Privacy

Steady · calendar.steady.place · Updated November 5, 2026

Steady is a shared calendar for families. Anyone can start one for their family. Each family's calendar is private: only the people that family invites can sign in to it or see what's on it, and no one in another family can. The one exception is a calendar feed link, which someone who can edit can make to see events in another calendar app: anyone who has that link can see the events in it.

Steady doesn't sell your data, use it for advertising, or show ads.

When you open a page on steady.place, we note which website sent you (for example "news.ycombinator.com", or "direct" if none) and add one to that website's count for the day. We keep only that name and the day: no cookie, no script in your browser, and nothing that identifies you, such as your address, device or the page you came from.

What it stores

• Events and tasks you add: titles, times, places, notes, who they're for, who's driving, and how long it takes to get there.
• Your family's lists: their names, each item and its note, and who added it. Items you've added before are kept, so they can be suggested when you type, until 500 newer ones replace them.
• The calendar's name, and the names, colors and photos you choose for each person. For each person who signs in, which person on the calendar they are, and for each invite link, who it's for.
• Birthdays you add, including for people who aren't on the calendar.
• School and team calendars you add: their links, and the events read from them.
• The family's home address, if someone adds one in Settings, under Family. It's used only to work out when to leave for an event when an iPhone can't use its location. Everyone who can sign in to the calendar can see it, including people who can only view.
• Passkey public keys and sign-in sessions. Passkeys themselves stay on your devices.
• Your color scheme, your reminder and alert choices, the weather location, and the calendar's time zone.
• An email address, only if you add one for the week digest.
• What you send from the boxes on steady.place: an email address to ask for access or to hear when the iPhone app is ready, or a few words about what almost stopped you, with an email address only if you want a reply.
• Emails forwarded to your calendar's address, for 30 days.
• Which days each person opened the calendar, and who added each event or task. Nothing about what you looked at or for how long.
• Recent changes: who added, changed or deleted each event or task, its title and time, and when, for 90 days.
• The private link to each person's calendar feed, until they make new links or leave.
• When the family finished each step of setup, the first time Steady found each kind of thing that needs someone, and which tips each person has seen. Only the times, never what was on screen.

Children

Steady is for families. You must be at least 13 to have your own account. A parent or guardian can add younger children to the family's calendar, with a name, color, photo, birthday and events, without giving them an account; children under 13 can't sign in. We don't knowingly collect personal information directly from children under 13. If you think someone under 13 has an account, write to us and we'll delete it.

Google Calendar

If you connect Google Calendar, the app asks Google for two permissions: to see the list of calendars in your account, including ones other people share with you, and whether you can edit each; and to view and edit the events in them. It reads events from the calendars you choose and adds, changes and deletes events in the ones you can edit, so both calendars match. A calendar shared with you read only is only read: nothing is written to it. It only reads events from calendars you link to a person in Settings, and events from them go only to your family's calendar. An event marked private in Google comes in as Busy, with no title, notes or place, and only its time is ever written back to it; the same goes for private events in a calendar you subscribe to. Your Google sign-in is stored encrypted and is used for nothing else. Google user data is not sold, shared with anyone outside your family, used for advertising, or used to train AI models. The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnect any time in Settings, which also revokes the app's access. You can also remove it at myaccount.google.com/permissions.

Apple Calendar and Apple Maps on iPhone

If you link calendars on your iPhone in Settings, under Calendars & sync, the app reads events from the calendars you choose and adds the family's events to them, so both match. Steady keeps which calendars are linked, that the device is an iPhone, when it last synced, and which event is a copy of which. Stopping sync removes the events that came from that iPhone's calendars; events made in Steady stay.

When you tap Work out when to leave on an event, the app sends the event's place, and either the iPhone's location or the family's home address, to Apple Maps to get the drive time. Steady keeps only the minutes. Your location isn't sent to Steady.

Reminders and alerts

If you turn on reminders, the app stores an address for your device from Apple, Google or Mozilla, and sends reminders and the alerts you choose through that company's notification service. Each one is encrypted for your device, so the service can't read what's in it. Turning reminders off or signing out deletes the address.

On iPhone, the Steady app gets them through Apple's notification service, with an address for that iPhone. Signing out, leaving the calendar, or turning notifications off in the app deletes the address.

Email

Email isn't turned on yet, so Steady sends no email today. When it is, you can add an email address in Settings, under Alerts, to get the week digest by email. The app sends one email with a link to confirm the address, and sends nothing else until you confirm it. After that it sends the digest on Sundays, only while you have it turned on.

Emails are sent through Resend, an email delivery service, which receives your address and the email's contents in order to deliver it.

Every digest email has an unsubscribe link: one click stops them. You can also turn them off, or remove your address, in Settings at any time. Leaving the calendar deletes your address.

Writing to me from steady.place

The home page has three boxes. One takes your email address when you ask for access. One takes your email address so I can tell you when the iPhone app is in the App Store. The other asks what almost stopped you from starting a calendar, and takes an email address only if you want a reply.

I keep what you type, the address if you gave one, and the date. That's all: nothing about your device or where you are, and no tracking on the page. I use an access request to send you your sign-up link, the app list for one email on the day the app is out, and a reply address to answer you myself. I don't add you to anything else, I don't sell or share it, and it isn't used for ads. Nobody else reads the feedback.

It's stored with the rest of Steady's data at Fly.io, and it's in the backup copies there for up to 30 days. To have your address or your words deleted, write to hello@steady.place and I'll do it, usually within a day.

Forwarded email

Forwarding isn't turned on yet. When it is, each calendar will have its own address for forwarding school and team emails. When an email arrives at it, Steady keeps who sent it, who forwarded it, its subject, its text (about the first 20,000 characters), and the events and to-dos it found. It finds them by rules that look for dates and times, not AI. Pictures and other attached files are dropped before the email reaches Steady. A calendar file in it is read for its events and not kept.

Nothing from an email goes on the calendar until someone adds it. Only the family's members see forwarded emails and their address; people who can only view the calendar don't. Members who turned on alerts for changes get one when an email has something to add.

Each email is deleted after 30 days, when 50 newer ones have arrived, or when someone deletes it in From email. Events and to-dos added from it stay, like any others.

Mail to the address is received by Cloudflare, which hosts the steady.place domain, and handed straight to Steady. Anyone who has the address can send to it. A member can make a new address in Settings, under Calendars & sync, and the old one stops working.

Paying

Paying isn't turned on yet, so Steady asks for no card. When it is, a family pays for Steady on the web, on a checkout page run by Stripe. Stripe receives the card details, email address and billing details it asks for, and keeps them under its own privacy policy. Steady keeps only Stripe's customer number for the family and the date the family has paid through, and never sees card numbers. When a calendar is deleted, Steady keeps its Stripe customer number for 30 days, so its subscription is still cancelled if Stripe is slow to confirm. The iPhone app takes no payments.

Where it lives

Every family's calendar is stored in one database on an encrypted disk at Fly.io in the US. Backup copies are kept for up to 30 days at Fly.io, then deleted. An encrypted off-site copy is planned. Families share the server but not their data: the app only shows you, and only lets you change, your own family's calendar.

The server's logs, kept at Fly.io, name the person for a few actions, such as who left a calendar or removed someone's access.

We look at a family's data only to fix a problem someone in that family reports, to keep Steady running and secure, or when the law requires it.

Other companies

• Fly.io runs the server and keeps backup copies.
• Cloudflare hosts steady.place, and will receive mail sent to forwarding addresses once forwarding is turned on.
• Resend will deliver the week digest and its confirmation email, once email is turned on.
• The US National Weather Service provides the weather. It receives the coordinates of the town you set, not your events.
• Stripe will take payments, once paying is turned on.
• Apple, Google and Mozilla deliver notifications to the devices you turn them on for.
• Apple Maps works out drive times on iPhone.
• Google Calendar, only if you connect it.

Deleting data

Delete events, tasks, lists, list items or photos in the app at any time.

To leave a calendar, choose Leave this calendar in Settings, under People (Sign-in & devices on iPhone). Your passkeys, sessions, reminder addresses, email address, calendar feed links and Google connection are deleted. The events you added stay for the rest of your family.

To delete a whole calendar, choose Delete this calendar in Settings, under Family. Every event, task, list, person, forwarded email, setting and sign-in for that family is deleted at once, its Google access is revoked, and everyone in it is signed out. Backup copies of it are deleted within 30 days.

Someone who can edit can download a copy of the whole calendar first, with Download a copy in Settings, under Family.

You can also write to the contact below and ask for any of this.

Contact

Laura Gallisá · hello@steady.place