Privacy Policy

1. Who we are and what this Policy covers

STEADY is operated by Inova Platforms, Inc. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, move through the funnel, submit your phone number or email address, text or iMessage STEADY, purchase a subscription, connect a device, send photos or weigh-ins, receive coaching, contact support, or otherwise use STEADY.

This Policy applies to STEADY websites, checkout pages, text-message and iMessage workflows, email, customer support, connected-device workflows, analytics, advertising measurement, and related services. Your use of STEADY is also governed by our Terms of Service.

2. Information you provide

We collect information you choose to provide, including name, email address, mobile phone number, profile answers, goals, age-related or demographic context when you provide it, height, weight, target weight, sex, cadence preferences, coaching tone, obstacles, lifestyle context, account credentials or authentication details, support requests, cancellation requests, and feedback.

If you text us, email us, upload photos, submit scale photos, send progress photos, send body-composition photos, send food photos, provide weigh-ins, connect a scale, or respond to coaching prompts, we collect the content of those communications and the related timestamps, delivery status, attachments, and metadata needed to operate the service.

We may collect consent records, including the legal language shown to you, checkbox status, text-message acceptance such as I AGREE, consent version, timestamp, IP address, user agent, source screen, phone number, email address, and related audit metadata.

Payment information is processed by Stripe or another payment provider. We do not store full card numbers. We may receive checkout status, customer identifiers, subscription status, price, plan, billing email, payment method summaries, invoice history, dispute information, and related payment metadata.

3. Wellness and sensitive information

STEADY may collect information that can be sensitive, including weight, goals, custom goals, streaks, body-composition context, progress photos, scale photos, food photos, connected-scale readings, message content about food, activity, steps, sleep, caffeine, alcohol, hydration, dental habits, symptoms, pain, illness, triggers, mood, stress, emotional regulation, relationships, chores, spending, work, social life, media use, medications, supplements, nicotine, vaping, substance use, mindfulness, journaling, menstrual cycle, fertility, pregnancy, hormone context, preventive care, vitals, wearable signals, learning, caregiving, GLP-1 use, health concerns, habits, cravings, accountability needs, and other wellness information you choose to send.

Some of this information may be considered consumer health data, sensitive personal information, or similarly protected information under state privacy laws. We use this information to provide and personalize the service, maintain continuity, support your account, troubleshoot, improve safety, prevent abuse, maintain records, and comply with law. We do not sell your weight data, photos, private coaching messages, or sensitive wellness content. See our Consumer Health Data Privacy Notice at /consumer-health-privacy for more detail.

STEADY is a general wellness service, not a medical provider. Unless we have a separate written agreement expressly saying otherwise, STEADY is not intended to receive protected health information from a HIPAA-covered provider or to operate as a HIPAA business associate. Do not use STEADY to submit emergency medical information or information you are not authorized to share.

4. Information collected automatically

When you use our website or checkout flow, we may collect device and browser information, IP address, approximate location derived from IP address, user agent, pages viewed, timestamps, referral URLs, landing pages, campaign parameters, UTM parameters, cookies or similar identifiers, Meta click identifiers, checkout event identifiers, session identifiers, error logs, and analytics events.

We use this information to operate the site, measure funnel performance, detect abuse, debug errors, improve conversion measurement, understand advertising performance, and protect the service.

5. Information from third parties and integrations

We may receive information from service providers and integrations, including payment processors, messaging providers, email providers, hosting providers, analytics providers, advertising measurement providers, connected-scale platforms, authentication providers, fraud-prevention tools, and customer-support systems.

Examples include Stripe checkout and subscription metadata, Quo, Linq, OpenPhone, or similar message delivery data, Firebase account identifiers, Firebase Authentication and Firestore records, Vercel hosting logs, Meta attribution or conversion-measurement data, connected-scale readings where enabled, AI-support metadata, and support conversation history.

6. How we use information

• Provide, personalize, and operate STEADY text coaching, accountability, trend tracking, reminders, onboarding, and support.
• Create or update your account, connect your email and phone number, maintain your UID, preserve your funnel answers, and match future texts or messages to the correct account.
• Send service, support, account, billing, coaching, reminder, offer, and promotional communications where permitted.
• Process payments, manage subscriptions, handle cancellations, respond to chargebacks, detect fraud, and keep billing records.
• Analyze weight, food, photo, behavior, purchase, habit, custom goal, streak, symptom, medication, mood, hydration, substance, preventive-care, vital, and wellness trends for accountability and product functionality, without treating that analysis as medical diagnosis, medical care, dietetic care, financial advice, relationship therapy, or emergency support.
• Use AI-assisted and automated tools to draft, route, summarize, prioritize, personalize, or respond to messages, subject to human review where appropriate.
• Measure ad performance, troubleshoot funnel dropoff, attribute conversions, and improve product and marketing effectiveness.
• Protect the service, enforce our Terms, prevent misuse, comply with law, maintain consent records and legal audit trails, and respond to legal, safety, or regulatory requests.

7. SMS, MMS, iMessage, and mobile consent data

If you provide a mobile number, opt in, or text STEADY, we collect and maintain records of your phone number, consent language shown to you, consent status, consent timestamp, opt-in source, message content, STOP/HELP and other opt-out or support requests, delivery status, provider identifiers, and related compliance metadata.

We use mobile messaging data to deliver the service, document consent, process opt-outs, provide support, send reminders and offers where allowed, and comply with telecom, carrier, platform, and legal requirements.

We do not sell mobile opt-in data. We do not share mobile opt-in data, SMS consent records, or text-message consent status with third parties or affiliates for their own marketing or promotional purposes. We may share this information with service providers, processors, carriers, messaging platforms, fraud-prevention vendors, and legal/compliance advisors only as needed to provide messaging, operate STEADY, document consent, prevent abuse, or comply with law.

8. Cookies, analytics, and advertising measurement

We may use cookies, pixels, local storage, server-side events, and similar technologies to operate the site, remember funnel progress, prevent abuse, measure performance, and understand advertising effectiveness.

We may send limited event and attribution data to advertising or analytics providers such as Meta to understand whether ads lead to page views, funnel progress, checkout sessions, or purchases. Where practical, we limit advertising measurement to contact hashes, event metadata, attribution parameters, and purchase or funnel events rather than private coaching content, weight entries, progress photos, or message bodies.

Your browser, device, and some third-party platforms may provide controls to limit cookies, tracking, or ad personalization. Those controls may affect attribution, checkout, or site functionality.

9. How information is disclosed

We disclose information to service providers and processors that help us operate STEADY, including cloud hosting, databases, authentication, messaging, SMS/iMessage delivery, email, payment processing, checkout, analytics, advertising measurement, fraud prevention, AI support, customer support, connected devices, data storage, logging, security, legal, tax, accounting, and compliance support.

We may disclose information if required by law, subpoena, court order, government request, payment-network rule, tax or accounting obligation, legal claim, safety concern, fraud investigation, chargeback, or to protect the rights, safety, security, or property of STEADY, Inova Platforms, Inc., users, or others.

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar business transaction, subject to appropriate safeguards where required.

We may disclose de-identified, aggregated, or statistical information that does not reasonably identify you.

10. What we do not do

• We do not sell your private coaching messages, weight entries, progress photos, scale photos, or sensitive wellness content.
• We do not share your mobile opt-in data or SMS consent records with third parties or affiliates for their own marketing or promotional purposes.
• We do not use STEADY as an emergency medical service.
• We do not knowingly collect information from children under 18.
• We do not store full credit card numbers on STEADY servers.

11. AI-assisted processing

STEADY may use AI-assisted tools and automated systems to help generate responses, summarize conversation history, route support, personalize accountability messages, analyze food or progress photos, estimate body-composition context, detect abuse, and improve the service. Information processed by AI-assisted tools may include profile answers, message history, goals, weight entries, photos or photo-derived context, support requests, and account metadata, depending on the feature.

Coach names or personas, including names such as Blair, may identify an AI-assisted and human-operated STEADY coaching workflow rather than a specific licensed clinician or personal phone number. Human operators, contractors, or support staff may review messages, photos, and account context to operate the service.

We use AI-assisted processing to provide the service and improve operations, not to provide medical diagnosis, dietetic care, emergency care, or guaranteed results. Do not send information you do not want processed by AI-assisted systems as part of service operation.

12. Data retention

We retain information for as long as reasonably needed to provide STEADY, maintain your account, support subscriptions, preserve consent records, comply with law, resolve disputes, prevent fraud, enforce agreements, improve the service, maintain accounting and tax records, and document legal or carrier compliance.

Retention periods may differ by data type. For example, billing records, consent logs, opt-out records, chargeback evidence, security logs, and legal records may be retained longer than active coaching content. Photos, scale screenshots, food images, and photo-derived context may be retained while your account is active or as needed for trend comparison, support, safety, disputes, legal compliance, or deletion-request processing.

We may de-identify or aggregate information instead of deleting it where appropriate. Deletion or withdrawal requests may limit or disable coaching, history, trend comparison, subscription support, dispute defense, compliance documentation, or other service features.

13. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, provider security features, authentication, logging, role-based operational access, vendor safeguards, and reasonable limitations on access. The appropriate level of protection depends on the nature of the information and the size and state of the service.

No method of transmission or storage is perfectly secure. SMS, MMS, iMessage, email, cloud services, payment processors, connected devices, analytics systems, and third-party integrations may be affected by risks outside our control. You are responsible for protecting access to your phone, email, devices, and accounts.

14. Breach and incident response

If we determine that a security incident requires notice under applicable law, including applicable health-data breach notification requirements, we will provide notice as required. We may also notify service providers, payment processors, carriers, regulators, law enforcement, or affected users when appropriate or required.

15. Your choices and controls

• Text STOP, CANCEL, UNSUBSCRIBE, END, or QUIT where supported to opt out of recurring or promotional texts. Text HELP for help.
• Use email unsubscribe links where available to opt out of marketing emails.
• Contact contact@inovaplatforms.com to request access, correction, deletion, export, opt-out, or account support.
• Review deletion instructions at /data-deletion.
• Use browser, device, and platform settings to limit cookies, notifications, tracking, or ad personalization where available.

16. State privacy rights

Depending on where you live, you may have privacy rights under state law, such as the right to request access, deletion, correction, portability, restriction, opt-out of certain processing, opt-out of certain targeted advertising or sale/share practices, withdrawal of consent for certain consumer health data processing, and appeal of a decision. To exercise these rights, contact contact@inovaplatforms.com with the email address or phone number associated with STEADY.

We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising legally available privacy rights, but some requests may limit our ability to provide STEADY.

17. California notice

California residents may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Categories of personal information we may collect include identifiers, commercial information, internet or network activity, geolocation derived from IP address, audio/visual or photo content you provide, sensitive personal information, inferences, and health or wellness-related information you choose to provide.

We use and disclose those categories for the business and commercial purposes described in this Policy. We do not sell sensitive wellness information. We do not use sensitive personal information to infer characteristics for purposes outside providing, securing, improving, documenting, or legally operating STEADY. If any advertising or analytics activity is considered a sale or share under applicable law, you may contact us at contact@inovaplatforms.com to request opt-out.

18. International users

STEADY is operated from the United States. If you access STEADY from outside the United States, you understand that information may be processed in the United States and other locations where our providers operate. Laws in those locations may differ from the laws where you live.

19. Children

STEADY is intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided information to STEADY, contact us at contact@inovaplatforms.com so we can review and delete it where appropriate.

20. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new updated date. If changes are material, we may provide additional notice where practical. Continuing to use STEADY after an updated Policy is posted means the updated Policy applies going forward.

21. Contact

For privacy questions, data requests, deletion requests, SMS consent questions, or support, email contact@inovaplatforms.com. Include the email address or phone number associated with your STEADY account so we can locate your records.