Privacy Policy

1. Introduction

Welcome to SteadiDay™ ("we," "our," or "us"), operated by SCM Solutions LLC. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we handle your information when you use our mobile application and visit our website.

By using SteadiDay™, you agree to the practices described in this policy.

2. Information We Collect

2.1 Health Data (On-Device Only)

With your explicit permission, SteadiDay™ reads health-related information through Apple HealthKit, including:

• Daily step count and activity data
• Exercise minutes and workout information
• Sleep duration and quality metrics
• Heart rate and other vital signs (if shared)
• Nutrition and dietary information (if shared)

Important: All health data is stored locally on your device and protected by iOS encryption. We never transmit health data to our servers or any third parties.

2.2 User-Created Content (On-Device Only)

Information you enter into the app is stored on your device:

• Medication schedules and reminders
• Task lists and daily routines
• Emergency contacts and trusted persons
• Food and water intake logs
• Custom notes and reminders
• Medical information and doctor details

2.3 Photos (Temporary Processing Only)

When you use the camera to scan an insurance card or prescription label:

• The photo is processed on your device to extract text
• Extracted text is used to auto-fill form fields
• The photo is immediately deleted — it is never saved to your device storage or transmitted anywhere

2.4 Location Data

If you enable location-based features (such as weather or emergency SOS location sharing), your location is processed on your device. Location data is only shared in two cases: (1) when you explicitly trigger the Emergency SOS feature, and (2) if fall detection activates and you do not respond within the countdown period. In both cases, your location is shared only with your designated trusted contacts via SMS.

2.5 Anonymous App Analytics

SteadiDay™ collects minimal, anonymous usage data to help us understand how the app is used and to measure the effectiveness of our advertising campaigns. This includes:

• A randomly generated identifier (not linked to your identity, Apple ID, or device)
• App open events (to measure installs and session frequency)
• General session timestamps

This data is sent to Google Analytics via the Measurement Protocol. It does not include any of your health data, medication information, task details, personal contacts, or any content you create within the app. See Section 8 for full details.

2.6 What We Do NOT Collect or Display

SteadiDay™ does not collect, store, or transmit:

• Email addresses or account credentials (no account is required)
• Your health data, medications, tasks, or any personal content you enter
• Apple advertising identifiers (IDFA) or device fingerprints
• Your name, age, or any personally identifiable information from the app
• Crash reports sent to our servers from the app

The app also does not display third-party advertisements. SteadiDay™ contains no banner ads, video ads, sponsored content, or in-app advertising of any kind.

3. How We Use Your Information

Your personal data stays on your device and is used solely to power the app's features locally:

• Medication Reminders: Your medication schedules drive local notifications on your device
• Health Dashboard: Apple Health data is read and displayed within the app — it never leaves your phone
• Task Management: Your tasks and calendar data are processed on-device to show your daily schedule
• Emergency SOS: Your trusted contacts are stored locally and only contacted when you trigger SOS
• Notifications: All reminders are generated locally on your device — no server push notifications

Anonymous analytics data (app opens and sessions) is used to:

• Understand general app usage patterns (e.g., how often the app is opened)
• Measure the effectiveness of our advertising campaigns
• Help us prioritize improvements to the app

4. Data Storage and Security

4.1 On-Device Storage

All your personal data — including health information, medications, tasks, and contacts — is stored locally on your iPhone, protected by iOS device encryption. We do not operate servers that store your personal or health information.

4.2 App Lock Security

SteadiDay™ includes built-in security features:

• PIN code lock with SHA-256 hashing (stored only on your device)
• Optional Face ID / Touch ID authentication via iOS native security frameworks
• Automatic lock after inactivity and when the app goes to the background
• Generic notification content — no medication names or health details shown on your lock screen

4.3 Data Backup

Your SteadiDay™ data may be included in your standard iPhone backup (via iCloud or iTunes/Finder). This is controlled by your iOS backup settings, not by SteadiDay™. We recommend keeping regular backups to protect against data loss.

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties. Period.

5.2 Third-Party Services

SteadiDay™ sends anonymous, non-personal analytics data (app open events and session starts) to Google Analytics for the purpose of measuring app usage and advertising effectiveness. This data cannot be used to identify you. No health data, medication information, personal content, or identifiable information is ever shared.

5.3 Emergency SOS, Fall Detection Alerts & SMS Messaging

When you activate Emergency SOS or when fall detection activates and you do not respond within the countdown period, the app automatically sends SMS text messages to your designated trusted contacts via Twilio, a third-party messaging relay service. These messages include your display name, GPS coordinates (as a Google Maps link), and an alert that you may need help. The relay transmits only the minimum information needed to deliver the text — your display name, trusted contact phone numbers, and GPS coordinates. No data is stored on the relay server after the message is sent. Message and data rates may apply. See Section 10 for full details about the SteadiDay™ SMS program, including consent, frequency, and opt-out information.

5.4 Legal Requirements

Since we don't have access to your personal data (it's on your device), we cannot provide it in response to legal requests. If required by law, we would disclose only business records we maintain (such as contact form submissions from our website).

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, any data we do hold (limited to website contact form submissions and anonymous analytics) may be transferred. We will notify you of any such change.

6. Your Privacy Rights

Because your personal data is stored on your device, you have direct control:

• Access: All your data is visible to you within the app at any time
• Deletion: Delete any or all data from within the app, or by uninstalling the app
• Export: Export your data from within the app settings
• Revoke Permissions: Withdraw HealthKit access anytime via iOS Settings → Privacy & Security → Health
• Location: Disable location access anytime via iOS Settings → Privacy & Security → Location Services
• SMS: Withdraw consent for emergency SMS messaging by removing trusted contacts or disabling fall detection in the app. See Section 10 for full opt-out details.

For any privacy questions or concerns, please contact us using the information below.

7. Apple HealthKit Data

We comply fully with Apple's HealthKit guidelines:

• Health data is NEVER shared with third parties for advertising or marketing
• Health data is NEVER uploaded to external servers
• Health data is NEVER included in analytics data sent to Google or any other service
• Health data is used only to display wellness information within the app
• You can revoke HealthKit permissions at any time through iOS Settings
• We do not use health data for any purpose other than providing app functionality

8. App Analytics

SteadiDay™ uses Google Analytics (via the Measurement Protocol) to collect minimal, anonymous usage data. This helps us understand how often the app is used and whether our advertising is effective at reaching people who benefit from the app.

8.1 What App Analytics Collects

• A randomly generated anonymous identifier (a UUID created on your device — not your Apple ID, name, or any personal identifier)
• A "first open" event when the app is opened for the first time after installation
• A "session start" event each time the app is opened
• General timestamp of these events

8.2 What App Analytics Does NOT Collect

• Your health data, medications, tasks, contacts, or any content you create in the app
• Your name, email, phone number, or any personally identifiable information
• Your Apple ID or Apple advertising identifier (IDFA)
• Your precise location
• Screen views, button taps, or detailed usage behavior within the app

8.3 SKAdNetwork

SteadiDay™ supports Apple's SKAdNetwork framework, which allows advertising platforms like Google Ads to measure app install attribution in a privacy-safe way. SKAdNetwork is managed entirely by Apple and does not share any personal data with advertisers. It provides only aggregated, anonymous install attribution data.

8.4 Why We Collect This Data

As a small, Virginia-based company, understanding whether people are finding and using our app helps us continue to improve it and reach more adults who could benefit from it. This anonymous data helps us make informed decisions about app improvements and advertising effectiveness — without ever compromising your privacy.

9. Website Analytics

Our website (steadiday.com) uses Google Analytics and Google Ads to understand how visitors find and use our website. This is separate from app analytics.

Website analytics may collect:

• Pages visited and time spent on our website
• How you arrived at our website (search engine, ad click, direct)
• General geographic region (country/city level, not precise location)
• Browser type and device category

This data is anonymized and aggregated. It helps us understand whether our website content is reaching the right audience. It does not include any data from the SteadiDay™ app. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10. SMS Text Messaging

10.1 SMS Program Description

SteadiDay™ ("the Program") sends emergency SMS text messages to user-designated trusted contacts when the app's fall detection feature activates and the user does not respond within the countdown period, or when the user manually triggers the Emergency SOS feature. Messages are sent on behalf of SCM Solutions LLC via Twilio, a third-party messaging service.

10.2 Consent and Opt-In

By adding a trusted contact and enabling the fall detection or Emergency SOS features within the SteadiDay™ app, you expressly consent to the app sending SMS text messages to your designated trusted contacts on your behalf in emergency situations. This consent is collected in-app at the time you configure your trusted contacts. You may withdraw consent at any time by removing your trusted contacts from the app or by disabling the fall detection feature in app settings.

10.3 Message Frequency

Message frequency varies. SMS messages are sent only during emergency events (fall detection alerts or manual SOS activation). Under normal use, no messages are sent. In an emergency event, each trusted contact will receive one SMS message per incident.

10.4 Message Content

Emergency SMS messages include: the SteadiDay™ program name, the user's display name, a notification that the user may have had a fall or triggered an emergency alert, and the user's GPS location as a Google Maps link so the trusted contact can locate them.

10.5 Message and Data Rates

Message and data rates may apply. SteadiDay™ does not charge for SMS messages, but your mobile carrier's standard messaging rates apply to messages sent from or received on your device.

10.6 Opt-Out

To stop emergency SMS messages from being sent, remove your trusted contacts from the app or disable the fall detection feature. Trusted contacts who receive emergency alerts can reply STOP to the sending number to opt out of future messages from SteadiDay™. For help, trusted contacts can reply HELP or contact us at support@steadiday.com.

10.7 SMS Data Privacy

Mobile phone numbers and opt-in data collected for the SteadiDay™ SMS program will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Phone numbers are stored locally on your device and are transmitted to our SMS relay service (Twilio) only at the moment an emergency message is sent. No phone numbers or opt-in data are retained on any server after message delivery.

11. Children's Privacy

SteadiDay™ is designed for adults 50 and older. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. Since we do not collect personal data from the app, most CCPA provisions are satisfied by default. For website-related data (contact form submissions and analytics), you have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising your rights

13. GDPR Compliance (European Users)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation. Since your app data is stored on your device, you maintain direct control. For any data we process through our website or through anonymous app analytics, you have the right to:

• Access, rectification, and erasure of your data
• Restriction of processing and data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. Your continued use of the app after changes constitutes acceptance of the updated policy.