This notice applies to Washington State residents and supplements Steady's Privacy Policy. It describes how Continuity Labs, Inc. handles “consumer health data” as defined by Washington's My Health My Data Act. We apply the same protections to Nevada residents under SB 370 and to Connecticut residents under the Connecticut Data Privacy Act.
Steady helps you prepare for and reflect on social situations. Because that is a wellness-adjacent purpose, we treat the categories below as consumer health data, whether or not they would be classified that way in every context.
What we collect, and why
1. Prep and debrief content you send to our cloud AI provider — collected only if you opt in.
Steady can use a cloud AI service to make its prep and debrief conversations more helpful. This is off unless you turn it on. It sits behind its own in-app consent screen that names the provider and describes the sensitive nature of the data, and it has a decline option that keeps Steady fully usable.
If you turn it on, the prep and debrief text you write is sent to Anthropic, through a secure proxy we operate, so that Claude can generate a response that is returned to your device. We use it for that purpose only: generating your response in that moment.
If you do not turn it on, this content never leaves your device and iCloud, and this category does not apply to you.
2. Usage and crash data — collected only if you opt in, and not currently collected at all.
Steady is built to collect anonymous usage and feature-engagement data (which features you use, session counts, whether you completed a prep or debrief flow) and crash and stability diagnostics, each tagged with a random, install-scoped identifier that is not linked to your name, email, or account.
We have this collection paused. As of the effective date above, no usage or crash data is being collected from Steady, and we hold none. We describe the category here so that it is disclosed before any collection resumes. If we turn it back on, we will do so only on your opt-in consent, for the purposes stated here: understanding how Steady is used so we can improve it, and finding and fixing crashes.
What we do not collect. We do not collect symptoms, diagnoses, mood scores, medication information, or any clinical record. We do not ask for and do not want your health history.
Where this data comes from
We collect all of it directly from you, through your use of the Steady app on your device, and only after you opt in. We do not buy consumer health data, and we do not obtain it from data brokers, advertising networks, health care providers, or other outside sources.
What we share
We share category 1 (prep and debrief content) with our AI provider, and only when you have turned cloud AI on.
We would share category 2 (usage and crash data) with the analytics and crash-reporting providers named below if and when that collection resumes. Because that collection is paused, we are currently sharing nothing in this category.
We do not share consumer health data with advertisers, ad networks, or data brokers. We do not sell consumer health data, we never have, and we would obtain your separate written authorization before doing so, as the law requires.
Who we share it with
We share consumer health data only with service providers that process it for us under contract, on our instructions, and not for their own purposes. We have no affiliates with whom we share consumer health data.
- Anthropic PBC — receives category 1, your prep and debrief text, only when cloud AI is on, to generate the AI response returned to your device.
- Google LLC (Google Cloud, BigQuery) — would receive category 2 if that collection resumes; hosts our usage analytics.
- Functional Software, Inc. (Sentry) — would receive category 2 if that collection resumes; processes crash and stability diagnostics.
Anthropic and AI training. Anthropic does not use this content to train its models. Under its commercial API terms, Anthropic deletes inputs and outputs within 30 days. If a request is flagged under Anthropic's usage policy, Anthropic may retain it longer for trust and safety review.
Our own servers. Our proxy passes your content through to Anthropic and returns the response. We do not store your prep or debrief content on our servers, and it is never added to analytics or crash data.
How long we keep it
- Category 1: we do not retain it. Anthropic deletes it within 30 days, subject to the trust and safety exception above. Your own copy stays on your device and in your private iCloud until you delete it.
- Category 2, if collection resumes: usage data for up to 14 months in raw form, after which it becomes aggregate statistics that identify no one; crash diagnostics for up to 90 days.
Your rights
Washington, Nevada, and Connecticut residents have the right to confirm whether we collect, share, or sell your consumer health data, to see the list of third parties we share it with, to withdraw your consent, and to have your consumer health data deleted.
To withdraw consent. Open Steady, go to Settings, and turn off the cloud AI option. Sharing stops immediately. Steady keeps working with on-device assistance, and your content stays on your device.
To delete your data. Use “Erase All Data” in Steady's Settings. This deletes your content on your device and in your iCloud, and sends a deletion request for any usage data held by our analytics provider.
Two honest limits on deletion:
- Prep and debrief text already sent to Anthropic cannot be recalled from within the 30-day window described above. It is deleted on that schedule and is not used for training.
- Crash diagnostics, if that collection resumes, are tied only to a random install identifier and cannot be located per person on request. They delete automatically within 90 days.
To confirm what we hold, exercise any right, or appeal a decision we make about your request, email shaunty@continuitylabs.ai. We will respond within 45 days. If we deny a request, you may appeal by replying to that email, and you may file a complaint with the Washington State Attorney General.
We will not discriminate against you for exercising these rights, and we do not condition access to Steady's core features on your consent to any of the collection described here.
Changes to this notice
We will not collect, use, or share consumer health data in categories or for purposes that are not described in this notice without first updating it and obtaining your consent.
Contact
Continuity Labs, Inc.
Email: shaunty@continuitylabs.ai