Consumer Health Data Notice

This notice supplements our Privacy Policy and describes how Steady Connect Technologies Limited ("Steady1", "we", "us") collects, uses and shares consumer health data as defined by the Washington My Health My Data Act, Nevada SB 370 and similar US state laws.

1. Consumer Health Data We Collect

• Diabetes type, and the devices and medications you use (CGM, insulin pump, insulin brands);
• Blood glucose, nutrition and exercise data;
• Body measurements (height, weight);
• A health summary kept on our servers so that the carer features work (today's glucose readings, nutrition, activity, medicine stock, upcoming trips and appointments, and monthly markers), and a history of these summaries that is deleted automatically after 90 days;
• Your location, when you use Find nearby to search for emergency departments, pharmacies or grocery stores;
• Health information you provide in our Website survey.

2. Sources

• You, when you complete onboarding, log data in the App or answer the Website survey;
• Apple HealthKit or Google Health Connect, with your permission;
• Your device's location services, with your permission.

3. Why We Use It

To provide the App's diabetes tracking, reporting, carer-sharing and travel features and, with the consent you give during onboarding, to produce anonymous, aggregated statistics (for example, how many users have each diabetes type). We do not use consumer health data for advertising.

4. Who We Share It With

• Carers you invite, at the sharing level you choose;
• A recipient you send a PDF report to;
• Our service providers (hosting, email delivery and push notifications), who process it only on our behalf;
• A location search provider, to find places near you when you use Find nearby, and an open map data service, to look up addresses you type.

We do not sell consumer health data. We do not store your location, and we do not use geofencing around health care facilities.

5. Your Rights

• Confirm whether we collect, share or sell your consumer health data;
• Access your consumer health data and a list of the third parties it was shared with;
• Withdraw your consent;
• Have your consumer health data deleted.

To exercise these rights, email hello@steady1.app. You can also delete your account in the App (Account > Delete Account), which withdraws your consent; we complete the deletion within 30 days.

6. Appeals

If we refuse your request, you can appeal by replying to our answer with the subject "Privacy appeal". If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov, or the Attorney General of your state.

7. Changes to This Notice

If we make material changes to this notice, we will update the effective date above and notify you in the App.

8. Contact