are not.

Other permissions

Each is asked for only when you turn on the feature that needs it, and each can be turned off in your iPhone's Settings.

• Notifications: reminders are scheduled on your iPhone as local notifications. Steady doesn't use a push service and doesn't send marketing notifications.
• Calendar (read-only): if you ask Steady to move reminders past events, it reads event times on your iPhone to do that. Event details are never stored or sent.
• Siri and Shortcuts: actions like "tick reading" run on your iPhone through Apple's systems.

Links with Slate and TLDR Classic

With Steady Plus, a habit can be completed by our other apps: logging food in Slate, or staying under budget in TLDR Classic. This happens on your iPhone, through storage the three apps share. Those apps share only a yes or no for the day. Your food and money details stay in those apps, and nothing goes through our servers.

Subscriptions

Apple handles payment for Steady Plus. We never see your card details. RevenueCat keeps track of whether you have Plus, using an anonymous app user ID and your purchase records from Apple.

What we don't collect

We don't collect your name, phone number, contacts, location, advertising ID or browsing data. Steady has no analytics or tracking SDKs and no ads.

What we never do

• Show ads.
• Sell your data.
• Share your data for marketing.
• Track you across apps or websites.
• Profile you for third parties.

Service providers and where data goes

We use a small number of service providers. Each handles only what it needs for its job.

Subscription status is processed in the USA by RevenueCat, as permitted under the DPDP Act. Your backup stays in India.

How long we keep it

• Data on your iPhone stays until you delete it or the app.
• Your backup is kept while you have a Steady account. When you delete your account, your backup is deleted immediately, and our database backups are cleared within 30 days.
• Server logs are kept for up to 1 year.
• Subscription records stay with your Apple ID, under Apple's policies.
• Support emails are kept while we're helping you, and then for as long as we need them to answer follow-ups.

Export your data

Export is free for everyone. In Steady's Settings you can export your habits, ticks and slips as CSV files, complete, at any time.

Delete your data

• Without backup: delete Steady from your iPhone. That removes everything, because nothing else exists anywhere.
• With backup: delete your account in Steady's Settings. This deletes your backup from our servers immediately. Then delete the app to remove the copy on your iPhone.
• By email: if you can't use the app, write to privacy@use-steady.com from the email address linked to your account and we'll delete your backup.
• Apple: you can also stop using Sign in with Apple for Steady in your iPhone's Settings, under your name, Sign in with Apple.

Your rights

Under the DPDP Act you have the right to:

• Access your data: export it as CSV from Settings.
• Correct your data: edit any habit in the app.
• Erase your data: as described above.
• Withdraw consent: turn off backup and delete your account, or turn off any permission in your iPhone's Settings.
• Nominate someone to exercise your rights if you die or become unable to: email us.
• Grievance redressal: write to our Grievance Officer (below).
• Complain to the Data Protection Board of India.

For anything you can't do in the app, email privacy@use-steady.com. We reply within 30 days.

Children

Steady is for people 18 and older. If we learn that a backup account belongs to someone under 18, we delete it.

Security

Backup data is encrypted in transit. Row-level security in the database means each account can read only its own rows. On your iPhone, Steady's data is protected by iOS file protection. Access within Sonal Systems is limited to what each person needs. If there is a personal data breach, we will notify you and the Data Protection Board of India as the law requires.

This website

use-steady.com has no cookies, no analytics and no third-party scripts or fonts. Cloudflare, which hosts it, processes standard request data such as IP addresses to serve and protect the site.

Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. Material changes will also be shown in the app.

Grievance Officer and contact

Grievance Officer: Nirmal Amin
Email: privacy@use-steady.com
Post: Sonal Systems Private Limited, A-3, Mehsana Nagar, Nizampura, Vadodara 390002, Gujarat, India