Privacy Notice

Effective Date: July 18, 2026

Last Updated: September 16, 2026

STEADY is an adaptive nervous-system training and recovery app built around a progressive annual foundation. It supports training, education, and self-regulation practice.

STEADY is not medical care, a medical device, or emergency support. STEADY does not diagnose, treat, cure, prevent, or monitor medical or psychiatric conditions and does not replace care from a qualified clinician. If you are experiencing urgent symptoms or a crisis, seek appropriate emergency or professional support. Use of STEADY does not establish a provider–patient relationship.

1. Information We Collect

Account Information

• Name
• Email address
• Authentication credentials
• User role (e.g., individual or clinician)

Physiological and Regulation Data

STEADY may process HRV, RR intervals, or other beat-to-beat heart-signal data only when supported by connected devices, user permissions, device capabilities, and signal quality.

• Heart rate variability (HRV)
• RR interval data
• Session timing metrics
• Regulation phase progression
• Longitudinal baseline calibration data
• Derived adaptive parameters

If enabled, streamed Apple Watch heart rate may be used for HR-only sessions. Apple HealthKit heart rate data is used solely to support app functionality and does not provide RR intervals, HRV, readiness scores, recovery scores, or recovery context.

Technical Information

• App version
• Device type
• Operating system version
• Anonymous crash or technical logs

2. How Information Is Used

• Deliver adaptive training sessions and support self-regulation practice
• Support longitudinal practice history and training context
• Generate post-session recaps and user-authorized reports
• Provide optional biometric feedback when device capabilities and signal quality allow
• Provide recovery context only when supported data and signal quality allow
• Maintain system stability and security
• Improve reliability and performance

We do not sell personal or physiological information. We do not use health data for advertising or marketing.

3. Cloud Processing and Infrastructure

STEADY uses secure third‑party infrastructure providers to operate the application, including Supabase for encrypted database storage and secure cloud hosting services.

These providers process data solely on our behalf and under contractual data protection obligations. Data is encrypted in transit using industry‑standard protocols.

4. HealthKit Integration

If you enable Apple HealthKit integration, STEADY may use streamed Apple Watch heart rate for HR-only sessions. This data is used solely to support app functionality and does not determine session pacing.

• HealthKit data is not sold.
• HealthKit data is not shared for advertising.
• HealthKit data is not used for marketing purposes.

5. Data Sharing

Information may be shared only:

• With secure service providers necessary to operate the App
• With a qualified clinician if you explicitly choose to share information or authorize a report
• If required by law or valid legal process

6. HIPAA Status

STEADY is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Use of STEADY does not create a medical provider–patient relationship.

7. Data Retention and Deletion

Session data is retained to support practice history and app functionality unless deleted by the user. Account deletion requests may be submitted via in‑app support.

Upon deletion, identifiable account information is removed or de‑identified, subject to applicable legal requirements.

8. Your Privacy Rights (United States)

Depending on your state of residence, including California, you may request access to, correction of, or deletion of your personal information.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).

9. Children’s Privacy

STEADY is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Notice

This Privacy Notice may be updated periodically. The “Last Updated” date reflects the most recent revision.

Privacy inquiries: ticket.chanl@gmail.com