What Steady keeps, and why.

Who we are

EfficientWorks runs Steady. Questions: paul.ponciano@yahoo.com.

Account

When you sign up we store the email and name you give us, plus a hashed password. We use that to sign you in and to send account mail if we ever need to. We do not sell your email.

What you write

Your trading sessions and logged fills, playbook setups, journal entries, calendar jots, tasks, and work-block notes are stored so they can come back when you open the app. They are your content. We do not train public models on them. We do not show them to other accounts.

Avatars

You can pick a cartoon or upload a photo. Uploaded photos are stored so your avatar can render in the header and on Account. If cloud storage is configured they live as a public image URL; otherwise a small copy is stored with the account. Delete the account and the photo record goes with it.

Your desk file

Your desk file — prop firm, evaluation vs funded, account size, and the risk numbers (daily max, trailing MLL, floor, lock, max contracts, 1R) — is stored on the account so your sessions and rules stay in sync across devices. It is yours; you can edit it any time on Account.

Payments (Stripe)

Pro subscriptions are billed by Stripe. We store Stripe customer and subscription identifiers, status, and period end so the app can tell free from Pro. Card numbers never hit Steady servers. The iOS app does not collect payment info in the native shell; US checkout opens in Safari on todaysteady.app.

Cookies and session

An httpOnly session cookie keeps you signed in. A timezone cookie stores the zone your browser reports so “today” matches your calendar. We do not use advertising cookies or a third-party ad network.

iOS app

• Face ID / Touch ID unlocks the already-signed-in session on this iPhone. Biometric data stays in iOS. We never see a face scan or fingerprint.
• The daily reminder is a local notification on the device. It is not sent through our servers.
• Camera and photo library are used only when you choose a profile photo. We do not scan the library in the background.
• Haptics fire on this device when you complete a task or start a work block.

How long, and how to leave

We keep account data while the account exists. Delete the account from Account (signed in) or email paul.ponciano@yahoo.com. Deletion removes the user row and cascaded desk file, sessions, trades, playbook, tasks, journals, jots, sits, and avatars. Stripe may retain billing records as required by law.