Privacy Policy

What we collect

You can start using Steddy without an email address or a password. The app creates an anonymous account on your first launch, identified by a random ID.

Profile. Your first name. Optionally an age range, city and country, which you can skip.
Your content. Goals, notes, reward plans, daily check-ins, wishlist items (name, price and the photo you choose), redeemed rewards, and your time zone. The balance is a number calculated from these.
Sign-in. If you link Apple or Google, we receive the sign-in identifier and, if you allow it, your email address, to restore your history on a new phone. For Apple we also keep an encrypted token so we can revoke the link when you delete your account.
Purchases. Your subscription status and purchase history, including whether you are in a free trial. Payment card details are handled by Apple, Google or Lemon Squeezy and never reach us.
Device. A random installation ID used to settle sync conflicts, and the app version.
Usage. Product interactions, such as which screens you open, whether you viewed the subscription screen or restored a purchase, and your subscription status, tied to your random account ID, only while "Share usage data" is on in Settings › Privacy. The switch starts on if your phone's region is the United States and off everywhere else, and you can change it at any time.
Crash reports. Crash and performance data is sent only while "Share usage data" is on. The user, request data, free text, tokens and email addresses are removed before it leaves your phone.

Steddy does not use your device location (no GPS), contacts or advertising ID, shows no ads, and does not track you across other apps or websites. The city and country you may enter in your profile are text you type, not detected from your phone. If you allow camera access to photograph a wishlist item, the photo is stored only with that item. Reminders are scheduled on your phone and are not sent from a server.

This website uses no cookies, no analytics and no third-party scripts, and its fonts are served from our own domain. Our host, Cloudflare, processes standard request logs (such as IP address) to deliver and protect the site.

How we use it

To run the app: store and sync your goals, check-ins, balance and wishlist across your devices.
To provide your subscription and unlock features.
To understand which parts of the app work and to find and fix crashes.
To answer your support requests and to meet legal obligations.

If you are in the EU, UK or Switzerland, we process your data to provide the app you asked for, to keep it secure and fix crashes (our legitimate interests), and to measure usage only when you leave "Share usage data" on (your consent).

We do not sell your data and we do not share it for targeted advertising.

Steddy never holds, moves or pays out real money. Balances and rewards are numbers you set yourself, and nothing here is a bank, payment or financial service.

These companies process data for us, only to provide their service:

Supabase: database, sign-in and photo storage (servers in the United States, AWS us-east-1).
RevenueCat, Apple and Google: subscriptions bought in the App Store or Google Play, and Sign in with Apple or Google.
Lemon Squeezy: web purchases. Lemon Squeezy is the merchant of record, collects your payment details and email, and sends you the receipt.
PostHog: product analytics, switched off by "Share usage data" in Settings (servers in the United States).
Sentry: crash reports without personal data (servers in the United States).
Expo: builds and updates of the app, which do not receive your content.
Cloudflare: hosting of this website, and the bot check (Turnstile) shown when the app creates your account, which may process your IP address and device signals.

Each of these providers is bound by a data processing agreement or terms that require it to protect your data at least as well as this policy does.

We may also disclose data when the law requires it. Data is transferred to the United States, and for users in the EU, UK and Switzerland we rely on our providers' standard contractual clauses.

How long we keep it

Your account data stays until you delete your account or use Start over in the app.
Deleted data can remain in our provider's backups for up to 7 days.
Anonymous accounts that never subscribed and have not been opened for 30 days, or that have no active subscription and have not been opened for 400 days, are deleted automatically. Linked accounts are never removed automatically.
Subscription event logs: 90 days. Crash reports: 90 days. Usage analytics: 1 year.

Your choices

Access and portability. Settings › Privacy › Export my data creates a JSON file of everything we store about you.
Correction. Edit your name, goals and plans in Settings.
Analytics. Turn off "Share usage data" in Settings › Privacy to stop usage analytics and crash reports. Turning it off withdraws your consent.
Start over. Erases all goals and history on every device and lets you pick a currency again.
Your rights. Depending on where you live (for example under the GDPR or the CCPA) you may have the right to access, correct, delete, restrict or object to processing of your data, and to complain to your data protection authority. Email us and we will respond.

Delete your data

In the app, open Settings › Delete account. Your account, goals, check-ins, wishlist, photos and subscription records are erased, and any Lemon Squeezy web subscription is canceled. Subscriptions bought in the App Store or Google Play must be canceled in your store account.

No access to the app? The Delete your Steddy account page explains how to request deletion by email, and what is deleted and kept.

Age

Steddy is for people aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has used the app, email us and we will delete the account.

Contact

The data controller is Bui Quang Quy, 14 duong 25a, Khu pho 20, Phuong Tan Hung, Ho Chi Minh City, 700000, Viet Nam. Email [email protected], phone +84 929 812 977.

We may update this policy and will change the date above when we do. If a change is significant, we will tell you in the app.