steady — privacy policy

last updated: October 11, 2026

1. Who We Are

Steady – Daily Gita Meditation (“we,” “us,” “our”) is a project supported by voluntary gifts (dāna). We have no advertisers, no investors, and no business model that involves your data.

Steady is made by Tule Fog Games, LLC, which is the controller of the data described in this policy.

2. The App: No Personal Data Collected

The Steady app (Android, iPhone and iPad) works without an account and collects no personal information:

• Everything stays on your device. Your name (used only to greet you), practice history, sit durations, journal entries, and reflections are stored solely in the app's private storage on your phone. They are never transmitted to us. Your phone's own backup (Google or iCloud), if you use one, may include them, as may any copy you choose to save with “Keep a copy”. Uninstalling the app deletes them from your phone.
• Content requests are anonymous. The app fetches verses, teachings, and meditation audio from our servers without any identifier tied to you. Server logs used for rate limiting and security are ephemeral and are not linked to individuals.
• No analytics SDKs, no tracking, no ads. The app contains no analytics or advertising SDKs of any kind, and stores no identifier on your device for measurement. We do count how many devices opened the app each day, so we can tell whether the app is useful to anyone. The counter stores a one-way hash of your IP address and browser string, keyed to that single date — it identifies a device for one day and cannot be linked to the day before or after, by us or by anyone reading our database. It is a headcount, not a profile, and it is never joined to anything you write or do in the app. Once a day the app also sends a few coarse totals, with no identifier attached: roughly how long ago it was installed, on how many days and how many times you sat, the platform, the app version, whether the app language is English, Hindi or another, and how many times a few things happened (for example a sit started or finished, a reminder turned on, a gift made). Each total is stored as a separate count, so nothing we keep describes one person. On Android, the app also sends once the store's note of which link or campaign led to the install, and we keep only the number of installs per campaign per day.
• Gifts (dāna) are processed entirely by Google Play's billing system on Android and by Apple's App Store on iPhone and iPad; we never receive your payment details or purchase identity. Their handling of payments is covered by Google's Privacy Policy and Apple's Privacy Policy.
• Reminders are local. The morning reminder is scheduled on your device; no push-notification service is involved.
• Apple Health (iPhone and iPad, only if you turn it on). The app can record each meditation you finish as a mindful-minutes session in Apple Health. It writes that one kind of entry and never reads anything from Health. The entry stays in Apple Health on your device and is never sent to us.

2a. The Practice Builder and Subscriptions

• What you write stays on your phone. The practice builder picks out a few keywords from what you write, from a fixed list, and chooses a practice from Steady’s own meditations, breathing and readings. All of this happens on your phone. What you write, and the keywords, are never sent to us or to anyone else, and no AI service is involved. Speech is turned into text on your phone.
• Payments. Subscriptions are bought and paid for through Google Play on Android and the App Store on iPhone and iPad. We do not receive your name, email address, card or payment details. Google’s and Apple’s handling of the purchase is covered by Google’s Privacy Policy and Apple’s Privacy Policy.
• Checking the subscription. The app asks Google Play or the App Store, on your phone, whether the subscription is active, and remembers the answer on your phone. Your purchase is not sent to our server, except in one case: when you use Ask about the Gita, your purchase is checked with our server to confirm the subscription. Our server checks it with Google or Apple and returns anonymous single-use tickets, made with a blind signature, so a ticket does not say which purchase it came from. We keep only a one-way hash of the purchase, for at most 36 hours, to count the day’s limit.
• If this ever changes. We have built, but do not use, a way for the builder to ask our server for suggestions. Should we ever turn it on, the app would ask your permission first, and this policy would be updated before it is turned on. It is designed so that only a few keywords from the fixed list are sent, never what you write; they are passed to an AI provider (Anthropic) to choose among Steady’s own practices and are not stored; and each request carries an anonymous single-use ticket, made with a blind signature, so our server cannot connect a request to a purchase or to a device.

2b. Ask about the Gita

Ask about the Gita is part of the subscription, in English. It is a guide to the text: it answers in a few sentences and shows one verse with Steady’s own writing on it.

• What is sent with each message. Your message (at most 500 characters), the earlier messages and replies of the same conversation (at most five), and a note of your past conversations kept on your phone (at most 60 words). Unless you switch it off, it also sends a short summary of where you are in your practice. It contains only: your day on the path, today’s verse, verses you sat with or studied in the last week, the thematic path you are on and its step, roughly how often you sat, breathed and did yoga this week (“none”, “1–2” or “3+”), roughly when you last sat, the time of day, up to eight topics from the practice builder’s fixed list from the last three days, and whether the builder’s last plan was a sit or breathing. It never includes your notes, journal, reflections, name or exact times. Tap “See” under the message box to read it, or “Off” to stop sending it.
• Who receives it. Our server passes it to Anthropic’s Claude to write the reply. Our server stores no message, reply or summary and logs none of them. It logs only whether the request worked, how long it took and its size. Under its commercial terms, Anthropic does not train its models on it. Anthropic deletes it within 30 days, except that a message its automated safety systems flag may be kept for up to 2 years.
• Kept on your phone only. Short notes from your last five conversations and the last three conversations themselves, so you can reread them. “Forget our conversations”, in the guide’s ⓘ, deletes both. They are not part of “Keep a copy”.
• Reporting a reply. If you report a reply, we store the reason you chose, a fingerprint of the reply, the app version and the date, plus the reply’s text only if you tick the box to include it. Reports are deleted after 90 days.

3. What We Share

We do not sell, share, rent, or disclose any data to any third party — not to advertisers, data brokers, or analytics companies. All content is served from our own self-hosted servers. There are no third-party scripts, trackers, or cookies embedded in the app or the website.

The one exception is Ask about the Gita (section 2b): what you send in it goes to Anthropic, which provides the replies, and to no one else.

4. Technical Data

Like every internet service, our servers momentarily see your IP address in order to respond to requests and to rate-limit abuse. These records are ephemeral (rate-limit keys expire within 24 hours), are not linked to any person, and are never used for tracking or profiling. We use no analytics cookies. Your raw IP address is never written to our database: the daily-open counter described in section 2 stores only a date-keyed one-way hash, which is deliberately useless for following anyone over time.

Requests reach our servers through our own front door at tulefoggames.com, which keeps a short access log. It records your address only in shortened form (an IPv4 address cut to its first three parts, an IPv6 address to its first 48 bits), so it names a network, never a household. It records what was asked for without any query string, so no search text is kept, along with your browser or app string, and the time and result of the request. The log is kept for no more than 24 hours: every line is deleted within a day of being written.

5. Data Retention

• App data: lives only on your device; we never have it.
• Rate limiting data: expires automatically within 24 hours.
• Front-door access log: each line is deleted within 24 hours.
• Daily-open counts: kept as aggregate day totals. The date-keyed hashes are meaningless beyond their own day.
• Daily usage totals and install counts: kept as aggregate day totals.
• Subscription check (Ask about the Gita): a one-way hash of the purchase, deleted within 36 hours.
• Reports of a guide reply: deleted after 90 days.
• Backups: retained for 30 days, then permanently deleted.

6. Your Rights

GDPR (EU/EEA)

• Access: Request a copy of all your data.
• Erasure: Request deletion of all your data.
• Portability: Export your data as JSON.
• Object: Contact us to object to any processing based on legitimate interest.

CCPA/CPRA (California)

• We do not sell or share your personal information — for advertising or anything else.
• You may request deletion of your data at any time.
• Religious beliefs and health data are sensitive personal information under CPRA.

DPDP Act (India)

• You may withdraw consent and request erasure at any time.
• Grievance officer contact: see Section 9 below.

7. Children

Steady requires users to be at least 16 years old (18 in India). We do not knowingly collect data from children below these age thresholds. If you believe a child has used Steady, please contact us.

8. Security

We use encryption in transit (TLS) and rate limiting to protect against abuse. The application runs in Docker containers with non-root processes and internal-only database networks on servers we operate ourselves.

9. Contact

For privacy inquiries, data access requests, or to exercise any of your rights:

• Email: support@tulefoggames.com
• Grievance Officer (India): support@tulefoggames.com

We respond to all requests within 30 days.

10. Changes

We may update this policy. Significant changes will be communicated via the app. Continued use after changes constitutes acceptance.