1. Who we are
Say It Steady (“Say It Steady”, “we”, “us”) is a coaching app for parents and guardians of children aged roughly 4–14. It helps you find calm, constructive words during everyday family friction — and repair afterwards. This policy covers the Say It Steady iOS app and its companion web pages.
Operator and data-controller information: Say It Steady is operated by LIN SHUO, based in China. Operator details will also appear on the App Store listing when available. For privacy questions and data requests, contact [email protected].
Say It Steady is not an app for children. It is a tool used by adults about their own parenting, and it is not directed to children under 13 (or the equivalent minimum age in your jurisdiction).
2. Information we collect
2.1 Information stored on your device (local-first)
- Child profiles you create: a nickname, age, and optional notes such as temperament or observable patterns. Profiles exist to tailor coaching to your child’s age — we do not ask for real names, and we do not build personality profiles of your child.
- Your coaching content: the situations you describe, the plans you save, practice answers and feedback, repair scripts, and optional growth-journal notes and photos you add. These are stored on your phone by default.
- Preferences: reminder and audio settings, and your recorded AI-consent decision.
2.2 Information processed only if you choose the feature
- AI requests: situation text, the selected child’s nickname and age, scene, mood/impact choices, and relevant coaching context are sent for plans, repair, routing or safety checks, practice questions, and regeneration (see §3). Avoid real names, school names, addresses, or other unnecessary identifying details.
- Practice assessment: answers you submit, the questions, and related plan or previous generated content needed for feedback may be sent for assessment.
- Speech-to-text (if you use it): dictation in the app is handled by your device’s platform speech recognition (Apple). Your voice audio goes to Apple under Apple’s own terms; we do not receive or store your audio. Only the transcribed text you confirm is used.
2.3 Account information (optional)
- If you create an account, Supabase processes your email address, authentication information for the sign-in method you use, and a persistent account identifier.
- With sync enabled, supported child profiles, plans, practice records, and journal entries are stored in our cloud database. Synced journal metadata can include a photo URI; this does not mean an image file has been uploaded or will be restored on another device.
- Subscriptions: Apple and RevenueCat process purchases, receipt or transaction information, purchase history, subscription status, and entitlements. RevenueCat uses an app-user identifier, which can be linked to your guest identity or account, for verification, entitlement management, and subscription analytics.
2.4 Technical information
- A persistent pseudonymous guest identifier, session credentials, and recovery information support use without an email account. Random identifiers can still link requests and activity and may later be associated with an account; they are not anonymous.
- Generation history and server records can retain requests and results linked to your account or guest identity, including family content supplied for AI features.
- Operation and diagnostic logs support reliability, security, and abuse prevention. Some secrets and tokens are redacted, but redaction is not comprehensive and does not guarantee removal of family content, identifiers, or other personal information.
- Routing records may include input hashes and scores. Other request, generation, or diagnostic records may still contain the original content; hashing one record does not make all processing anonymous.
3. How AI processing works
AI features transmit the necessary content described in §2.2 to our backend, an AI API relay service, and AI model providers over encrypted connections. The relay routes requests to model providers; both categories may process request and response content.
- Feature context: requests may include situation text, nickname, age, scene, mood, practice answers, questions, and relevant earlier plans or generated content. Do not include details you do not want processed by these services.
- Consent choices: the app asks for permission for AI processing. Declining or withdrawing consent prevents new AI processing until you agree again; saved content and non-AI calming features remain available while your account remains accessible.
- Provider handling: provider retention, processing locations, and any use for model training depend on the applicable provider terms and configuration. We do not guarantee that providers never retain content or never use it for training.
- Generation records: the backend stores requests and results linked to an account or guest identifier so your plans and history can be restored across devices. Deleting your account removes them, completed within 7 days of an accepted request.
Withdraw consent in the app’s privacy settings. Withdrawal does not erase previously submitted requests, results, or provider-held records. We do not guarantee AI completion times.
4. How we use information
- To provide the coaching features you request (generate plans, score practice, keep your history).
- To sync and back up your data when you enable an account, and to restore it on a new device.
- To keep the service safe and reliable (rate limiting, abuse prevention, error diagnosis).
- To verify Apple subscriptions, manage entitlements and restore purchases through RevenueCat, and analyse subscription activity.
- To send optional, in-app practice reminders you configure — never marketing messages.
We do not use your information for behavioral advertising, cross-app tracking, profiling of your child, or sale or rental to data brokers.
5. Children’s privacy
Say It Steady is a tool for adults. It is not directed at children, does not offer child-facing content, and does not knowingly collect personal information directly from children under 13 (or the equivalent minimum age in your region), consistent with the U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws.
Because the app coaches you about your own family, some content about a child is provided by you, the parent or guardian:
- We ask only for what coaching needs: a nickname (not the legal name) and age. We deliberately avoid fields for school, address, or other identifying details.
- Only a parent or guardian should create a child profile, and only for a child in their care. If you believe a child has provided information directly, contact us so we can assess and handle the request.
- Profile removal, local reset, and account deletion requests have different effects (see §9). Hiding a profile or removing local content does not, by itself, delete server-side records; use the account and data deletion request in §9 for deletion.
7. Storage, security & retention
- On device: supported app content is stored locally. Removing local content or resetting the app is separate from handling remote records (see §9).
- Remote systems: optional cloud content, authentication records, persistent guest identities, and AI generation history are stored by the backend and service providers. Access controls and encrypted transport reduce risk but do not guarantee absolute security.
- Retention: generation history and operation logs are kept while your account or guest identity is active and are deleted when a deletion request is completed (within 7 days of acceptance). Only records we are legally required to keep — such as billing records for tax purposes — are retained beyond that.
- Logs: some secrets are redacted and logs may rotate by size or count. This is not a guaranteed retention period, full redaction, or complete anonymisation. Residual diagnostic records may contain personal or family information.
- Backups and providers: encrypted backup copies of our systems are retained on a rolling basis and purged within 90 days. Records independently held by Apple, RevenueCat, or AI providers are governed by their own terms and applicable obligations.
- Billing: Apple handles payment card processing; our subscription integration uses purchase and entitlement records rather than your payment card details.
8. Your rights & choices
Depending on where you live (including under the EU/UK GDPR and U.S. state laws such as the CCPA/CPRA), you have rights over your personal information:
- Access & portability: your plans and history are visible in the app; with sync enabled you can restore them to any device, and you can ask us for a copy.
- Correction: edit child profiles, plans, and journal entries in the app at any time.
- Deletion requests: submit an account and data deletion request in the app (see §9). An accepted request stops access and sync immediately, and deletion is completed within 7 days.
- Withdraw AI consent: change your consent decision in the app; AI generation stops, other features keep working.
- Advertising choices: we do not sell or share personal information for cross-context advertising.
- Non-discrimination: we do not penalise you for exercising applicable privacy rights. Some choices necessarily limit features: AI needs consent, and an account deletion request stops account access and sync.
Use the in-app request and consent options, or contact the privacy address in §11 for questions, access requests, or difficulties using the app. Applicable legal rights and deadlines are not waived by the absence of a published processing estimate.
9. Removal and deletion requests
- In-app request: use the account and data deletion option in the app’s Me/privacy settings, including for a guest identity without an email account. Confirming sends an authenticated request to the backend; email is not the required submission method.
- Web request: if you cannot open the app, submit the same request through the public account deletion page without reinstalling it. We reply to confirm receipt, verify ownership where needed, and process the request through the same deletion path described here.
- Request accepted: after the backend accepts the request, the account or guest identity is immediately blocked from access and sync, and its data enters deletion processing (completed within 7 days, see below). Local app data is cleared only after the server confirms acceptance of the request; a failed or offline request is not a successful submission.
- Completion commitment: we complete deletion of the account or guest identity, its cloud content, and its server-side generation records within 7 days of accepting the request, and we send a confirmation email once deletion is complete where an email account is on file. A request-submitted message is not final-deletion confirmation; your confirmation is the completion email.
- Individual content removal: explicitly removing a child profile, plan, or journal moment records a removal marker (tombstone), so supported content can be hidden across devices on their next successful sync. An offline device does not receive the marker immediately. Removing individual content hides it; use the account and data deletion request above to remove related server-side history.
- Local reset: local reset affects only the data covered by that device’s reset operation. It does not submit an account deletion request, clear cloud or server records, or cancel a subscription. Cloud content may reappear on a later restore if access has not been blocked.
- Apple subscriptions: submitting a deletion request does not automatically cancel an Apple subscription. You can submit the request without cancelling first. Manage or cancel separately in your Apple subscription settings; see subscription help.
After deletion is completed, only records we are legally required to keep (such as billing records for tax purposes) are retained. Redacted diagnostic log entries may persist within infrastructure logs no longer than the 90-day backup window described above.
10. Changes to this policy
If we change how we handle your family’s information — for example, adding a new service provider — we will update this policy and the in-app consent screens where required, and change the effective date above. Material changes to AI processing will be asked about again, explicitly, in the app.
11. Contact us
Questions, requests, or concerns about privacy — especially anything about your child’s information:
For subscription and app help, visit Support or contact [email protected]. Do not email passwords, recovery codes, payment details, or unnecessary family information.