SteadfastPrivacy
Steadfast privacy policy
Steadfast is made by SARV Labs LLC. This policy explains what the app collects, why, and what you can do about it. In short: we collect what the app needs to track your challenges, we never sell it, and you can export or delete it at any time.
When you create an account, you agree to our Terms of Use and this policy. You’re asked to agree before you give your email or sign in with Apple or Google.
What we collect
Signing in. You can sign in with your email and a password, with Sign in with Apple, or with Google sign-in (on iPhone and Android). With email, we send a 6-digit code to confirm your address, and again if you need to reset your password. We keep your name and email address. With Apple, you may use Apple’s private relay address instead of your own email.
Your challenges. To run the app for you, Steadfast keeps the challenges you join, your plan and reminder times, the evening review time you choose, the tasks you log and when, skips, slips and which part of a rule slipped, your evening look-back answers (including the optional “How was today?” mood and note), your weekly check-in answers (including anything you write under “Something else”), your gratitude lines (“three good things”), the books and pages you read, the water you log, and your time zone.
Voice. If you speak a workout description instead of typing it, your speech is turned into text on your phone. No audio is sent to us or stored.
Photos. Progress photos, meal photos and your profile photo that you take in the app. Progress photos are private: only you see them. Share cards you choose to make never include a progress (body) photo.
Finding a challenge. If you answer the “Help me choose” questions, your answers are saved without your name or account, only so we can see which challenges fit people. They can’t be traced back to you.
Feedback. When you send feedback in the app, we keep your message, any screenshot you add, your app version and your phone model, so we can answer you and fix things. Each message and its screenshot are delivered to [email protected] by our email service provider, Resend. Your feedback and its screenshots are deleted when you delete your account.
Apple Health and Health Connect
Only if you turn it on, Steadfast reads steps, workouts, sleep and mindful minutes from Apple Health (iPhone) or Health Connect (Android). It uses them only to offer them as answers to the tasks you chose, and nothing is used without your tap. Steadfast only reads; it never writes to Health.
When you tap to use a Health entry for one of your tasks, Steadfast saves only what that task needs: the activity type, how long or how much (for example minutes or steps), when it happened, and an identifier so the same activity isn’t counted twice. Everything else stays in Apple Health or Health Connect on your phone.
Health data is never used for advertising or marketing, never sold, and kept only in your own account.
Location
Location is optional. Steadfast uses it only while the app is open, to show your local sky and weather, and never stores it.
On iPhone, Apple’s WeatherKit gets your location as part of the weather request. On Android, your location is rounded to about 1 km on your phone before it is sent to our weather service, which asks Apple’s WeatherKit for the weather and keeps the location in memory for no more than 10 minutes. Also on Android, to show your town’s name, the phone’s built-in place lookup (provided by Google) may receive your approximate location.
How we use it
Only to run Steadfast for you: keeping your days, showing your progress, reminding you when you ask us to, and answering you when you contact support. We do not use your data for advertising, and Health data is never used for marketing or shared with data brokers.
Reminders are scheduled on your phone. We don’t send push notifications from a server.
Where it is kept
Your account and challenge data are stored with Supabase, our database provider, on Amazon Web Services servers in Northern California, United States. Access is limited to your own account, and photos are kept in private storage.
Offline. If you log something without a connection, it is kept on your phone until it syncs to your account.
Your choices
Export your data. In You → Settings → Privacy → Export my data, Steadfast makes one .zip file on your phone with spreadsheets of everything you’ve logged, a full copy of your data, and your photos.
Turn things off. You can turn off Health, location and each kind of reminder at any time, in the app or in your phone’s settings.
Deleting your account
You can delete your account at any time in the app: You → Settings → Account → Delete account. Your account, challenges, logs, notes, photos, feedback and screenshots are removed from our live database right away, and from our backups within 30 days. If any part of the deletion fails, nothing is removed and the app tells you to try again.
Can’t sign in? See Delete your Steadfast account to ask us to delete it by email.
Children
Steadfast is not directed to children under 13, and we do not knowingly collect their information.
Changes and contact
If this policy changes, we will update the date above and, for significant changes, tell you in the app. Questions: [email protected].