Steady Belly

Privacy Policy (Interim)

Last updated: 12 September 2026

This is a placeholder while we finish a full legal review — it covers the basics honestly, but treat it as provisional until we publish the final version.

Steady Belly ("the app", "we", "us") is a personal health companion that helps people recovering from diverticulitis track symptoms, meals, and recovery, and identify possible triggers over time. This policy explains what data we collect, how we use it, and the choices you have. We take your health data seriously and collect only what the app needs to work for you.

1. Who is responsible for your data

Steady Belly is operated by Kim Cameron. For any privacy question or request, contact support@steadybelly.app.

2. Information we collect

3. How we use your information

We do not use your health data for advertising, and we do not sell your data.

4. How we use Google Calendar data

We use read-only Google Calendar access for one narrow purpose: to count the number of events on your calendar for the current day, so the app can estimate that day's stress level. We read only today's events, and we store only the resulting count and the stress value it produces. We do not store event titles, descriptions, attendees, locations, or any other calendar content, and we never share your calendar data with anyone. This feature is entirely optional — the app works fully without it, and you can set your stress level manually instead.

5. Google API Services — Limited Use disclosure

Steady Belly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

6. Where your data is stored and how it is protected

Your data is stored in Google Cloud Firestore via Firebase, encrypted at rest, under security rules that restrict every record to the account that created it. Meal-photo analysis is performed by Google's Gemini API, which we call through a secure server-side proxy (hosted on Cloudflare) so that our API credentials are never exposed in your browser. We rely on the security practices of these providers (Google Cloud / Firebase and Cloudflare).

7. Third-party services

Each provider processes data under its own privacy terms.

8. Your choices and rights

9. Data retention

We retain your data for as long as your account exists so the app can show your history and trends. When you delete an entry it is removed; when you delete your account we delete your associated records.

10. Washington My Health My Data Act & breach notification

Washington's My Health My Data Act (MHMDA) requires specific opt-in consent before we collect your health data — that's why Steady Belly asks for your explicit agreement during onboarding, before your first log is ever saved. The precise MHMDA-required disclosure language in this section, and our formal breach-notification commitments under applicable law (including the FTC Health Breach Notification Rule), are being finalized with legal counsel and aren't final in this interim version. Until then: we don't sell or share your health data with anyone, and if we ever discover a breach affecting it, we will notify affected users.

11. Not medical advice

Steady Belly is a self-tracking and educational tool. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for professional care. Always consult a qualified healthcare provider about your symptoms and before making changes to your diet, medication, or care.

12. Children

Steady Belly is intended for adults and is not directed to children under 16. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by the "Last updated" date above.

14. Contact

Questions or requests: support@steadybelly.app.