Privacy Notice
This notice covers this website only — the questions you answer here and the purchase you make here. The Steady mobile app has its own privacy notice, which covers what happens on your device after you install it.
Nexa Labs, LLC is the data controller for the information described below. We are contactable at support+glp@llabs.top.
What this site collects
Your answers
Steady estimates how much of a dose you logged is still active, and builds daily targets from the numbers you enter, so the questions on this site ask for what those calculations need. You choose every answer, and you can leave the site at any point without submitting them.
| What | Why |
|---|---|
| The GLP-1 medication you take, your dose, and how often you take it | Every medication has a different half-life. This is what the medication-level estimate is calculated from. |
| When you last took a dose | Places you on the level curve, so the app can say what is active now and when it falls. |
| Your height, current weight and goal weight | Sets your daily protein and water targets. Your goal weight is kept with your answers so the app has it when you install. |
| Your age and sex | Both are inputs to the standard daily-energy formula the plan uses. |
| Your activity level | Adjusts the daily targets to how you actually live. |
| What brought you here, what you find hardest, and which GLP-1 topics you want to understand first | Orders what the app shows you first, so the thing you came for is not buried. |
| The injection device you use | A pen, a vial and an auto-injector are prepared differently, so shot logging follows the one you use. |
| How long you have been taking a GLP-1, and whether you have started yet | Decides which questions you are asked and where your first logged dose sits on the level curve. |
None of the questions asks for your name, email address, phone number or postal address. Your answers are stored against a random identifier generated in your browser, not against anything that identifies you.
The checkout is the one place that asks for an email address, because a subscription has to have somewhere to send the receipt and the link you cancel from. If you never reach the checkout, we never learn it. If you do, it is held with the purchase and not joined to your answers.
Your purchase
We are the seller, so the purchase record is ours: your email address, what you bought, what you were charged, and the country the tax was worked out for. We need it to charge you, to send your receipt, to let you cancel, and to keep the accounts the law requires us to keep.
Your card details are not part of that. They are typed into Stripe's own fields, inside Stripe's frame, and are never sent to, seen by, or stored on this website. We receive the last digits and the card type, which is what a receipt shows, and nothing that could be used to charge a card.
Usage
We record which screens you reached and which options you chose, so we can see where people give up and improve the flow. These records carry the same random identifier, never your name or email.
Measurements are recorded as ranges, not exact figures: an analytics record says which band a value fell into, not the value itself.
Approximate location
We work out which country you are in — from your device's time zone and, where our network provider supplies it, the region of your connection — so the options we show you are the ones available where you live. This is a country, never a precise location, and it is not stored.
What is stored in your browser
We store data locally in your browser so you do not lose your place:
- Your answers and your session identifier, so a reload or a phone call does not make you start over. Kept for 7 days.
- After a purchase, the same record is kept for 180 days. It is what lets us rebuild your unlock link if the copy to your clipboard failed. Without it a purchase can be stranded.
-
Advertising cookies (
_fbpand, if you arrived from an advert,_fbc), set by Meta so that a purchase can be matched to the advert it came from. Kept for 90 days. We do not set these if you appear to be in the UK or the European Economic Area.
Clearing your browser data removes all of these. You can also stop the advertising cookies with any browser setting or extension that blocks third-party trackers; nothing on this site stops working if you do.
Who we share it with
Only the processors below, each for the single purpose listed. We do not sell your data and we do not share it with data brokers. We do tell Meta when a purchase is made, so that we can tell which adverts work — what that consists of is set out in the table.
| Processor | What it receives | Why |
|---|---|---|
| Stripe Stripe, Inc. (US) |
Your card details, entered directly into its own fields, and the country your card is registered in | Takes the payment for us, and works out the tax on it |
| RevenueCat RevenueCat, Inc. (US) |
Your email address, the plan you chose, and your random session identifier | Runs the subscription for us, emails your receipts and the link you cancel from, and connects the purchase to your app install |
| Amplitude Amplitude, Inc. (US) |
Screen and choice events, with measurements as ranges | Product analytics: where the flow loses people |
| Meta Meta Platforms Ireland Limited (Ireland) |
Which steps of this page you reached, and the amount and currency of a purchase, against the advertising cookies above and your random session identifier. Not your answers, and not your email address | Measuring which adverts lead to a purchase |
| Supabase Supabase, Inc. (US) |
Your answers, against the random identifier | Holds them until your app collects them, so you are not asked twice |
| Vercel | Standard server logs, including your IP address | Serving this website and protecting it from abuse |
Some of these are outside the country you live in. Where personal data is transferred out of the UK or EEA, it is done under the transfer safeguards the processor maintains, such as Standard Contractual Clauses.
How long it is kept
| What | How long |
|---|---|
| Your answers, waiting for your app | Deleted the moment your app collects them. If it never does, deleted automatically after 90 days. |
| Data stored in your browser | 7 days, or 180 days after a purchase |
| Analytics events | For as long as the analytics account retains them |
| Advertising measurement data | Kept by Meta under its own retention policy |
| Payment and billing records | Kept by us, and by the providers above, for as long as tax and accounting law requires. A refund does not delete them — we still have to be able to show the tax authority what was charged and returned. |
Why we are allowed to use it
- To provide what you bought — performing our contract with you. This covers your answers and your purchase.
- To improve the service — our legitimate interest in understanding where the flow fails. This covers the usage records, which carry no name or contact detail.
- To meet legal obligations — tax and accounting records.
Health information
Your medication, your dose, how often and how long you have taken it, when you last took one, the injection device you use and your weight are information about your health, and privacy law treats that as a special category needing stronger protection than ordinary data.
We process it on the basis of your explicit consent, given when you choose to answer these questions having been told here what they are for. You can withdraw that consent at any time by emailing us, and we will delete what we hold.
Three limits we hold ourselves to, and which the software enforces:
- No measurement of you reaches analytics. Your weight, your height, your dose and the date of your last shot are recorded there only as the fact that you answered, and your age only as a band. Where you pick an answer from a list, which includes your medication, the option you picked is recorded, so that we can see where people leave the questionnaire.
- It is never sold, and never shared for advertising.
- It is deleted as soon as it has done its job — the moment your app collects it, and automatically after 90 days if it never does.
Your rights
Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. You can also withdraw consent where we relied on it.
Email support+glp@llabs.top. If you bought a subscription, write from the address you bought with and we will find it. If you only answered the questions and did not buy, there is no name or email on that record for us to search — send us the unlock link or the identifier from your browser, or clear your browser data and it goes on its own.
If you are in the UK or EEA and think we have handled your data badly, you can complain to your national data protection authority.
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has used it, email us and we will delete what we hold.
Changes
If we change this notice we will update the date at the top. The version in force is the one published here when you use the site.
Contact
Nexa Labs, LLC
30 North Gould Street, Ste N, Sheridan, WY 82801, United States
support+glp@llabs.top