Privacy notice
Steady is operated from the United Kingdom and is responsible for the information described here. For anything in this notice, including a request to see or delete what we hold, email hello@withsteady.co.uk and a person will answer.
What we hold
If you take the quiz: your first name and email, which medication you are on or considering, how long you have been on treatment, what you want to achieve, your main concern, and which campaign link brought you here.
If you buy: your email and a payment reference. Payment is handled by Stripe. We never see or store your card details.
If you use the STEADY app: your email, an optional display name and your timezone. Your medication, your stage of treatment, your main difficulty and your goal. The weekly plan we generate for you, and the answers it was generated from. Each week you check in, whether the week felt better, mixed or harder, your main difficulty at that point, and whether your treatment details changed.
Some of this is information about your health, and the law gives it extra protection. We treat it that way.
Why we are allowed to hold it
We hold this because you bought a personalised protocol, and we cannot produce it without your answers. In data protection terms, our lawful basis is performance of a contract.
Some of what you tell us is information about your health: your medication, your stage of treatment, and how each week felt. You give it to us so that we can build your protocol, and building your protocol is the only thing we use it for. We do not use it for anything else, we never share it for advertising, and you can ask us to delete it at any time.
What we do not do
- We do not sell your data or share it for advertising.
- We never use your health data to target advertising.
- We make no automated decision that has a legal or similarly significant effect on you. Your weekly plan comes from a fixed set of rules applied to the answers you gave.
- STEADY does not monitor you. Nobody is watching your check-ins as they arrive.
Who else sees it
Supabase stores the database and your sign-in, in the United Kingdom. Vercel hosts the site. Stripe processes payment. Resend sends your sign-in codes. Each acts on our instructions and for no purpose of their own.
How long we keep it
- Quiz answers, if you never buy: 12 months.
- Your account, protocols and check-ins: for as long as you have an account. Deleting it from the account menu removes them immediately. If you ask us by email instead, within 30 days.
- Purchase records: six years, because UK tax law requires it. These hold your email and what you bought, not your health answers.
Your rights
You can download a copy of your data and delete your account from the account menu inside STEADY, and deletion there takes effect immediately. You can also ask us to correct something, or object to how we use it. Email hello@withsteady.co.uk and we will answer within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
We set only what is needed to keep you signed in. We use no advertising or analytics cookies.
Last updated: 8 August 2026