Steady & Sage
Consumer Health Data Privacy Policy
This short policy is meant to address consumer health data rules such as Washington’s My Health My Data Act and Nevada’s consumer health data law (NRS Chapter 603A, including NRS 603A.495). It covers only consumer health data that Evergreen Hollow LLC, doing business as Steady & Sage, might receive. It does not replace our general Privacy Policy.
1. Categories collected and sources
Through the app: We do not receive consumer health data from the app. Your dose logs, protein, water, feeling notes, and related entries stay on your device. The app does not send those logs to us.
Through support email (unintended): We ask you not to include health details, diagnoses, medication names, lab results, or other consumer health data in support messages. If you still include such details, we may incidentally receive them as part of your email (source: you, when you email us).
2. Purpose of collecting, using, and sharing
Incidental health details in a support email are used only to understand and reply to your support request (or to delete the message). We do not use them for advertising, profiling, or sale.
The only sharing of that information is with our email provider, solely so the provider can deliver and store the message for us to reply. We do not share consumer health data for a third party’s or affiliate’s own use, and we do not sell it.
3. Sharing, third parties, and affiliates
We do not sell consumer health data. We do not share consumer health data with third parties or affiliates for their own use. There are no affiliates that receive consumer health data.
Email may be processed by our email provider, acting as a processor, solely to deliver and store the message so we can reply.
4. Manner of processing
If we receive a support email that includes consumer health data, we read it only to understand and reply (or to delete it). The message is stored in our support inbox in the United States. Our email provider processes it solely to deliver and store it for that purpose. We do not use it to profile you, to advertise, or to identify you. We do not combine it with in-app logs, because we do not receive, access, or store those logs on our systems.
5. Your rights and how to make a request
For consumer health data we actually hold (for example, a support email you sent us), you may:
- Ask us to confirm whether we hold support emails from you, and to access them.
- Ask us to review those emails and request changes or corrections.
- Ask us to delete those emails (including any health details they contain).
- Withdraw consent for our continued use of a message you sent, by asking us to delete it.
To make any of those requests, write to support@steadyandsage.com. Please say that it is a consumer health data request, and tell us whether you want to confirm, access, correct, or delete. We will honor the request for information we actually have.
On-device app logs are under your control. In Settings, use Export my data (CSV or JSON) or Delete all my data, or uninstall the app. We cannot produce or erase a copy of those logs, because we never received them.
We will respond without undue delay and within 45 days of receiving your request. If you are in the UK or EEA, we will respond within one month of receipt. If we need more time because your request is complex or you have made several requests, we will tell you within that first period, with the reason, and may take up to 45 more days — or, for a UK or EEA request, up to two further months. If you ask us to delete a support email, we will delete it within 30 days after we confirm the request is from you, and we will ask our email provider to do the same. We may need to confirm the request is from you and will only ask for information reasonably necessary to do that — typically that we can reply to the same email address that sent the original message. We will not ask you to resend health details, and you do not need to create an account. If we decline your request, you may appeal by writing again to support@steadyandsage.com with the word “Appeal” and why you disagree. We will decide the appeal in writing within 45 days, including our reasons. If we deny the appeal, we will include a way to contact the Washington Attorney General (https://www.atg.wa.gov/file-complaint) or, for a Nevada request, the Nevada Attorney General (https://ag.nv.gov/), to submit a complaint.
6. How we notify you of material changes
If this policy changes in a material way, we will update this page and the effective date and last-updated date on this page. The app does not create an account, so we do not send a separate notice to app users.
7. Collection over time and across websites
No third party collects consumer health data over time and across different websites or online services when you use this site. This website does not use tracking pixels, analytics, advertising, or other third-party scripts.