STEO — Privacy Policy

Last updated: 10 August 2026

This Privacy Policy explains how STEO ("we", "us", "our") collects, uses, stores, and shares your information when you use the STEO application.

1. Overview

STEO is a wellness, journaling, challenge-based, and personal-growth application. This Privacy Policy describes how we handle your personal information when you use our services.

2. Data We Collect

2.1 Information You Provide

2.2 Automatically Collected Data

2.3 Optional Wellness, Apple Health, and Health Connect Data

If you explicitly enable the feature and grant the relevant Apple Health or Android Health Connect permissions, the STEO app may calculate and send daily aggregate wellness values from data you have authorised it to read. These aggregates may cover heart rate, resting heart rate, heart-rate variability (HRV), step count, active energy or calories, exercise time, and sleep, together with availability, sample-count, Energy, and Activation context.

STEO does not send or accept raw HealthKit or Health Connect samples, individual workouts, or health-platform device identifiers for Daily State. The backend treats submitted values as authenticated, client-calculated aggregates; it does not claim to verify their Apple Health or Health Connect provenance. STEO requests read access only and does not write health records to either platform.

3. How Your Data Is Used

By using STEO, you agree that we may use your information to:

Daily State becomes available only after your mood check-in and the same-cycle Daily Challenge are complete. Its displayed number is the normalised value of your direct mood selection. Challenge themes and optional wellness aggregates remain separately identified context and are not silently averaged into that number.

Daily Mood and Daily State are reflective wellness features. They do not provide a diagnosis, medical advice, treatment, emergency monitoring, or a substitute for a qualified health professional.

We may aggregate and anonymise data for statistical or business purposes.

4. Data Sharing With Partners

4.1 Sharing Required for Partner Fulfilment

If you redeem, purchase, or interact with a product or service from the STEO Shop, you agree we may share the minimum necessary information with approved partners, such as:

4.2 AI-Powered Features

STEO uses third-party artificial intelligence services to power certain features, including the in-app chat assistant and personalised challenge feedback. For Daily State, the three answers from your completed Daily Challenge may be sent once to our AI service provider to classify a limited tone and set of fixed themes. Raw answers are not copied into the resulting Daily State projection. When you use AI-powered features, the relevant message or response content may be sent to our AI service provider for processing. This data is used solely to provide the requested feature and is not used by STEO for advertising or cross-app tracking. We do not share your name, email, or other account details with AI providers.

4.3 Marketing & Statistical Sharing

We may share aggregated, anonymised statistics with partners for market research, behavioural insights, service optimisation, and partnership planning. We do not sell personally identifiable information.

4.4 Mood and Wellness Data

We do not sell your mood, challenge-response, Daily State, or optional wellness aggregate data. We do not use that data for third-party advertising or tracking you across other companies' apps or websites. We share it only with service providers where necessary to operate the feature, under applicable contractual and security controls, or where required by law.

Apple Health, HealthKit-derived, and Health Connect-derived data is never used for advertising, marketing, or use-based data mining. It is used only to provide and improve the health and wellness features that you explicitly enable.

5. Data Retention & User Rights

5.1 Retention

We retain information as long as needed for operations, analytics, improvement, compliance, or legal obligations.

Daily mood check-ins, server-owned daily cycles, and non-text Daily State projections currently follow the lifetime of your STEO account and do not have a separate time-based expiry. Optional wellness aggregate payloads are retained until you revoke wellness consent or delete your account. On wellness-consent revocation, those payloads are deleted and removed from Daily State. Minimal replay-prevention receipts that contain no wellness values or aggregate fingerprint may remain until account deletion.

5.2 Data Access & Deletion

You may request:

To delete your account in the app, open the Profile Area, choose Delete account, and confirm. STEO then permanently deletes the live account record and associated sessions, profile, wallet, purchase, challenge, track, chat, Daily Mood, Daily State, and other user-linked application records. If you cannot access the app, email info@steo.app from the account email and request deletion. Operational backup copies and security logs may remain only until their normal restricted retention cycle expires or where law requires retention; they are not used for advertising or to recreate an actively deleted account.

You can request correction, a copy of your stored data, or deletion of a subset of optional wellness data by using the relevant in-app control or contacting info@steo.app.

5.3 Consent Withdrawal

You can stop future Apple Health access through iOS permissions or Health Connect access through Android permissions. You can also revoke STEO wellness consent in the app; this stops new wellness-summary uploads and deletes stored optional wellness aggregate payloads. Revocation does not delete mood selections or Daily Challenge evidence, which you provided separately. Account deletion removes associated Daily Mood and Daily State records, subject to any legal retention requirement. If you withdraw consent for data collection or sharing, certain features may stop working.

6. Data Security

We apply commercially reasonable technical and organisational safeguards. No digital system is completely secure, and we cannot guarantee absolute protection against unauthorised access.

7. Third-Party Products & Services

7.1 STEO Shop

The STEO Shop hosts products, services, programs, or vouchers from third-party providers ("Partners").

7.2 Fulfilment Responsibility

After you redeem or purchase from a Partner, your relationship is directly with them. STEO is not responsible for delivery issues, product quality, delays, cancellations, outcomes, or refunds (unless explicitly handled by STEO). All post-purchase support is managed by the Partner.

7.3 Platform and Security Services

On Android, Google Play provides app distribution, billing, and Play Integrity verification. On supported devices, Health Connect provides health data only after your explicit permission. STEO sends integrity tokens to Google for verification and uses the returned licensing, app-recognition, and device-integrity verdicts to protect authenticated requests; STEO does not use those verdicts for advertising.

8. Legal Compliance

STEO complies with applicable Australian privacy principles, Apple App Store Review Guidelines, and common international privacy expectations (including GDPR-style user rights).

9. Updates to This Policy

We may update this Privacy Policy at any time. Continued use of STEO constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at info@steo.app.