Privacy Policy

Steady — Sober Days
Last updated: April 11, 2026

Carey Pillar ("we", "us") built Steady as a free, private cannabis sobriety tracker and daily mental health practice. This policy describes what data the app handles and how.

Data Collection

Steady collects zero data. No accounts. No email. No analytics. No crash reporting. No advertising. No third-party SDKs. There is no developer-accessible backend. We cannot see, access, or retrieve any of your data.

Data Stored on Your Device

Steady stores the following data locally on your device using Apple's SwiftData framework:

• Quit date and sobriety streak
• Daily check-ins (mood, energy, anxiety, sleep quality, dreams, reflections)
• Craving logs (trigger, intensity, duration)
• Slip records (timestamp, trigger, private notes)
• Reaction-time test results
• Achievement unlocks
• Weekly reflections (three good things)
• Calm tool usage records
• Cost/time baselines you enter

iCloud Sync

If you are signed into iCloud, your data syncs to your private iCloud container via Apple CloudKit. This syncs data across your own devices only. Steady uses CloudKit's private database exclusively. Your iCloud data is protected by your Apple ID and Apple's iCloud security infrastructure. We have no access to your iCloud container.

Apple HealthKit

With your explicit permission (toggled in Settings), Steady reads the following from Apple Health:

• Sleep analysis (asleep core, deep, REM durations)
• Heart rate variability (HRV SDNN)
• Exercise time

Steady never writes to HealthKit. Health data is read on-device, computed in memory, and never stored in SwiftData or synced to CloudKit. Only the fact of computed achievement unlocks (e.g., "First Full Night") is stored. Raw HealthKit data never leaves your device's HealthKit sandbox.

Optional Partner Sharing

You may optionally share milestone and slip events with one trusted person via Apple's CloudKit Share. The partner sees an event log only. They never see your daily data, mood, journal entries, dream logs, notes, triggers, or HealthKit data. Partner sharing is off by default and requires explicit setup.

Third-Party Services

Steady uses zero third-party services. The only Apple frameworks used are:

• Apple CloudKit — for iCloud sync (your private container only)
• Apple HealthKit — read-only, with your explicit permission
• Apple ActivityKit — for Live Activities on your Lock Screen
• Apple UserNotifications — local notifications only, no remote push

No analytics SDKs (no Firebase, no Mixpanel, no Amplitude). No advertising SDKs. No crash reporting SDKs (no Crashlytics, no Sentry). No attribution SDKs.

Data Sharing

Steady does not sell, rent, or share your data with anyone. You may choose to export your data as a JSON file via the share sheet in Settings. Exported files contain all your tracker data. You control who receives exported files.

Data Deletion

You can delete all data within the app via Settings (Debug menu in development builds). To delete all data permanently, uninstall the app and remove Steady data from iCloud via Settings > Apple ID > iCloud > Manage Storage.

Children's Privacy

Steady is rated 17+ due to cannabis cessation content. It is not intended for children under 17.

Changes to This Policy

If we update this policy, we will post the revised version here with an updated date. Steady has no way to notify you of policy changes (no email, no push) — check this page if you want to verify.

Support

For questions or support, email cpillar@gmail.com.

Contact

Carey Pillar
Saskatchewan, Canada
cpillar@gmail.com