Privacy Notice
This notice covers this website only — the questions you answer here and the purchase you make here. The Steady mobile app has its own privacy notice, which covers what happens on your device after you install it.
Nexa Labs, LLC is the data controller for the information described below. We are contactable at support+glp@llabs.top.
What this site collects
Your answers
Steady estimates how much of a dose you logged is still active, and builds daily targets from the numbers you enter, so the questions on this site ask for what those calculations need. One does not: the email address, which is not an input to your plan and is described under the table. You choose every answer, and you can leave the site at any point without submitting them.
| What | Why |
|---|---|
| The GLP-1 medication you take, your dose, and how often you take it | Every medication has a different half-life. This is what the medication-level estimate is calculated from. |
| When you last took a dose | Places you on the level curve, so the app can say what is active now and when it falls. |
| Your height, current weight and goal weight | Sets your daily protein and water targets, and is where the projected weight path on your plan starts and ends. Your goal weight is kept with your answers so the app has it when you install. |
| How quickly you want to reach your goal weight | Sets the pace of the projected weight path and the goal date on your plan. Kept with your answers so the app has it when you install. |
| Your age and sex | Both are inputs to the standard daily-energy formula the plan uses. |
| Your activity level | Adjusts the daily targets to how you actually live. |
| What brought you here, what you find hardest, and which GLP-1 topics you want to understand first | Orders what the app shows you first, so the thing you came for is not buried. |
| The injection device you use | A pen, a vial and an auto-injector are prepared differently, so shot logging follows the one you use. |
| How long you have been taking a GLP-1, and whether you have started yet | Decides which questions you are asked and where your first logged dose sits on the level curve. |
None of the questions asks for your name, phone number or postal address. Your answers are stored against a random identifier generated in your browser, not against anything that identifies you.
One question does ask for your email address. A subscription has to have somewhere to send the receipt and the link you cancel from, and asking a screen earlier means you type it once rather than beside your card details. It stays in your browser until you open the checkout. Typing it sends us nothing: if you never reach the checkout we never receive it at all, and clearing your browser data removes it. When you open the checkout it goes to the payment provider so the receipt and the cancellation link can reach you — that happens when the checkout opens, not when the payment completes — and it is not joined to your answers.
When you buy, your address also goes to Meta — as a hash, never as an address. It is turned into a fixed code first, and only the code is sent. Meta compares that code with the addresses it already holds, which is the whole point of sending it: it is how a purchase here is matched to the account that was shown the advert. Be clear about what that means: a code like this cannot be read backwards, but it is not anonymous either — anyone who already knows your address can produce the same code, which is exactly how the match works. We do not send your answers. If you appear to be in the UK, the EEA or Switzerland, none of this happens unless you agreed to it above.
Your purchase
We are the seller, so the purchase record is ours: your email address, what you bought, what you were charged, and the country the tax was worked out for. We need it to charge you, to send your receipt, to let you cancel, and to keep the accounts the law requires us to keep.
Your card details are not part of that. They are typed into Stripe's own fields, inside Stripe's frame, and are never sent to, seen by, or stored on this website. We receive the last digits and the card type, which is what a receipt shows, and nothing that could be used to charge a card.
Usage
We record which screens you reached and which options you chose, so we can see where people give up and improve the flow. These records carry the same random identifier, never your name or email.
Measurements are recorded as ranges, not exact figures: an analytics record says which band a value fell into, not the value itself.
Approximate location
We work out which country you are in — from your device's time zone and, where our network provider supplies it, the region of your connection — so the options we show you are the ones available where you live. This is a country, never a precise location, and it is not stored.
What is stored in your browser
We store data locally in your browser so you do not lose your place:
- Your answers and your session identifier, so a reload or a phone call does not make you start over. Kept for 7 days.
- After a purchase, the same record is kept for 180 days. It is what lets us rebuild your unlock link if the copy to your clipboard failed. Without it a purchase can be stranded.
-
Advertising cookies (
_fbpand, if you arrived from an advert,_fbc), set by Meta so that a purchase can be matched to the advert it came from. Kept for 90 days. -
Session-recording cookies (
_clck, kept for 1 year, and_clsk, kept for 1 day), set by Microsoft Clarity so that several page views are recognised as one visit rather than several strangers. Microsoft also sets cookies of its own fromclarity.ms— includingMUID, which Microsoft states it uses for advertising as well as analytics. - If you appear to be in the UK, the EEA or Switzerland, we ask you first. Until you agree, none of it runs: no advertising cookie is set, nothing is sent to Meta, nothing is recorded, and none of Microsoft's cookies above are set. If you decline, it stays that way, and the rest of this site works exactly as it did.
Clearing your browser data removes all of these. You can also stop the advertising cookies with any browser setting or extension that blocks third-party trackers; nothing on this site stops working if you do.
Who we share it with
Only the processors below, each for the single purpose listed. We do not sell your data and we do not share it with data brokers. We do tell Meta when a purchase is made, so that we can tell which adverts work — what that consists of is set out in the table.
We also record how this site is used, through Microsoft Clarity: the screens as they appeared to you, where you tapped, how far you scrolled and where the pointer went. It is how we find the question that stops people and the button that does not work on a particular phone. Microsoft receives those recordings and is a controller of them in its own right, which means it may also use them for its own purposes, including advertising. We do not pay it and we cannot delete one recording on its own — see how long it is kept, below.
| Processor | What it receives | Why |
|---|---|---|
| Stripe Stripe, Inc. (US) |
Your card details, entered directly into its own fields, and the country your card is registered in | Takes the payment for us, and works out the tax on it |
| RevenueCat RevenueCat, Inc. (US) |
Your email address, the plan you chose, and your random session identifier. Also the IP address you view the plans from, which it passes back to us for the advertising match below | Runs the subscription for us, emails your receipts and the link you cancel from, and connects the purchase to your app install |
| Amplitude Amplitude, Inc. (US) |
Screen and choice events, with measurements as ranges | Product analytics: where the flow loses people |
| Meta Meta Platforms Ireland Limited (Ireland) |
Which steps of this page you reached, and the amount and currency of a purchase, against the advertising cookies above and your random session identifier. Not your answers. When you buy, your email address as well, as a hash, so that Meta can recognise an account that already holds the same address. When you buy, our server also sends the IP address you viewed the plans from, so the purchase can be matched | Measuring which adverts lead to a purchase |
| Microsoft Clarity Microsoft Corporation (US); for visitors in the EEA, Microsoft Ireland Operations Limited |
A recording of your visit — the screens as they appeared to you, which can include the answers showing on them — together with your taps, scrolling and pointer movement, and the cookies above | Seeing where this site gets in your way |
| Supabase Supabase, Inc. (US) |
Your answers, against the random identifier | Holds them until your app collects them, so you are not asked twice |
| Vercel | Standard server logs, including your IP address | Serving this website and protecting it from abuse |
Some of these are outside the country you live in. Where personal data is transferred out of the UK or EEA, it is done under the transfer safeguards the processor maintains, such as Standard Contractual Clauses.
How long it is kept
| What | How long |
|---|---|
| Your answers, waiting for your app | Deleted the moment your app collects them. If it never does, deleted automatically after 90 days. |
| Data stored in your browser | 7 days, or 180 days after a purchase |
| Analytics events | For as long as the analytics account retains them |
| Advertising measurement data | Kept by Meta under its own retention policy |
| Session recordings | 30 days, on Microsoft's schedule; the heat maps and click counts built from them, up to 9 months. Microsoft's tool cannot delete a single recording, so if you ask us to erase one we can only stop recording and delete the whole project, which is what we will do if you ask. |
| Payment and billing records | Kept by us, and by the providers above, for as long as tax and accounting law requires. A refund does not delete them — we still have to be able to show the tax authority what was charged and returned. |
Why we are allowed to use it
- To provide what you bought — performing our contract with you. This covers your answers and your purchase.
- To improve the service — our legitimate interest in understanding where the flow fails. This covers the usage records, which carry no name or contact detail.
- To meet legal obligations — tax and accounting records.
Health information
Your medication, your dose, how often and how long you have taken it, when you last took one, the injection device you use and your weight are information about your health, and privacy law treats that as a special category needing stronger protection than ordinary data.
We process it on the basis of your explicit consent, given when you choose to answer these questions having been told here what they are for. You can withdraw that consent at any time by emailing us, and we will delete what we hold.
What we do with it, and what we do not:
- No measurement of you is sent to analytics. Your weight, your height, your dose and the date of your last shot are recorded there only as the fact that you answered, and your age only as a band. Where you pick an answer from a list, which includes your medication, the option you picked is recorded, so that we can see where people leave the questionnaire. That much the software enforces.
- This site is recorded. So that we can see where the questionnaire or the checkout gets in someone's way, Microsoft Clarity records how the site is used: where you tap, how far you scroll, and the screens as they appeared — which can include the answers showing on them. Microsoft receives those recordings and is a controller of them in its own right. If you appear to be in the UK, the EEA or Switzerland we ask you first, and nothing is recorded unless you agree.
- We never sell it.
- It is deleted as soon as it has done its job — the moment your app collects it, and automatically after 90 days if it never does. The recordings are the one exception: they sit with Microsoft for the period set out above, and its tool cannot delete a single recording, so erasing one means deleting the whole recording project.
Your rights
Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. You can also withdraw consent where we relied on it.
Email support+glp@llabs.top. If you bought a subscription, write from the address you bought with and we will find it. If you only answered the questions and did not buy, there is no name or email on that record for us to search — and if you never opened the checkout, the address you typed stayed in your browser and never reached us — send us the unlock link or the identifier from your browser, or clear your browser data and it goes on its own.
If you are in the UK or EEA and think we have handled your data badly, you can complain to your national data protection authority.
Children
This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has used it, email us and we will delete what we hold.
Changes
If we change this notice we will update the date at the top. The version in force is the one published here when you use the site.
Contact
Nexa Labs, LLC
30 North Gould Street, Ste N, Sheridan, WY 82801, United States
support+glp@llabs.top