Privacy Policy

Orivent Studios ("we", "our", "us") operates the SteadyOne mobile application. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Account Information (optional)

If you sign in with Google, we receive your name and email address from Google Sign-In. This is used solely for account identification and cross-device sync. You can use SteadyOne as a guest without providing any account information.

Goal & Check-in Data

Your goals, daily goal check-ins, and alignment scores are stored locally on your device and synced to Firebase Firestore when you are signed in. This data is used to power the app's core features and AI coaching.

Wellbeing Data

Sleep hours, sleep quality, morning mood, energy level, and stress ratings are stored locally and synced to Firestore. This data is never passed to any AI system — ever. It is used only for your personal Insights charts.

Journal Entries

Your daily journal entries are stored locally and synced to Firestore. Journal entries are never shared with any third party and are never included in any AI prompt.

Crash & Performance Data

We use Firebase Crashlytics to collect anonymous crash reports. This includes device model, OS version, and a stack trace. No personal data is included. Crashlytics is disabled in debug builds.

Purchase Information

Purchases are processed by Google Play. We receive confirmation of purchase status through RevenueCat (our subscription management provider) but do not store payment card or billing information.

2. How We Use Your Data

• To provide and improve core app functionality
• To sync your data across devices when signed in
• To generate AI coaching reviews (goal and performance data only — wellness excluded)
• To process and verify in-app purchases
• To diagnose crashes and improve stability

3. Third-Party Services

We use the following third-party services:

• Firebase (Google) — Authentication, Firestore database, Cloud Functions, Crashlytics, App Check
• RevenueCat — Subscription and purchase management
• Google Gemini (via Cloud Functions) — AI coaching generation (performance data only; wellness never included)

Each provider has its own privacy policy. We do not sell your data to any third party.

4. Data Retention

Your data is retained as long as your account exists. You can delete your account and all associated data at any time from Settings → Delete Account. Deletion is permanent and irreversible.

5. Your Rights

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Withdraw consent for data sharing (by signing out or deleting your account)

To exercise any of these rights, contact us at [email protected].

6. Children's Privacy

SteadyOne is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

7. Security

All data in transit is encrypted using TLS. Firebase Firestore data is encrypted at rest. App Check enforces that only the genuine SteadyOne app can access our backend services.

8. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via an in-app notice. Continued use of the app after changes constitutes acceptance.

9. Contact

For privacy-related questions or requests: [email protected]

Orivent Studios, Cape Town, South Africa.