Privacy

This page explains, in plain terms, what Steady keeps about you and what happens to it. Steady does not sell personal data and does not use it for advertising.

Who runs Steady

Steady is a meal-planning app at steadysands.com and on iOS, run by Seth Thomas as an independent project. Anyone can create an account.

What we store

• Account: your email address, a display name you choose, and a sign-in record held by Google Firebase Authentication. If you sign in with Google, we receive your verified email address from Google. We never see or store your password.
• Food preferences: the diet, foods to avoid, allergies and calorie targets you enter.
• Plans: meal plans, recipes, grocery lists, prep and cooking progress, and planning conversations.
• Personal check-ins, if you use them: weight, steps and private notes.
• Devices: if you allow notifications on iOS, a push token so we can send reminders you turned on.

Allergy and diet settings help Steady pick dishes. They are not a guarantee that a recipe is safe for you. Always check ingredients yourself.

Households and who sees what

Every account belongs to one household. A new account starts its own household that only that person can see. The owner can invite one other person by email; they join when they create an account with that address.

Members of a household share meal plans, recipes, grocery lists and planning conversations. Weight, steps, private notes and wearable data stay visible only to the person who entered or connected them. People in other households cannot see any of your data, and the server checks your household on every request.

Service providers

Steady relies on a few companies to run:

• Google Firebase for sign-in and the database.
• Vercel for hosting and running the server.
• Anthropic for AI meal suggestions and the assistant.
• Apple for delivering iOS notifications.
• Instacart or Whole Foods, only when you choose to send a grocery list there. The list items go to that service, which handles your order under its own policy.

AI features

When you ask Steady to suggest meals or use the assistant, your request and the plan details it needs (dates, dishes, food preferences, portion targets) are sent to Anthropic. Weight entries, notes and wearable readings are not included unless a feature asks you first and you agree. Anthropic’s standard API retention deletes inputs and outputs within 30 days, with some legal and safety exceptions, and commercial API data is not used for training by default.

Optional wearable connections

Where Steady offers WHOOP or Oura, connecting is optional and read-only, and each person connects their own account. Steady shows up to 30 days of sleep, recovery or readiness, heart-rate variability, resting heart rate and recorded workouts. Access tokens are encrypted on the server. WHOOP summaries are stored so trends can be shown; Oura readings are fetched for display and not saved. Wearable data never changes your meals or targets on its own, and it is never shared with the other household member. Disconnect at any time from settings to delete the saved connection.

Cookies and logs

The website uses one secure cookie to keep you signed in for up to 30 days, short-lived cookies during wearable sign-in, and browser storage for display settings such as dark mode. There are no advertising or cross-site tracking cookies. Our hosting providers keep technical logs (such as IP address and request times) to run and protect the service.

Deleting your account

You can delete your account yourself at any time: on the web under You → Delete account, or in the iOS app under You → Delete account. Deletion removes your sign-in and your data right away:

• If you own the household, the whole household is deleted, including plans, lists, recipes and everyone’s check-ins in it. An invited member keeps their sign-in and can start a new household.
• If you were invited, your personal data (check-ins, notes, devices, wearable connections, preferences) is deleted and the shared meals stay with the household.

Copies already sent to a provider, such as an AI request, follow that provider’s retention and are not recalled. Encrypted backups kept by our database provider may hold data for a limited time before they expire.

Retention

We keep your data while your account exists. Wearable records older than 30 days are dropped on the next sync. Unused household invitations expire after 14 days.

Children

Steady is not meant for children under 13, and we do not knowingly collect their data.

Changes and contact

If this policy changes in a way that matters, we will update the date above and say so in the app. Questions or requests: privacy@steadysands.com.

Steady is for meal planning, not medical advice. Nutrition estimates and wearable readings can be wrong.

Terms of Service · Return to Steady