Privacy Policy
The short version
- Your health data is stored on our own server so the app can work across your phone, iPad and computer. It is never sold and never used for advertising.
- AI that reads your meal photos runs on our own hardware by default. Nothing goes to an outside AI company unless you switch that on yourself.
- You can export everything and delete your account from inside the app.
- SteadiHealth is not a doctor. It does not diagnose, treat or monitor any condition.
Information you give us
- Account — a username and a password (stored only as a bcrypt hash, never in readable form).
- About you — year of birth, height, and optionally sex at birth. Sex at birth is used only because strength and body-composition norms differ; you can skip it.
- Training — workouts, sets, reps, weights, effort, and any pain you record.
- Food and drink — what you log, by typing, speaking, or photographing it.
- Body measurements and progress photos — only if you choose to record them.
- Conditions and medications — only if you turn that on. See below.
- Screening answers — the standard PAR-Q+ pre-exercise questions.
Health data from Apple Health
If you allow it, SteadiHealth reads steps, sleep, heart rate and workouts from Apple Health so you don't have to type in numbers your phone already has.
Apple's rules are strict and we follow them: HealthKit data is never used for advertising, never used for data mining, never shared with third parties, and never stored in iCloud. SteadiHealth does not write anything back into Apple Health.
You can revoke access at any time in the Health app, and SteadiHealth keeps working without it.
Conditions and medications
This is off unless you turn it on. If you do, SteadiHealth uses what you enter to hide movements that may not be safe for you and to keep suggested loads conservative.
Those adjustments come from a fixed list of general precautions. They have not been reviewed or approved by a clinician, they are not specific to your situation, and they may be incomplete or wrong for you. If SteadiHealth disagrees with your doctor, your doctor is right.
When SteadiHealth does not recognise something you enter, it tells you so plainly rather than pretending to have understood it.
AI processing, and your choice about it
SteadiHealth uses AI to read meal photos and food descriptions.
- By default, this runs on our own hardware. Your photos and descriptions do not leave our server.
- Outside AI providers are off unless you turn them on. If you do, the data you send goes to that company under their terms and privacy policy, not ours. That is your choice, and their handling of it is between you and them.
AI output is an estimate, not a measurement, and it can be wrong. The app labels it that way everywhere it appears.
What we do not do
- We do not sell your data. To anyone. Ever.
- We do not use your health data for advertising.
- We do not run third-party advertising or tracking SDKs.
- We do not share your data with employers, insurers, or family members.
- We do not send your progress photos to any outside service.
Who can see your data
Each account's data is separated by owner and the server enforces that on every request. Other users of SteadiHealth cannot see your information. James Peterson Films can access stored data only where necessary to operate or fix the service.
Where it is stored, and for how long
Data is stored on a server we control in the United States, over encrypted connections. We keep your data for as long as your account exists. Delete your account and it is removed, along with your photos, within 30 days.
Getting your data out
You can export everything as structured files from inside the app, and delete your account from inside the app. You should never have to ask us for either.
California residents
If you live in California, you have the right to know what personal information we collect, to have it deleted, and to correct it. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of. Contact us using the address below.
Children
SteadiHealth is not intended for anyone under 18, and we do not knowingly collect information from children.
Security
Connections are encrypted. Passwords are hashed with bcrypt and never stored in readable form. Access to the server is restricted. No system is perfectly secure, and we will tell you promptly if data is ever exposed — as required by the FTC Health Breach Notification Rule.
Changes
If this policy changes in a way that affects what we do with your data, the app will ask you to agree again. An older agreement is never treated as covering new wording.
Contact
Questions about privacy: privacy@steadihealth.ai