Privacy Policy

Your family's privacy is our priority. This policy explains how we collect, use, and protect your information.

Last updated: July 2026

Our Promise to Your Family

Your child's data is sacred. We built Steadily with one rule: if it's about your child, it belongs to you.

  • We never sell your data. Ever.
  • We'll never use your child's information to advertise to you.
  • You can delete everything with one tap.
  • Your child's observations are processed by Steadily and Google's Vertex AI (using the Gemini models) to generate personalized insights. Your child's first name is replaced with a placeholder before being sent.

What follows is the full legal policy. But we wanted you to hear it from us first, in plain language.

Introduction

Steadily ("we," "our," or "us") is committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

By using Steadily, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Steadily is currently available only to users located outside the EU, EEA, and UK. This policy is written for users in the regions where we operate.

Information We Collect

Information You Provide

  • Account Information: Email address, name, and password when you create an account
  • Child Information: Your child's name (or nickname), age, and developmental observations you share — including text transcriptions of voice memos you record (speech recognition runs on your device; audio is not transmitted or stored on our servers)
  • Activity Data: Information about activities you complete, preferences, and feedback you provide
  • Communications: Messages you send us through support channels

Information Collected Automatically

  • Device Information: Device type, operating system, and app version
  • Usage Data: How you interact with the app, features used, and session duration
  • Analytics: We use Google Analytics to collect aggregated data about website usage. Google Analytics sets cookies (such as _ga) to distinguish unique visitors. This data helps us understand how visitors interact with our site

How We Use Your Information

We use the information we collect to:

  • Provide personalized activity recommendations based on your child's Growth Chapter
  • Improve and optimize our services and user experience
  • Send you relevant notifications and updates (with your consent)
  • Respond to your inquiries and provide customer support
  • Analyze trends and usage patterns to improve our product
  • Ensure the security and integrity of our services

Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

  • Service Providers: With trusted service providers who process data on our behalf to deliver Steadily's features, under strict confidentiality agreements. These include providers for cloud hosting and database storage, content delivery and network security, AI processing services (Google's Vertex AI, using the Gemini models) to generate insights and recommendations, authentication and sign-in, product and usage analytics, crash and error diagnostics, subscription and billing, push notifications, email delivery, approximate location lookup from your IP address, stock imagery, and website analytics. Data sent to our AI provider includes your child's developmental observations, behavioral patterns, age, gender, and your reflections — your child's first name is replaced with a placeholder before being sent. Our AI provider processes this data on our behalf only and does not use it to train its own models. We share only the data each provider needs to perform its function. The specific providers we rely on are named below.
  • Legal Requirements: When required by law or to protect our rights, safety, or property
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
  • With Your Consent: When you explicitly agree to share your information

Service Providers We Rely On

To be transparent about who processes your information, the specific service providers we rely on are listed below. Each processes data only on our behalf under a data-processing agreement, and receives only the data it needs for its function:

  • Google Vertex AI (Gemini): AI processing to generate insights and recommendations. Receives your child's developmental observations, behavioral patterns, age, gender, and your reflections, with your child's first name replaced by a placeholder. Does not use this data to train its own models.
  • Cloud hosting and database: Stores your account information and your child's data and runs the app's backend services.
  • Cloudflare: Content delivery, network security, and DNS. All app and website traffic passes through Cloudflare, and it also hosts our website waitlist database.
  • Authentication (Google Firebase, Sign in with Google, Sign in with Apple): Verify your identity when you create an account or sign in, and deliver push notifications through Apple's and Google's notification services (APNs and FCM).
  • RevenueCat: Manages your subscription and purchases across the App Store and Google Play. If you personalize your experience, your child's first name may be used to display personalized purchase screens; RevenueCat processes it only to provide this service and never receives your child's developmental data, observations, or memories.
  • Unsplash: Provides stock imagery shown in the app. When imagery is fetched, the search terms and your device's IP address are sent to Unsplash.
  • ip-api.com: Performs a one-time, approximate city-level lookup from your IP address during onboarding so we can tailor initial content.
  • Product analytics, crash diagnostics, and email delivery: Help us understand how the app is used, diagnose errors, and send you service and support emails.
  • Google Analytics (website only): Collects aggregated statistics about how visitors use our website. See our Cookie Policy for details.

Artificial Intelligence and Your Data

Steadily uses AI to provide personalized recommendations. Here's how we handle your data in relation to AI:

  • Your personal data is NOT used to train external AI models
  • We use AI to analyze patterns in your child's development and provide personalized recommendations
  • We may use de-identified, aggregated observation data to improve Steadily's own internal recommendation models. Child names and direct identifiers are always excluded from this process. External AI providers do not train on your data.
  • AI is essential to Steadily — it is how we personalize recommendations for your child. You cannot disable AI while using the app; to stop AI processing of your data, delete your account.
  • Before your child's observations reach our AI provider (Google's Vertex AI, using the Gemini models), we replace your child's first name with a placeholder. Other context — including behavioral observations, developmental patterns, age, gender, and your reflections — is sent as written to enable accurate personalization.
  • Internal improvement uses only de-identified patterns, activity feedback, and derived trait signals. It never includes your child's name, account identifiers, exact date of birth, or contact information.

Without AI, Steadily cannot generate personalized activities or insights. If you prefer not to use AI-powered features, deleting your account is the appropriate remedy and stops all AI processing of your data.

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit and at rest
  • Secure authentication and access controls
  • Regular security audits and monitoring
  • Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

Children's Privacy

Steadily is directed to parents and other adults, not to children. Children do not use the app; all information about a child is entered by their parent or guardian. By creating an account, you confirm that you are the parent or legal guardian of any child whose information you share with Steadily. We do not knowingly collect personal information directly from children under 13.

We comply with COPPA (Children's Online Privacy Protection Act) and take steps to protect children's privacy. Your child's first name is masked before observations are processed by our AI provider (Google's Vertex AI, using the Gemini models). We disclose the specific categories of data that reach our AI provider in the 'Data Sharing' and 'AI and Your Data' sections above.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Request a copy of your data in a portable format by emailing support@getsteadily.app
  • Opt out of marketing communications
  • Contact us about your data choices, including account deletion, which stops all AI processing of your data

Note: AI processing is essential to how Steadily delivers personalized recommendations and cannot be turned off separately. To prevent all AI processing of your data, delete your account.

To exercise these rights, contact us at support@getsteadily.app.

California Privacy Rights

If you are a California resident, the CCPA/CPRA gives you the rights described below. In the past 12 months we have collected the following categories of personal information:

  • Identifiers — your name, email address, and account ID
  • Customer records — your name and login credentials
  • Internet or app activity — features used, session duration, and device and usage data
  • Approximate location — derived from your IP address
  • Inferences — your child's Growth Chapter and personalization signals
  • Sensitive personal information — see the section below

We collect this information directly from you, automatically as you use the app, and from our service providers (for example, analytics).

We use each category only for the business purposes described in 'How We Use Your Information' above.

Sensitive Personal Information

Some information we process — your account login credentials and information relating to your child — may be considered 'sensitive personal information' under California law. We use it only to provide the service you requested, secure your account, and the other purposes permitted by Section 1798.121(a). Because we do not use sensitive personal information to infer characteristics about you, we do not offer a separate 'Limit the Use of My Sensitive Personal Information' option.

We Do Not Sell or Share Your Information

We do not 'sell' or 'share' your personal information as those terms are defined under the CCPA/CPRA, including for cross-context behavioral advertising, and we have not done so in the preceding 12 months. If we introduce advertising in the future, any ads would be shown to you as an adult, would never use your child's information, and you would be able to opt out. We will update this policy and obtain any consent the law requires before making such a change.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights — we will not deny you service, charge a different price, or provide a different quality of service.

How to Exercise Your Rights

To exercise your rights to know, access, correct, or receive a portable copy of your information, email us at support@getsteadily.app; we verify your request using your account credentials and respond within 45 days (extendable once by 45 days with notice). You can delete your account and all associated data yourself in the app under Settings → Account → Delete Account, or request deletion by email. You may use an authorized agent to submit a request on your behalf with proof of authorization. Opting out of marketing emails does not affect the core service; to stop all processing, delete your account.

California "Shine the Light"

California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing, so there is nothing to disclose.

Privacy Rights in Other Regions

Depending on where you live, you may have additional rights under your local data protection laws — for example, to access, correct, delete, or receive a copy of your personal information. To exercise any of these rights, contact us at support@getsteadily.app and we will respond as required by applicable law.

Data Retention

We retain your personal information for as long as your account is active. When you delete your account, your data is deleted, except for limited records we must keep: consent records are retained for up to seven years for legal and audit purposes with your identity removed, and billing records are retained as required by financial and tax law with your identity removed. Residual copies in encrypted backups are purged on a rolling basis (within 30 days). Our service providers retain data according to their own schedules; you can request deletion by emailing support@getsteadily.app. We also keep a limited consent audit log that records the IP address used when you gave consent. We retain each category of personal information for as long as your account is active and then delete it on the schedule above; we do not keep any category longer than needed for the purpose it was collected or as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

← Back to Home