Steady · Same time tomorrow.

Privacy Policy

Last updated: 23 June 2026

Steady is a habit app that tries to stay out of your way. This policy explains, in plain terms, what information the app collects, why, where it lives, and the control you have over it.

This Privacy Policy applies to the Steady mobile application for iOS and Android (the "App" or "Service"). Steady is operated by THE WHOLEARC LABS (OPC) PRIVATE LIMITED ("WholeArc Labs", "we", "us", or "our").

By creating an account or using Steady, you agree to the collection and use of information described here. If you don't agree, please don't use the App.

The short version

Definitions

Information we collect

1. Account information (depends on how you sign in)

Steady offers several ways to sign in:

2. Check-in content (Proof of Habit)

When you mark a habit done, you can attach a photo. That photo — along with the related habit name, date, and time — is uploaded to and stored in Cloud Storage for Firebase (a Google service) and linked to your account. These photos are private to you. They are not posted publicly and are not shown to other users.

3. Habits and activity you create

The habits you set up, the times you choose, your check-ins, and your "laps" are stored so the App can show them back to you.

4. Usage and diagnostic data

To understand how the App is performing and to fix problems, we use Firebase Analytics and Firebase Crashlytics. These tools collect information such as how you interact with screens and features, your device model and operating system version, language and approximate region, app version, mobile identifiers, and crash and error logs. This data is used in aggregate to improve the App and is not used to advertise to you.

5. Purchases

If you buy anything from the in-app store, the payment is processed by the Apple App Store or Google Play, depending on your device. We receive confirmation of the purchase so we can unlock what you bought, but we never receive or store your card or banking details.

6. Information we do not collect

We don't collect your precise GPS location, your contacts, or your entire photo library — only the specific image you choose to attach to a check-in. We don't track you across other apps or websites, and we don't build advertising profiles about you.

At a glance

CategoryExamplesWhy we collect it
AccountEmail, name (if shared), sign-in identifiersTo create your account and sign you in
Check-in contentPhotos you attach, habit name, date & timeTo save your proof of habit and show it back to you
Habit activityHabits, schedules, check-ins, lapsTo run the core habit-tracking features
Usage & diagnosticsScreens used, device model, OS, app version, crash logsTo fix bugs and improve the App
PurchasesConfirmation of in-app purchasesTo unlock what you bought

How we use your information

Legal basis for processing

Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we process your personal data on these grounds:

GroundWhen we rely on it
ConsentWhen you create an account, attach photos to a check-in, or turn on reminders. You give consent through clear, affirmative actions in the App.
Legitimate usesFor purposes the DPDP Act permits without separate consent — for example, keeping the Service secure, preventing fraud and abuse, and meeting legal duties.
Legal obligationWhen a law, regulation, or valid government request requires us to retain or disclose information.

Where we rely on your consent, you can withdraw it at any time (see Consent and withdrawing consent below). Withdrawing consent doesn't affect processing already carried out, and some features may stop working if the data they rely on is withdrawn.

How we share your information

We do not sell your personal data, and we do not share it with third-party advertising networks. We share information only in these limited situations:

Service providers (sub-processors)

We rely on the following providers to run Steady. Each processes data only as needed to provide its service:

ProviderWhat it handles
Google FirebaseAuthentication, photo storage (Cloud Storage), database, analytics, and crash reporting
AppleSign in with Apple and App Store purchases
GoogleGoogle Sign-In and Google Play purchases

Legal reasons

We may disclose information if required to do so by law, or if we believe in good faith that it's necessary to comply with a legal obligation, protect our rights or property, prevent wrongdoing, protect the safety of users or the public, or defend against legal liability.

Business transfers

If WholeArc Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred. We'll give notice before your personal data becomes subject to a different privacy policy.

Where your data is stored and transferred

Steady uses Google Firebase, whose servers may be located outside India, including in the United States. By using the App, you understand that your information may be processed and stored in those locations, which may have different data-protection laws than your own. We take reasonable steps to ensure your data is handled securely wherever it is processed.

How long we keep your data

We keep your account information, habits, check-ins, and photos for as long as your account is active. When you delete a photo, habit, or your account, the corresponding data is removed from our active systems within 30 days, except where we're required to retain certain information to comply with the law, resolve disputes, or enforce our agreements. Diagnostic and analytics data is generally retained for a shorter period and in aggregated form.

DataHow long we keep it
Account informationWhile your account is active; deleted within 30 days of account deletion
Habits, check-ins & lapsWhile your account is active, or until you delete them
Check-in photosUntil you delete the photo or your account; removed within 30 days
Usage & diagnostic dataTypically up to 14 months, in aggregated form
Purchase recordsAs long as required by applicable tax and accounting law

Your choices and rights

If you are in India, the DPDP Act, 2023 gives you the following rights over your personal data:

To exercise any of these rights, contact us using the details in the Contact us section. We may need to verify your identity before acting on a request.

Consent and withdrawing consent

Where we rely on your consent, you provide it through clear actions in the App — for example, by creating an account, attaching a photo to a check-in, or turning on reminders. You can withdraw consent at any time by turning off the relevant feature, deleting the relevant content, deleting your account, or contacting us. Once you withdraw consent, we'll stop the related processing within a reasonable period, unless we're permitted or required to continue under the DPDP Act.

Automated decision-making and profiling

We don't use your personal data to make solely automated decisions that produce legal or similarly significant effects about you, and we don't profile you for advertising.

Security

We protect your data using industry-standard measures, including encryption of data in transit and Firebase security rules that restrict access to your own content. However, no method of transmission or storage is completely secure, and we can't guarantee absolute security.

Children's privacy

Steady is not directed to children under 13, and we don't knowingly collect personal data from them. Under India's Digital Personal Data Protection Act, 2023, processing the data of anyone under 18 requires verifiable consent from a parent or guardian. If you believe a child has provided us with personal data without the required consent, please contact us and we will take steps to delete it.

Links to other sites

The App or our website may link to sites we don't operate. We aren't responsible for the privacy practices of those sites, and we encourage you to read their policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above and, where appropriate, notify you within the App. Continued use of Steady after changes take effect means you accept the updated policy.

Grievance redressal

If you have a complaint about how we handle your personal data, you can contact our Grievance Officer, who is responsible for addressing concerns under the DPDP Act, 2023:

We'll acknowledge and respond to your grievance within the timelines required by applicable law. If you're not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India.

Contact us

If you have any questions about this policy or your data, you can reach us by email at hello@lifewithsteady.com. For privacy complaints, see Grievance redressal above.