Privacy Policy

Last updated: October 29, 2026

Short version: SteadyPen has no accounts, no analytics, no ads, no cookies and no trackers. Everything you type in the app stays in your browser on your device. We never receive it, so we cannot see, sell, share or lose it.

1. Who we are

SteadyPen ("we") is an independent software product sold under the Dowel Pages studio brand. We are the controller for the small amount of personal data in sections 4 and 5. Contact: dowelpages+steadypen@mail.grokbot.com.

2. Data you enter in the app (stays on your device)

Your health and wellness entries, settings and Pro license key are saved only in your browser's local storage on your device (steadypen.v1, steadypen.license). App files are cached so it works offline. None of this is sent to us or anyone else. This storage is strictly necessary to provide the app you asked to use, so no consent banner is needed.

How to delete it: app → Settings → Delete all my data on this device, or clear this site's data in your browser.

Because we never receive your health entries, we do not collect, share or sell consumer health data. See our Consumer Health Data Privacy Policy.

3. No cookies, no tracking

No cookies, analytics, advertising, pixels, fingerprinting or third-party scripts. We do not sell or share personal information or use it for targeted ads or profiling. Global Privacy Control and Do Not Track are automatically respected.

4. Hosting

The site is served by Cloudflare Pages, which processes technical data such as IP address to deliver and protect the site (GDPR legal basis: legitimate interest, Art. 6(1)(f)).

5. Purchases and support emails

Payments are handled by Stripe, which receives your card details, email and country under its own privacy policy. We never see your full card number. We receive the order record (email, amount, date, country, payment ID) to deliver your key, give refunds and keep legally required records. Emails are used only to reply. Legal bases: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).

6. Retention

Order records: as long as tax/accounting law requires (usually 5–10 years). Support emails: up to 24 months. App data: we never hold it.

7. International transfers

Stripe and Cloudflare may process data in the US and elsewhere using safeguards such as EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.

8. Your rights

Under laws such as the EU/UK GDPR, Brazil's LGPD and US state privacy laws you may ask to access, correct, delete or port your data, object, restrict, or withdraw consent. Email dowelpages+steadypen@mail.grokbot.com; we reply within 30 days and never discriminate for asking. You may also complain to your data protection authority.

9. Children

SteadyPen is for adults and not directed to children. You must be at least 18 to use it (18 to buy Pro). We do not knowingly collect data from children under 18; contact us and we will delete it.

10. Security

HTTPS only, strict security headers, no third-party code. Keep your device and backups protected.

11. Changes

We will update this page before any change goes live, and ask for consent where required.

Progress photos

If you save a progress photo (Pro), it is resized and stored in your browser's IndexedDB storage on your device. It is never uploaded to us. "Delete all my data" removes the photos too. Pro backups include your photos, so keep backup files private.