Privacy Policy

This policy explains, in plain English, what data Steady Life ("app") handles, why, and what you can do about it.

1. Who is responsible

The controller of your data is EC Plus Desenvolvimento de Sistemas Ltda, CNPJ 31.828.901/0001-08, located at Rua Tocantins, 540, Unit 35, Porto Alegre/RS, Brazil.

Data Protection Officer: reachable at privacy@steadylife.pro

• Privacy matters and rights requests: privacy@steadylife.pro
• General app support: support@steadylife.pro

We acknowledge rights requests within 10 business days and respond substantively within 45 calendar days (extendable once by 45 days, with notice).

If you are in Washington State or Nevada, please also read our separate Consumer Health Data Privacy Policy, which governs consumer health data under the My Health My Data Act and Nevada SB 370.

2. Notice at collection

Category	Examples	Why we collect it	Kept for	Sold or shared?
Identifiers	Email, login provider ID	Create and maintain your account	While your account exists	No
Sensitive personal information	Your written entries and the AI responses to them	Provide the "Put it into practice" step	While your account exists	No
Usage data	Current day, days completed, streak	Save your progress	While your account exists	No
Commerce information	Subscription status from the store	Manage your subscription	While your account exists	No
Technical logs	Access records, error codes	Prevent fraud and abuse	90 days	No

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months.

3. What we collect

Stays only on your device, never sent to us:

• your name;
• your reminder time and whether reminders are on;
• your app preferences;
• your answers in the "Train" step that fell outside the Stoic path. Aligned answers are not kept. Some of them are sent to the AI provider when you request Master Zeno's comment (see Section 7).

Goes to your account, if you create one (optional):

• your email and login provider ID (Google or Apple);
• your progress: current day, days completed, streak;
• the entries you write in the "Put it into practice" step and the responses Master Zeno gave to them (see Sections 5 and 7).

If you do not create an account, your data stays on your device — with one exception: the entry you send to Master Zeno passes through our server so the response can be generated (see Section 7). In that case it is not stored in our database.

What we do NOT collect:

• date of birth;
• location;
• contacts, calendar, photos, or files;
• Apple Health or Google Fit data;
• advertising identifiers.

4. What we do not do

• No analytics or telemetry. The app contains no Firebase, Amplitude, PostHog, Sentry, or equivalent.
• We do not track you inside or outside the app, and we use no advertising identifiers.
• No ads and no advertising profile.
• We do not sell your data and do not share it for third-party marketing.
• We do not use your text to train AI models.

5. Your entries

In the "Put it into practice" step, you write about real situations in your life. This is the most intimate data the app handles, and it deserves a section of its own.

This text may contain information about how you feel. We therefore treat it as sensitive personal information, and we process it only with your specific consent, requested on a dedicated screen before the first time you write. You can use the app without this step, and you can withdraw consent at any time.

• The entry is saved on your device as soon as you write it.
• If you have an account, it is also stored in our database (Supabase) so your journey survives a change of phone. Row-level access rules isolate your data: no other user can reach it.
• When you request Master Zeno's comment, the text is sent to generate the response (see Section 7).
• You can delete everything at any time, from inside the app (see Section 10).

Because this text passes through our servers and an AI provider, please avoid writing sensitive or identifiable information about other people.

6. How we look after you in hard moments

When you write an entry, the text passes through an automated check that looks for signs of serious distress or risk — for example, mentions of self-harm.

• What it is for: if those signs appear, the app does not respond with philosophy. It acknowledges what you are going through, reminds you that it is not a substitute for professional help, and shows support contacts for your region.
• Where the contacts come from: a fixed list inside the app, verified manually by us and organized by country. In the United States this includes 988, the Suicide & Crisis Lifeline. We never ask the AI to provide phone numbers, precisely to eliminate the risk of a wrong number.
• What we do not do: we do not notify anyone, we do not dispatch services on your behalf, we do not build any record, label, or classification about your mental health, and we do not use this check for any other purpose.
• The check can be wrong, in both directions. It is an added layer of care, not a monitoring system and not an emergency service. If you are at risk, seek professional help immediately.
• You may write to us at privacy@steadylife.pro to request an explanation or review of this check.

7. Artificial intelligence

Master Zeno's responses — a fictional character — are generated by artificial intelligence, provided by Anthropic.

• What is sent: the text you wrote, the day number, the name of that day's principle, and, where applicable, the answers you gave in the "Train" step that fell outside the Stoic path — at most the 12 most recent records, each with the situation presented and your answer. Aligned answers are not sent.
• What is not sent: your name, your email, or any account identifier. The AI provider receives nothing that links the text to you.
• The call is made by our server, never directly from the app — the access key never sits on your device.
• Under Anthropic's API policy, content sent is not used to train AI models.

AI responses may contain inaccuracies and are not health guidance.

8. Where data lives and for how long

Where	What	How long
On your device	Name, progress, entries, preferences	Until you delete it in the app or uninstall
In our database (Supabase)	Account, progress, entries	While your account exists, subject to the inactivity rule below
Login and payment providers	Per their own policies	Per their own policies

Inactivity. If your account goes 24 months without access, we email you. Without a reply within 30 days, we delete the data.

Deletion. When you delete your account, the data in our database is deleted immediately, and deletion cannot be undone.

9. Service providers

We do not sell your data. It is processed by service providers who operate parts of the service, each bound by a data processing agreement limiting use of your information to providing the service:

Provider	Purpose	Location
Supabase	Database and authentication	United States and other regions
Anthropic	AI response generation	United States
Apple and Google	Login and payment processing	United States and other regions
RevenueCat	Subscription management	United States

Because we are established in Brazil, your data may also be handled from Brazil. Where transfers require safeguards, we rely on contractual clauses with each provider.

10. Your privacy rights

Depending on where you live, you may have the following rights. We honor these rights for all U.S. users, regardless of state, rather than applying them selectively.

• Know / access — what we collect, why, and who we share it with
• Delete — request deletion of your personal information
• Correct — fix inaccurate information
• Portability — receive a copy in a portable format
• Opt out of sale or sharing — not applicable: we do not sell or share your information
• Limit use of sensitive personal information — we already use it only to provide the service you requested
• Withdraw consent — for your entries, at any time
• Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised a right
• Appeal — if we deny a request, you may appeal by replying to our response; if the appeal is denied, you may contact your state attorney general

The fastest route is inside the app:

• With an account: Profile → Your account → Delete my account. Deletes the account, cloud data, and everything on the device.
• Without an account: Profile → Your account → Delete my data. Deletes everything on the device.
• Withdraw consent for entries: Profile → Privacy → Withdraw consent. You keep using the app; the "Put it into practice" step stops sending text to the AI.

For anything else, write to privacy@steadylife.pro. We may ask you to verify your identity using information already associated with your account. You may use an authorized agent, with written permission.

11. Security

• All traffic between the app and our servers is encrypted (TLS).
• The database uses row-level access rules, so each account reaches only its own data.
• The AI access key lives only on the server, never in the app.
• Our servers do not record the content of your entries in logs.

Still, no system is perfectly secure, and we cannot guarantee absolute security. In the event of a significant security incident, we will notify you and the relevant authorities as required by law.

12. Children

The app is intended for people 16 years of age or older and is not directed to children.

We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has provided us information, write to privacy@steadylife.pro.

The app contains no advertising, no behavioral profiling, no algorithmic recommendation, no contact between users, and no location collection.

13. Changes and contact

We may update this policy. Material changes will be presented in the app in advance, and we will ask for your consent again where the law requires it.

Questions or requests:

EC Plus Desenvolvimento de Sistemas Ltda CNPJ 31.828.901/0001-08 Rua Tocantins, 540, Unit 35 — Porto Alegre/RS, Brazil privacy@steadylife.pro (privacy and rights) · support@steadylife.pro (general support)

Public version of this Policy: /en/privacy.html Terms of Use: /en/terms.html Consumer Health Data Privacy Policy: /en/consumer-health-data.html