Privacy Policy
Last updated October 3, 2026
Steady ("the app") is built so there's very little to say in a privacy policy. We don't run servers for the app, we don't operate an account system, and we don't collect the data you track. This page explains what that means. It also covers the basic analytics on this website.
What Steady stores, and where
Steady stores everything you enter (habit names, start dates, daily check-ins, relapse logs, journal entries such as moods, cravings, triggers and notes, your reasons and toolkit note, the names and phone numbers you add to your toolkit, and settings) locally on your device, in a database that stays on your phone by default. We have no server that receives, processes, or stores this information, and no way to access it.
Optional cloud backup
Premium users can set up cloud backup by creating a recovery key. From then on, Steady backs up automatically after you make changes, encrypting your data on your device before uploading it to your own iCloud (iOS) or Google Drive (Android) account. You control that storage, and Apple's or Google's privacy terms govern it. We can't read the backup, because it's encrypted before it leaves your device and we don't hold the keys.
Steady opts out of Android's automatic device backup, so Android doesn't copy the app's data to your Google account on its own. On iPhone, your phone's own iCloud or computer backup includes Steady's data, as it does for most apps, under Apple's terms.
App lock
If you turn on app lock, your phone's own Face ID, Touch ID, fingerprint or passcode check decides whether Steady opens. Your phone does the check itself and only tells Steady whether it succeeded. Steady never receives or stores your face, fingerprint or passcode. The app lock setting stays on your device and isn't included in backups.
Calls, texts and helplines
The toolkit's Call and Text buttons open your phone's own Phone or Messages app with the number filled in. Steady doesn't place calls, send messages or read your contacts; you type in the names and numbers yourself. To decide whether to show US helplines, Steady reads your phone's region setting on your device; it isn't sent anywhere. The "Find a helpline" link opens findahelpline.com, a separate website with its own privacy policy.
Exporting and deleting your data
You can export a plain-text copy of everything you've logged from Settings → Privacy at any time. You can also permanently delete everything you've logged from the same screen. Both actions happen entirely on your device. For step-by-step instructions, including deleting cloud backups and purchase records, see Delete your Steady data.
Accounts and identity
Steady doesn't ask for your name, email address, or any other identifying information. There's no login and no account system.
Purchases
You buy Premium through Apple's App Store or Google Play, and Apple or Google processes the purchase under its own privacy policy. We use RevenueCat to validate your purchase and manage your entitlement across devices; RevenueCat receives your purchase receipt and a device identifier to do this, under its own privacy policy. Steady only learns whether you hold an active entitlement, not your payment details.
Notifications
Steady schedules milestone and check-in reminders locally, using your phone's own notification system. No notification content goes through a push server, because Steady doesn't operate one. While app lock is on, milestone notifications don't name your habit.
Analytics and advertising
The Steady app doesn't include third-party analytics or advertising SDKs, and it doesn't track how you use it. Nothing in the app is sent to Google Analytics.
This website works differently. It uses Google Analytics 4 (GA4), loaded through Google Tag Manager, for basic traffic measurement: which pages get visited, roughly where visitors are, what device and browser they use, and how they found the site. Google may set cookies to do this. We don't use the data to identify you, and we don't run ads on the site. Google's handling of the data falls under Google's Privacy Policy, and you can opt out with the Google Analytics opt-out browser add-on.
Children's privacy
Steady isn't directed at children. The app collects no information from anyone, of any age.
Changes to this policy
If this policy changes, for example because a future feature changes how data is handled, we'll update this page and the "last updated" date above.
Contact
Send questions about this policy or how Steady handles data to steady-support@lixlink.com.