Steadyfy is a place to share what you’re going through, under a name that isn’t yours. This policy explains, in plain words, what we collect, why, who can see it, and how you can get a copy or delete it.

We don’t show ads. We don’t sell your data. We don’t use tracking cookies.

Who we are

Steadyfy is an app for sharing personal journeys and getting support from other people. It is run by the Steadyfy team. When this policy says “we” or “us”, it means the Steadyfy team. “You” means you, the person using the app or this website.

Questions about this policy go to [email protected].

What we collect

We collect what the app needs to work, and nothing for advertising.

Your account

Your email address and password, or your Apple sign-in. Your password is stored by our sign-in provider in a form we can’t read. If you use Sign in with Apple, we get the email address Apple shares with us, which may be a private relay address. We don’t store your name.
A random username, like “QuietRiver42”. Nobody sees your email address. You can ask for a new name once every 30 days.
Your age bracket, which you choose when you join.
The topics you pick.
Your country, if you choose one. We use it to show crisis lines for where you are.
Your phone’s time zone and the app’s language, so reminders and quiet hours happen at the right time.
Your settings, and the date you accepted our Terms.

What you create

Posts (a title and what you write) and the chapters you add to them later.
Voice posts. See section 6.
Check-ins you leave on other people’s posts, and reactions to check-ins.
“Me too”s, follows and gifts you send.
Circles you start or join, your circle check-ins, and messages and voice notes you send in a circle.
Your window: the feeling you pick tonight, and your recent days.
Reflections you write for yourself.
Reports you make, people you block, and feedback you send us.
Your SOS contacts. See section 7.

Collected as you use the app

A push token for your device, if you allow notifications, so we can send them.
A short record of the pushes we send you (the type and the time). This is how we keep to at most 4 a day.
The days you open the app, for your streak.
How many characters of read-aloud audio you’ve used this month.
Basic request logs, like IP address and browser or device type, kept by our hosting provider.

What we don’t collect

Your real name or home address.
Your location from GPS.
Your address book or photos. SOS contacts are only the ones you type in yourself.
Advertising IDs, or anything used to track you across other apps and sites.

Who can see what

Your posts and chapters are shown to other people in the app under your username. You can turn off “Show my journey in the feed” to hide your chapters from everyone else.
Check-ins on your posts are private to you by default. Only you and the person who wrote each one can read it. If you turn on “Let others read my check-ins”, people viewing your posts can read them too.
Others can see how many check-ins a post has, but not what they say or who sent them.
Tonight’s feeling in your window is private unless you turn on “Share my window”. Your recent days are private unless you turn on “Share my recent days”.
People in a circle with you see your username, your circle check-ins and the messages you send there.
Your email address, age bracket, country and settings are never shown to other people.

How we use it

To create your account and keep you signed in.
To store what you write and show it to the people you’ve chosen.
To check posts and check-ins for harmful content (section 5).
To turn voice recordings into a changed voice, and to read text aloud (section 6).
To send the notifications and emails you’ve allowed (section 8).
To review reports and act on accounts that break our Terms.
To keep the service running and fix problems.
To meet legal obligations, if we have to.

We don’t use your data for advertising. We don’t sell it. We don’t build profiles of you for anyone else.

Keeping Steadyfy safe

When you publish a post or send a check-in, its text is checked automatically for things like threats, hate, sexual content and self-harm instructions. Posts are checked on their title and body.

To do this, the text is sent to OpenAI’s moderation service (the omni-moderation-latest model). OpenAI says it doesn’t use data sent through its API to train its models. If OpenAI can’t be reached, an open-source word list (the obscenity library) runs on our own server instead, and nothing is sent anywhere.

When you report a post, a check-in or a person, the report is stored with the content it points to. Reported content can be hidden automatically. A small number of people on the Steadyfy team can see reports and the content they point to, so they can review them.

Voice features

Steadyfy’s voice features use ElevenLabs, a voice AI provider. Each one is optional.

Voice posts

When you record a voice post or a voice chapter, your recording is uploaded to us and sent to ElevenLabs, which changes it into a different voice so it doesn’t sound like you. Once that’s done, we delete your raw recording. What we keep is the changed audio, plus a transcript where one is made. Those are deleted when you delete the post, and everything is erased when your account is erased.

Read aloud

When you tap Listen, the text you’re listening to is sent to ElevenLabs, which sends back audio. No recording of your voice is made. We save the audio so the same text doesn’t need to be made again.

Your own voice (optional)

You can choose to make a copy of your own voice for reading your words aloud. Before you record, the app asks for your consent. Your sample is sent to ElevenLabs to make the voice, and we also keep a copy of the sample with us. You can delete the voice in the app at any time, which deletes it from ElevenLabs too. To have the sample we keep deleted as well, email [email protected].

Voice notes in circles

Voice notes you send in a circle are stored with us so the people in that circle can play them.

ElevenLabs handles what we send under its own privacy policy.

SOS contacts

In Safety mode you can save up to three people to reach if things get hard. You type in each person’s name and phone number, and we store them so the app can show them to you.

When you press SOS, the app opens your phone’s own Messages app with your contacts and your SOS message already filled in. You send it yourself, from your own number. Steadyfy doesn’t send texts to your contacts, and we don’t share their numbers with anyone.

Please only add people who have agreed to be contacted this way.

Notifications and email

Push notifications are only sent if you allow them. In Settings you can choose what reaches you, set quiet hours, and choose how notifications look on your lock screen. With “Private”, the lock screen only ever says “Something new.” Pushes never include what anyone wrote.

We also send some emails: when someone checks in on you, says “Me too”, follows your journey, or there’s news on a journey you follow; when someone joins your circle; and a daily note if people checked in on you that day. Check-in emails can include the words of the check-ins left for you. You can turn most of these off in Settings. We send your data export by email when you ask for it.

Sign-in emails, like password resets, are sent by our sign-in system.

We don’t sell, rent or trade your information. These companies process some of it for us, only so the service works:

Supabase

Database, sign-in and file storage.

Your account, everything you create, and stored audio live here.

Vercel

Hosting for the website and the app’s server.

Every request to Steadyfy passes through Vercel, which keeps standard request logs. This website also uses Vercel Web Analytics, which counts page visits without cookies.

OpenAI

Automatic moderation.

The text of posts (title and body) and check-ins is sent to be checked for harmful content. OpenAI says API data isn’t used to train its models.

ElevenLabs

Voice changing and read aloud.

Voice post recordings are sent to be changed into another voice. Text you choose to listen to is sent to be read aloud. Your own voice sample is sent only if you choose to make one.

Resend

Email.

Your email address and the content of each email we send you (see section 8).

Expo

Push notifications.

Your device’s push token and the notification text go through Expo, which passes them to Apple or Google to deliver to your phone.

Apple

Only if you choose Sign in with Apple. Apple confirms who you are and shares your email address, or a private relay address, with us.

Some of these companies process data in other countries, including the United States.

We may also share information if the law requires it, or to protect someone’s safety.

How long we keep it

Your account and what you create: until you delete it, or until your account is erased.
A post you delete: removed straight away, with its chapters, the check-ins on it, and its voice audio and transcript.
Raw voice recordings: deleted as soon as they’ve been turned into the changed voice. A daily clean-up removes any left behind by a failed upload.
Your recent days: the app only shows the last 7 days. Older days are kept until your account is erased.
Push records: kept until your account is erased.
Your own voice: kept until you delete it in the app.
Reports and suspensions: kept so we can review them and spot repeat abuse.
Feedback you send us: kept, but no longer linked to you once your account is erased.
Hosting logs: kept by Vercel under its own policy.

When you delete your account, everything goes dark for other people straight away. For 30 days you can change your mind: just sign back in and it all comes back. After 30 days, your account and what you created are erased.

Your choices and rights

Wherever you live, you can:

Get a copy of your data. Use “Download my data” in Settings. We email it to you as a file, or the app lets you save it.
Correct it. Edit your posts, change your settings, or get a new name in Settings.
Delete it. Delete a single post, use “Delete all my posts”, or use “Delete account” in Settings.
Object or limit. Turn sharing, notifications and emails off in Settings, or ask us to stop a particular use.
Take back voice consent. Delete your own voice in the app at any time.

For anything you can’t do in Settings, email [email protected]. We aim to reply within 30 days. You can also complain to your local data protection authority.

Steadyfy is for adults

Steadyfy is for people aged 18 and over. When you join, we ask your age. If you tell us you’re under 18, we show you helplines for young people instead, and we erase the account that was just created straight away, with nothing kept.

If you think someone under 18 is using Steadyfy, please tell us at [email protected] and we will delete the account.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If a change matters, we’ll tell you in the app before it takes effect.

Contact

For any question or request about your privacy or your data:

Steadyfy privacy

[email protected]