Privacy Policy

Effective Date: April 27, 2026 · Last Updated: April 27, 2026

At Steady, your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data.

1. Information We Collect

When you use Steady, we collect the following types of information:

Account Information

• Name, email address, and password (hashed and salted)
• Medication type and start date
• Terms acceptance timestamp

Health and Wellness Data

• Daily symptom logs: nausea, energy, hunger, constipation, heartburn, bloating, diarrhea
• Weight measurements and body metrics
• Meal and nutrition data, including photos uploaded for AI meal analysis
• Water and hydration tracking
• Exercise and resistance training logs
• Progress photos you upload
• Injection site tracking

AI Coaching Data

• Voice coaching session recordings and transcripts
• Session summaries and goals generated by AI
• Personalized meal plans generated from your data

Technical Data

• Session cookies for authentication
• Device type and browser information
• Server logs (timestamps, IP addresses)

2. How We Use Your Information

We use your information for the following purposes:

• Providing the Service: Generating personalized meal plans, AI coaching sessions, pattern analysis, and progress tracking
• Improving the Service: Analyzing aggregate, de-identified usage patterns to improve features and user experience
• Account Management: Authenticating your identity, managing your account, and communicating service updates
• AI Analysis: Processing your tracking data to generate personalized insights, detect symptom patterns, and provide coaching recommendations

We do not use your data for advertising, marketing to third parties, or any purpose unrelated to providing the Steady platform.

3. Data Sharing

We share your information only in these limited circumstances:

• AI Processing: Meal photos and tracking data are sent to Anthropic's Claude API for analysis. This data is processed under Anthropic's API data usage policies and is not used to train AI models.
• Voice Coaching: Voice session data is processed through ElevenLabs for real-time AI coaching. Sessions may be recorded for transcript generation.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

We do not sell, rent, or trade your personal data to third parties for their marketing or commercial purposes.

4. Data Security

We implement reasonable technical and organizational measures to protect your data:

• Passwords are hashed using bcrypt with salt rounds before storage
• Session data is stored server-side with secure, HTTP-only cookies
• All data transmission uses HTTPS encryption
• Database access is restricted to authenticated users viewing only their own data
• Uploaded photos are stored on the server with access controls limiting visibility to the uploading user

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to following industry best practices.

5. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. Specifically:

• Account and tracking data is retained while your account exists
• Uploaded photos (meal photos, progress photos) are stored on our servers while your account is active
• Voice coaching recordings and transcripts are retained for session summary generation and service improvement
• Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can view your tracked data at any time through the Steady dashboard
• Correction: You can edit or update your tracked data (meal estimates, weight entries, etc.) at any time
• Deletion: You can request deletion of your account and all associated data by contacting us at support@steadyglp1.com
• Data Export: You can request a copy of your personal data by contacting us
• Withdraw Consent: You can stop using the Service at any time

7. Cookies

Steady uses session cookies solely for authentication purposes. These cookies:

• Are essential for the Service to function (keeping you logged in)
• Do not track you across other websites
• Are not used for advertising or analytics
• Expire when you sign out or after a period of inactivity

8. Children's Privacy

Steady is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. HIPAA Disclaimer

Steady is not a "covered entity" or "business associate" as defined under the Health Insurance Portability and Accountability Act (HIPAA). While we employ commercially reasonable security practices, the Service is not subject to HIPAA compliance requirements. If you require HIPAA-compliant health data management, please consult your healthcare provider.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or via email. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

• Email: support@steadyglp1.com

See also our Terms & Conditions.