Privacy Policy
Last updated: January 17, 2026
Our Commitment to Your Privacy
Steady On is a mental health support platform. We understand that you share deeply personal information with us. We treat your data with the utmost care and confidentiality.
1. About Steady On
Steady On ("we", "our", or "us") is an AI-powered mental health support platform. We provide therapeutic conversations through AI technology to help you work through life's challenges.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information, including sensitive therapeutic data, when you use our service.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- First name
- Date of birth (to calculate your age for context)
- Authentication data via our identity provider (Clerk)
Therapeutic Session Data
During your therapy sessions, we collect and store:
- Your messages and questions
- AI-generated responses
- Session transcripts
- Files you upload (documents, images)
- Voice recordings (if you use voice input)
Context and Memories
To provide continuity across sessions and make you feel understood, we build a "context" about you that may include:
- Your first name and age
- Relationships you've mentioned (partners, family, friends) including their names
- Life circumstances (work, living situation)
- Emotional patterns and insights from your sessions
- Goals and commitments you've made
- Topics and frameworks that resonate with you
Your Control: You can view, export, or delete all of this context data at any time through your Privacy Settings. Deleting your context gives you a fresh start - the AI will treat you as a new user.
Usage Information
We automatically collect:
- Session dates and duration
- Feature usage (voice, text, file uploads)
- Credit usage for billing purposes
- Error logs for debugging
Payment Information
Payment processing is handled by Stripe. We do not store your full credit card details. We receive only confirmation of successful payments and subscription status.
3. How We Use Your Information
To Provide Therapeutic Support
- Process your messages through AI to generate supportive responses
- Build and maintain context so the AI remembers you across sessions
- Transcribe voice messages for text-based processing
- Generate voice responses when requested
To Improve Our Service
- Debug issues and monitor performance
- Analyze aggregate usage patterns (not individual conversations)
We do NOT use your conversations, context, or personal information to train AI models.
4. AI Provider Data Sharing
Important: To provide AI-powered therapeutic support, certain data is sent to third-party AI providers. Here is exactly what each provider receives:
Anthropic (Claude) - Primary AI Provider
Receives:
- Your first name and age (calculated from birth year)
- Your messages in the current session
- Your therapeutic context (relationship names, life circumstances, patterns)
- Session transcripts for context updates and memory extraction
- Any files you upload (images, documents)
OpenAI (GPT) - Alternative AI Provider
If selected, receives the same data as above.
xAI (Grok) - Alternative AI Provider
If selected, receives the same data as above.
Deepgram - Voice Transcription
If you use voice input, receives:
- Audio recordings of your voice messages only
- No personal information or context is sent
ElevenLabs - Voice Responses
If you use voice responses, receives:
- The AI's response text only (to convert to speech)
- No personal information about you is sent
AI Training Data Assurance
Your conversations are NOT used to train AI models. All our AI providers have explicit policies excluding API data from model training:
- Anthropic: API data excluded from training under Commercial Terms
- OpenAI: API data not used for training since March 2023
- xAI: API business data not used for training
- Deepgram: Zero-retention defaults for real-time transcription
- ElevenLabs: Training opt-out enabled for our account
Provider Data Retention
AI providers typically retain API data for up to 30 days for abuse monitoring and service improvement, then delete it. This is standard practice for AI services and is separate from model training. Your data stored in Steady On is retained until you delete it.
5. Other Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Email, name, login activity |
| Stripe | Payments | Billing info (processed by Stripe directly) |
| Supabase | Database & Storage | All application data (encrypted at rest) |
| Vercel | Hosting | Server logs, performance metrics |
| Inngest | Background Processing | Job metadata, session IDs (not content) |
6. Data Security
Your Data is Protected at Every Layer
We built Steady On with security as a foundation, not an afterthought. Your conversations and personal information are protected by multiple layers of security, and our architecture makes it technically impossible for one user to access another's data.
We implement robust security measures to protect your sensitive data:
- Encryption in transit: All data transmitted over TLS/HTTPS
- Encryption at rest: Database and file storage encrypted using AES-256
- Row-level security: Every database table has policies that cryptographically enforce that you can only access your own data - this is enforced at the database level, not just in our code
- User isolation: Your conversations, context, and files are completely isolated from other users - the system architecture makes cross-user data access technically impossible
- Authentication: Secure login through industry-leading provider (Clerk) with optional two-factor authentication
- No shared context: Each user's therapeutic context is completely separate - the AI never mixes information between users
- Access controls: Strict internal access policies - our team cannot read your conversations
7. Data Retention
- Session data: Retained until you delete it or your account
- Context/memories: Retained until you clear it or delete your account
- Account data: Retained while your account is active
- Payment records: Retained as required by law (typically 7 years)
- AI provider retention: Up to 30 days by providers, then deleted
8. Your Rights and Controls
You have full control over your data:
Export Your Data
Download a complete copy of all your data including conversations, context, and account information in JSON format.
Clear Your Context
Delete all the context and memories the AI has built about you. Your conversation history remains but won't be used for future sessions. You'll start fresh.
Delete All Conversations
Permanently delete all your session history and context. Your account and credits remain.
Delete Your Account
Permanently delete your entire account and all associated data. This cannot be undone.
Access these controls in your Privacy Settings.
GDPR & CCPA Rights
Under applicable privacy laws, you also have the right to:
- Access - Request details about what data we hold
- Rectification - Correct inaccurate data
- Portability - Receive your data in a standard format
- Restriction - Limit how we process your data
- Objection - Object to certain processing activities
To exercise these rights, use the self-service options in Privacy Settings or contact us at privacy@steadyon.ai.
9. Cookies & Analytics
Essential Cookies (Always Active)
We use minimal cookies required for the service to function:
- Authentication cookies - Required to keep you logged in (Clerk)
- Session cookies - Required for security and database access
- Preference cookies - Remember your settings (e.g., sidebar state)
Analytics (Optional, Requires Consent)
With your consent, we use Vercel Analytics to understand how the app is used. This helps us improve the service.
What analytics collects:
- Pages you visit within the app
- Time spent on each page
- Referrer information (how you found us)
- General device info (browser type, screen size, country)
What analytics NEVER collects:
- Your conversations or messages
- Personal information (name, email, etc.)
- Anything you share in therapy sessions
- Your therapeutic context or memories
You can change your analytics preference anytime in Privacy Settings.
We do not use advertising cookies, tracking pixels, or sell data to advertisers.
10. International Data Transfers
Your data may be processed in countries outside your residence, including the United States, where our AI providers are located. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required by GDPR.
11. Age Requirements
Steady On is intended for adults. You must be at least 18 years old to use this service. We do not knowingly collect personal information from anyone under 18.
12. Mental Health Disclaimer
Important: Steady On provides AI-powered support and is not a substitute for professional mental health treatment. If you are experiencing a mental health crisis, please contact a mental health professional or crisis helpline immediately. In emergencies, call your local emergency services.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email and/or through the app. Your continued use after changes constitutes acceptance.
14. Contact Us
For privacy questions, data requests, or concerns, contact us:
- Email: privacy@steadyon.ai
- Privacy Settings: Manage your data
By using Steady On, you acknowledge that you have read and understood this Privacy Policy. Your trust means everything to us - we are committed to protecting your privacy and the sensitive information you share.