Consumer Health Data Privacy Policy

This is a separate policy, required by Washington State's My Health My Data Act (MHMDA) and Nevada SB 370. It applies specifically to consumer health data collected by the Steady Life app, and supplements our Privacy Policy.

Provided by EC Plus Desenvolvimento de Sistemas Ltda, Rua Tocantins, 540, Unit 35, Porto Alegre/RS, Brazil. Contact: privacy@steadylife.pro

1. What consumer health data we collect

We collect one category of consumer health data:

The text you write in the "Put it into practice" step, and the AI responses to it. This text may describe how you feel, situations that caused you distress, or your mental or emotional state. Under MHMDA's broad definition, that qualifies as consumer health data.

We collect it directly from you, only when you choose to write it. We do not collect health data from any other source, we do not infer health conditions about you, and we do not obtain health data from third parties.

We do not collect: biometric data, precise location, health records, information from Apple Health or Google Fit, medication data, or any diagnosis.

2. How we use it

We use this data for exactly two purposes:

1. To generate the response you asked for — the text is sent to our AI provider so Master Zeno can reply to it.
2. To show support contacts when the text suggests risk — an automated check looks for signs of serious distress and, if found, replaces the philosophical response with verified crisis contacts.

We do not use consumer health data for anything else. No advertising, no profiling, no research, no product analytics, no AI model training, and no inference about your health.

3. Who we share it with

We share consumer health data only with service providers who process it on our behalf, under contracts limiting them to that purpose:

Who	What they receive	Where
Anthropic	The text of your entry, the day number, and the principle name — no name, email, or account identifier	United States
Supabase	The stored entry, if you have an account	United States and other regions

We do not sell consumer health data. We have never sold it and have no plans to. Because we do not sell it, we do not collect the written authorization that MHMDA requires for sales.

We do not share consumer health data with advertisers, data brokers, insurers, employers, or law enforcement, except where legally compelled — and if that happens, we will notify you unless prohibited by law.

4. Your rights

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data
• Access the health data we hold about you, including a list of who received it
• Withdraw consent for collection and sharing
• Delete your consumer health data
• Appeal a denial of any of these requests

How to exercise them. The fastest routes are inside the app:

• Withdraw consent: Profile → Privacy → Withdraw consent
• Delete everything: Profile → Your account → Delete my account (or Delete my data if you have no account)

Or write to privacy@steadylife.pro. We respond within 45 days, extendable once by 45 days with notice. If we deny your request, our response will explain how to appeal; if the appeal is denied, you may file a complaint with the Washington State Attorney General.

On deletion. When you delete, we remove the data from our production database and instruct our service providers to do the same. Backups are overwritten on their normal cycle, within 90 days.

5. Consent

We collect consumer health data only with your consent, requested on a dedicated screen before the first time you write an entry — separate from the Terms of Use and separate from account creation.

Sharing with our AI provider is disclosed on that same screen, before you consent.

You can use the app without consenting. The "Put it into practice" step is skipped and the rest of the journey works normally.

6. Data location

Consumer health data is processed in the United States by our service providers, and may also be handled from Brazil, where our company is established.

---

This policy is maintained separately from our general Privacy Policy, as required by RCW 19.373. If you have questions about it, write to privacy@steadylife.pro.