Privacy Policy

1. Scope

This policy explains how the SteadyDrive iPhone and iPad app and its page on jtrlabs.com handle information. SteadyDrive is published by JTR Labs LLC ("JTR Labs," "we," "us," or "our").

2. Information SteadyDrive handles

Account and restoration information

The app creates a random SteadyDrive user identifier and session credential so it can save and restore supported information. If you choose to link an account, we also process the email address or Apple Sign In identifier used for that account. Passwords are stored only as one-way password hashes, never as readable passwords.

Practice and app content

Depending on what you choose to enter, SteadyDrive may store setup selections, driving situations, goals, comfort ratings, practice-plan steps, completion history, short reflections, support-tool events, and related dates. This information is used to provide your plan, progress, and cross-device restoration. Free-text reflections and certain support records are encrypted before server storage.

If you enable reminders, SteadyDrive may sync your reminder preferences and IANA timezone so supported reminder settings can be restored with your account.

Trusted contacts

You may manually enter a trusted contact's name, phone number, and relationship label. SteadyDrive does not read or upload your device address book. Contact names and phone numbers are encrypted before server storage. Starting a call uses the system phone interface, where you decide whether to place it.

Information not collected in version 1.1

• No advertising identifiers, behavioral advertising, or cross-app tracking.
• No SteadyDrive product-analytics events or analytics profile.
• No photos, video, microphone data, address-book access, or wearable/biometric data.
• No payment-card or bank information. Paid subscriptions and purchase controls are disabled in version 1.1.
• No continuous route history. Motion and optional speed signals are not used to build a travel history.

3. Location and route information

Location features are optional. If you turn on speed confirmation, motion and speed signals are used on the device to decide whether to show a reduced-interaction screen. SteadyDrive does not save a location trail from this feature.

When you request a route preview, the starting point, destination, and any stops or map points you enter are sent to the SteadyDrive service and then to Google Maps to return route options. Do not enter a location you do not want processed for that request.

SteadyDrive does not use route details to build its own analytics profile. Google may retain routing request URLs, locations, and parameters in operational logs and use those logs to operate, secure, analyze, and improve Google services under its own terms and privacy commitments.

Exact saved-route locations stay in protected device storage by default. If you separately enable “Restore exact route on other devices,” the exact route fields are encrypted together before server storage. Route display details that do not contain exact locations may be synchronized with your account.

4. How information is used

We use the information described above only to:

• operate the app and its rule-based practice plan;
• save progress, preferences, reflections, and routes you choose to save;
• support optional account linking and cross-device restoration;
• provide route previews and optional trusted-contact features;
• respond to support, security, deletion, or privacy requests; and
• protect, operate, and troubleshoot the SteadyDrive service.

SteadyDrive does not run its own product analytics or use reflection text or exact route details to build an analytics profile. Google Maps' provider-side logging and use of routing requests is described in Section 3. We do not sell personal information or use it for third-party advertising.

5. Service providers and disclosures

We use service providers only where needed to operate SteadyDrive. Railway hosts the SteadyDrive API and database and retains operational HTTP logs that may include source IP address, user agent, request path and status, timing, edge region, and request ID for Railway's platform retention period. Those logs support app functionality, security, and troubleshooting. Google Maps processes locations submitted for route previews and may retain and use routing request logs as described in Section 3. Apple provides App Store distribution, Sign in with Apple when selected, device notifications, and operating-system services. Cloudflare hosts the static jtrlabs.com website and may process short-lived network logs for security and delivery.

These providers process information under their own terms and privacy commitments. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. We do not share information with ad networks or data brokers.

6. Your choices and controls

• Use the core app without linking an email or social account.
• Allow or deny motion, location, and notification permissions in device Settings.
• Keep exact saved-route locations on one device or opt into encrypted restoration.
• Add, edit, or remove trusted contacts.
• Export supported account information from Profile.
• Delete your SteadyDrive cloud account and associated server records from Profile.

7. Retention and deletion

Account-linked information is retained while your SteadyDrive account exists and as needed to operate the service. Choosing Delete Account removes the account's profiles, sessions, identities, routes, practice records, reflections, trusted contacts, and related account records from the active database. Limited records may be retained where required for legal, fraud-prevention, security, or backup-integrity purposes and then removed according to the applicable retention cycle. Deleting the app removes ordinary on-device data; operating-system secure storage may follow Apple's platform behavior.

8. Security

We use HTTPS in transit, platform-protected storage on supported devices, password hashing, access controls, and authenticated encryption for selected server-side sensitive fields. Exact route information stored for optional cross-device restoration is encrypted before database storage. No security method is perfect, but we work to limit what is collected and protect what is needed.

9. Children, privacy rights, changes, and contact

SteadyDrive is not directed to children under 13 and we do not knowingly collect personal information from children under the minimum age applicable in their location. Depending on where you live, you may have rights to access, correct, delete, obtain, or object to certain processing of personal information. The in-app export and deletion controls are the fastest way to exercise access and deletion choices.

We may update this policy as the app changes. We will revise the date above and provide additional notice when appropriate. For privacy questions or requests, contact [email protected] or write to JTR Labs LLC, United States.