Everything Steadyway is for is health information: your weight over time, the medication you inject and when, and how you felt afterwards. This page describes exactly how that data is stored, what leaves your phone, and what we will never do with it. It sits alongside the Privacy Policy and adds detail rather than replacing it.
Your phone holds the original
Steadyway is a local-first app. Everything you log is written to a database on your device and read back from there, which is why the app opens instantly, works on a plane, and never waits on a network request to show you your own week. The server copy exists so that a lost, stolen or replaced phone does not take your history with it.
Practically, that means: if our servers were unavailable tomorrow, the app would keep working. If your phone were lost tomorrow, signing in on a new one restores your history.
The backup copy is stored in the European Union, on infrastructure run by the host named in Sub-processors. It is not reachable from the public internet, and no third party is given a copy of it.
What syncs, and when
Nothing syncs until you turn backup on. Steadyway works with no account, and until you connect one it uploads nothing at all — the whole of this section describes something that has not started yet. Once it is on, the app pushes changes as you make them and pulls when you sign in. There is no continuous streaming and nothing is uploaded in the background for any purpose other than the backup.
The following are synced, tied to your account identifier:
- Weigh-ins — value, when it was taken, whether it came from you or from Apple Health, and any note.
- Doses — amount in mg, injection site, when it was scheduled and when it was taken, whether it was on time or late, the pen used, and any note.
- Daily entries — water, protein, waist measurement, energy rating and steps.
- Side effects — the symptom, its severity, when it was logged and any note.
- Pens — dose, status, when opened, expiry.
- Reminders — which are on, and their times and offsets.
- Your profile — display name, treatment start date, start and goal weight, height, current dose, shot day and units.
Deletions sync as deletions. When you remove a weigh-in, the removal is recorded and applied to the server copy. A deleted entry is not quietly kept.
Apple Health
Connecting Apple Health is optional and off until you turn it on. When it is on:
- We read body mass and step count, so you do not have to type numbers your phone already has.
- We write back weigh-ins you enter in Steadyway, so your other apps stay in step.
- Apple Health is treated as the source of truth for steps and weigh-ins; Steadyway is the source of truth for everything to do with the medication.
Nothing else is read from Health, and health data obtained through HealthKit is never used for advertising, never sold, and never shared with a third party for their own purposes — as Apple's rules require and as we would do anyway. You can revoke access at any time in the iOS Health app, and Steadyway keeps working with the data you have already logged.
Insights
The weekly read is computed on your device, from data already on it, using ordinary arithmetic — a rolling average, an adherence percentage, symptoms grouped by day-since-dose. No part of it involves sending your logs anywhere for analysis.
If we later use a language model to make that writing more natural, it will run as a scheduled job on our servers and will be given derived aggregates only — a weekly change in kilograms, an adherence percentage, a count of symptoms — never raw, timestamped entries. We will say so in the app before turning anything like that on.
What we will never do
- Sell your health data, or share it with data brokers.
- Use it for advertising, or let anyone else do so.
- Pass it to an insurer, an employer, or a marketing partner.
- Send it to a clinician on your behalf. The clinician summary is a PDF you generate and share yourself.
Our own engineering tools
Development tooling that records request contents is configured to exclude the sync endpoints entirely, so your logged entries never accumulate in a debugging table. That is a deliberate configuration, and it is enforced in code rather than left to habit.
Deleting it
Deleting your account from inside the app removes your identity at our authentication provider and erases the server copy of everything above. It is a hard deletion, not a flag, and it cannot be undone. Data still on your phone goes when you delete the app.
Deletion is reachable whether or not you are subscribed, and taking your own copy out first does not depend on a subscription either — the spreadsheet export is free. If you would rather ask us to do it, or want a copy of what we hold before you go, use the contact form and choose Privacy or my data.