Privacy, in plain language.

Steady Meadow keeps a personal record on your devices. No account is required. The app does not automatically send William Evans your Health data, journal, support plan, contact details, usage logs, or identifiers. The developer operates no app health-data server, advertising, analytics, or tracking service.

What the app stores

Local records can include check-ins, energy and comfort ratings, highlights, context and helpful-action selections, symptom or event entries, intensity, times, notes, an optional name, and your selected mode and template. Your support plan can contain a preferred name, support steps, things to avoid, emergency instructions, trusted-contact name and phone number, and questions for your care team. These are information you choose to enter, not diagnoses inferred by the app.

With permission, supported Health records can include heart rate, heart-rate variability, breathing rate, blood oxygen, sleeping wrist temperature, steps, sleep, and resting heart rate. The app also stores permission/setup preferences, synchronization dates, query cursors, and identifiers and receipts needed to deliver records without duplicates.

An update from FND Sentinel may retain earlier baselines, feature snapshots, assessments, and alert history in the local record. Steady Meadow 3.0 does not present episode predictions or risk scores and does not generate automatic health alerts.

Modes, Health access, and one wearer

For myself permits optional import from the iPhone's Apple Health store. For someone I care for disables phone Health imports, while supported Watch collection remains available. This avoids adding new readings from the adult phone owner's Health store to the child's journal through phone import.

Modes change the presentation of one wearer's record. They are not separate accounts or separate medical records. Switching modes or templates keeps existing entries; it does not prove who older readings belonged to or automatically reassign them. Apple Health's own storage and account syncing are controlled separately by Apple and your device setup.

Health access is optional and controlled on each device. The app reads available records from Apple Health; it does not start workouts, turn on the heart-rate sensor, increase measurement frequency, or write Health records. The optional Watch mindful pause works without Health permission and does not measure the wearer. Available Health records follow Apple's measurement schedules and permissions.

What is copied to the Watch

The selected mode, template, optional name, and support plan are shared with the normally paired Watch. The Watch keeps a local cached copy so your support remains accessible when the phone is away. The transferred plan includes the preferred name, support steps, avoidances, emergency instructions, trusted-contact name and phone number, and its update time. Care-team questions and phone journal/check-in notes are not copied to the Watch; they stay in the phone record and any exports you choose to share. Notes created on the Watch are saved there for transfer to the phone.

A saved contact receives no automatic message. Saving a note or viewing a plan does not tell another person that help is needed. There is no remote caregiver account, second-phone sharing, or Apple Watch Family Setup integration.

Offline records and paired-device delivery

The Watch can save notes, read available local Health records after permission, and offer a wearer-started mindful pause without the iPhone app being connected. Pending notes and readings are saved locally. When the devices can communicate, Apple's WatchConnectivity system transfers them to the normally paired phone. The mindful pause does not change sensor sampling or guarantee background collection.

The phone saves an inbox copy before acknowledging receipt. The Watch removes its queued batch after that receipt; the phone removes its inbox copy after the journal has saved the imported records. Stable identifiers help prevent repeated transfers from creating duplicate entries. Apple controls background timing; the phone may need to be unlocked or reopened after being force-quit.

Ordinary Health sampling is not continuous and depends on hardware, permissions, region, movement, battery, and watchOS. The Health collector copies available additions; it does not mirror deletions made later in Apple Health.

Storage, protection, and backups

Records stay in private app containers. The main phone journal, companion record, and cached Watch state use Apple's complete file protection. Transfer queues and query cursors use protection until first unlock so permitted background work can continue after the device has been unlocked once. An upgrade can retain and deliver readings saved by an earlier build, including a pending live-reading buffer protected until first unlock; the updated app does not start new live recordings.

The app marks its record directories and saved record files for exclusion from device backups. This requests exclusion; it cannot guarantee that records never appear in a backup or on a restored device. Apple Health syncing, operating-system services, and older backups are controlled by Apple and your settings. Steady Meadow has no app-managed iCloud database, cloud account, or account recovery. Export anything you want to retain before replacing, erasing, or uninstalling the app or device.

Retention

The default phone retention policy keeps raw readings for 30 days and may thin older high-frequency readings. Historical feature snapshots and assessments from earlier versions follow the existing 120-day and seven-day limits, respectively. Journal entries, plans, preferences, baselines, and transfer receipts remain until removed or reset. Pending Watch records do not expire simply because the phone is unavailable. Device storage is finite; a failed save is reported rather than shown as successful.

Reports and exports

You can preview a visit summary covering the previous 14 days or create a CSV export, then choose a recipient or service using Apple's share sheet. The visit summary can include check-ins, event details, symptoms, notes, context, reported helpful actions, measurement availability, personal support steps, contact information, and appointment questions. Generating a preview does not send it.

After you share an export, the recipient or service controls that copy under its own privacy practices. Deleting app records does not erase exported copies. Be deliberate about sharing a child's or another person's information.

Your controls and deletion

• Change or revoke Health permissions through Apple's Health or Settings controls on each device. Revocation does not delete previously copied app records.
• End a mindful pause on the Watch whenever you choose. This controls the pause experience; optional local Health access is separate and remains subject to its permissions and Apple's schedules.
• Edit or delete check-ins and events in the phone journal, and edit the support plan in the app.
• Use the phone's Settings → Delete this phone's app data to clear its local record and pending transfer inbox. This does not erase Apple Health, the Watch's pending notes/readings, or a support-plan copy that is still cached on an offline Watch.
• Watch records may arrive again after the devices reconnect. Removing the Watch app as well as the phone app removes their local containers, subject to Apple's backup and restore behavior. Treat an offline Watch as retaining its last saved information until it receives an update or its app data is removed.

External resources, this website, and support

Optional educational links open independent NHS and hospital websites only when you select them. Those sites have their own privacy practices. This support website adds no analytics, cookies, forms, third-party assets, or tracking scripts. Its hosting provider, GitHub Pages, may process technical request information as part of hosting.

If you email support, William Evans receives the information you choose to send and uses it to respond. Include only the personal information you intend to share. The app has no advertising, analytics, telemetry, or crash-reporting SDK and does not request access to your photos. Apple may separately process purchases, TestFlight feedback, or diagnostics under Apple's own settings and policies. The developer does not sell app records.

Children and caregivers

A parent or guardian should supervise a child's setup, permissions, support plan, exports, and sharing. The Watch's friendly graphics do not provide supervision or notify a caregiver. One person's journal should not be reused to track several people.

Changes and contact

Material changes to these practices will be reflected in this policy and its effective date. For the earlier app, see the FND Sentinel privacy policy.