Privacy Policy | Steadyline

1 Summary (Plain Language)

✓ Your personal logs are stored locally on your device.
✓ If Cloud Sync is enabled, your data is also stored in our cloud (Supabase).
✓ We use third-party services for auth, analytics, payments, and optional AI.
✗ We do not sell your personal data. Ever.

2 Information We Collect

What You Provide

Daily logs: mood, energy, sleep, notes, tags, goals, and other journal fields. Raw notes (if added). Optional email for sign-in.

Device & App Data

App usage and crash data — only when Cloud Sync is FULL and you have opted in. Device identifiers required for analytics and purchase validation.

Health Data (Optional)

If you connect Health Connect: steps, sleep sessions, and average heart rate. Each permission is requested individually and can be revoked anytime in Android Settings. We never request high-sensitivity Health Connect categories (menstrual cycle, alcohol consumption, blood glucose, etc.). Never shared.

AI / Analysis Data (Optional)

If AI features are enabled, anonymized and aggregated log data may be sent to third-party AI providers (Groq, Hugging Face) to generate insights. Your raw journal text is never sent to any external service.

3 How We Use Your Data

· Provide core app features: logging, insights, analytics.
· Sync your data across devices (when Cloud Sync is enabled).
· Improve stability and detect issues via crash reporting.
· Process purchases and manage subscriptions.
· Generate AI-powered summaries or insights (when enabled).

4 Where Your Data Is Stored

Local storage: Always on your device.

Cloud storage (optional): When Cloud Sync is FULL, data is stored in Supabase (EU region).

If Cloud Sync is OFFLINE, your data stays only on your device — nothing reaches our servers.

5 Data Sharing & Third-Party Services

We do not sell your data. We share only what is needed to run the app:

Supabase

Authentication + cloud sync

Google Sign-In

Optional login

RevenueCat + Google Play

Payments

Firebase

Crashlytics & analytics (opt-in only)

Health Connect

Optional health data

Groq / Hugging Face

Optional AI features

Each of these services has its own privacy policy.

6 Your Choices & Controls

· Use the app fully offline (disable Cloud Sync in Settings).
· Delete all local data in Settings → Delete All My Data.
· Delete your account and all cloud data in Settings → Delete Account.
· Export your logs at any time from the Insights screen.
· Revoke Health Connect permissions anytime in Android settings.
· Opt out of analytics at any time in Settings → Privacy.

7 Security

All data stored on your device is encrypted at rest using AES-256 via SQLCipher. Encryption keys are stored in platform-secure storage (Android Keystore / iOS Keychain) and never leave your device. All network communication uses HTTPS (TLS 1.2+). Clinician reports are encrypted end-to-end using AES-256-GCM before upload.

8 Prohibited Uses of Health & Fitness Data

In line with Google Play's Health and Fitness data policy, Steadyline explicitly does not use your health or fitness data (including data read from Health Connect and self-reported entries like mood, sleep, energy, symptoms, medications, and therapy notes) for any of the following:

✗ Determining employment, insurance, lending, or any third-party eligibility decision.
✗ Advertising, targeted advertising, or ad profiling.
✗ Sharing with data brokers or selling to any third party.
✗ Unauthorized sharing on social networks or public platforms.

Your health data powers only the in-app features you have chosen to enable. It is never repurposed.

9 Children's Privacy

Steadyline is not intended for children under 13. We do not knowingly collect personal data from children under 13.

10 Changes to This Policy

We may update this policy from time to time. The latest version will always be available at steadyline.app/privacy. Continued use of the app after changes constitutes acceptance.

11 Contact

Steadyline

Questions or requests: ravi@steadyline.app