Steady is a personal assistant application developed and operated in Brisbane, Australia. Our service automatically scans your connected communication channels to detect appointments and important events, adding them to your calendar and drafting replies on your behalf.

References to "Steady", "we", "us", or "our" in this policy refer to the Steady application and its operators. References to "you" or "your" refer to the individual using the Steady service.

We collect only the minimum data required to provide the Steady service. Here is exactly what we collect and why:

• 📧
  Gmail access — We read your unread emails to detect appointment-related content. We do not store your full email content. We only extract and store appointment details such as title, date, time, location and action items.
• 📅
  Google Calendar access — We create and read calendar events on your behalf. We check for scheduling conflicts and add detected appointments with appropriate reminders.
• 💾
  Google Drive access — We read SMS backup files you have chosen to store in your Google Drive. We do not access any other Drive files. This is used to detect appointments from SMS messages.
• 👤
  Account information — Your name and email address from your Google account. This is used to personalise the app and identify your account.
• 🔑
  Authentication tokens — OAuth tokens issued by Google that allow Steady to access your connected services. These are stored securely in our database and never shared.
• 🧠
  Learning memory — Contact names, locations and patterns that Steady learns from your usage to improve accuracy over time. This data belongs to you and can be deleted at any time.

We use your data exclusively to provide the Steady service. Specifically:

• ⚡
  To scan your Gmail for appointment-related emails on a scheduled basis
• 📅
  To create calendar events in your Google Calendar with appropriate reminders
• ✉️
  To generate draft replies in your Gmail Drafts folder for your review and approval
• 🧠
  To improve the accuracy of appointment detection through a personalised learning system
• 🔄
  To maintain and refresh authentication tokens required to access your connected services

We do not use your data for advertising, profiling, marketing, or any purpose beyond operating the Steady service for your personal benefit.

We take data security seriously. Your data is protected through the following measures:

• 🔐
  Row Level Security (RLS) — Our database enforces strict data isolation. It is technically impossible for one user's data to be accessed by another user's account.
• 🔑
  OAuth authentication — We never store your Google password. Access is granted through Google's secure OAuth system which you can revoke at any time through your Google Account settings.
• 🌐
  Encrypted connections — All data transmitted between Steady and your devices is encrypted using HTTPS/TLS.
• 🏗️
  Secure infrastructure — Our database and backend are hosted on Supabase, which provides enterprise-grade security and compliance with industry standards.
• 👁️
  Minimal access — We request only the minimum Google permissions required to operate the service. We do not request access to your contacts, photos, documents or any other Google services.

Steady integrates with the following third party services to operate:

• G
  Google APIs — Gmail, Google Calendar and Google Drive. Your use of these services is governed by Google's Privacy Policy at policies.google.com/privacy
• 🗄️
  Supabase — Our database and authentication provider. Data is stored on Supabase infrastructure. Supabase Privacy Policy available at supabase.com/privacy
• 🤖
  Anthropic Claude API — We use Anthropic's AI to analyse email and SMS content for appointment detection. Content sent to Claude is subject to Anthropic's usage policies. We do not send identifying personal information to this service beyond the content required for analysis.
• 🌐
  Netlify — Our web application is hosted on Netlify. Netlify Privacy Policy available at netlify.com/privacy

We do not sell or share your data with any third parties for their own commercial purposes.

Under the Australian Privacy Act 1988 and general privacy principles, you have the following rights:

• 👀
  Right to access — You can view all data Steady holds about you at any time through the app's Profile and Settings sections.
• ✏️
  Right to correction — You can update or correct your information through the app settings.
• 🗑️
  Right to deletion — You can delete all your data at any time by tapping "Clear all my data" in the app's Profile settings. This permanently removes all your appointments, settings and learning memory from our systems.
• 🔌
  Right to disconnect — You can disconnect your Google account at any time through the Connected Sources section in Profile settings, or directly through your Google Account at myaccount.google.com/permissions
• 📦
  Right to portability — You can request a copy of your data by contacting us at the email address below.

We retain your data for as long as you maintain an active Steady account. Specifically:

• 📅
  Appointment data — Retained for 12 months from the appointment date, then automatically deleted.
• 🧠
  Learning memory — Retained for the lifetime of your account. Deleted immediately when you use the "Clear all my data" function.
• 🔑
  Authentication tokens — Retained while your account is active. Immediately deleted when you disconnect your Google account or delete your account.
• 👤
  Account information — Retained until you delete your account.

When you delete your account or use "Clear all my data", all your data is permanently and immediately removed from our systems. This action cannot be undone.

Steady is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete that information.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app and update the "Last updated" date at the top of this page. Your continued use of Steady after changes are posted constitutes your acceptance of the updated policy.

We will never make changes that reduce your privacy rights without providing clear notice and the opportunity to delete your account before the changes take effect.