Your privacy.
Your choices.

What Stedaro uses

On your iPhone. Check-ins, reasons you enter, urges, Help results, Learning Path progress, reminders and Protection preferences support the features you use. Signing in alone does not upload your personal history.

With an account. Sign in with Apple provides an app-specific identifier and, when available, your name and email, including an Apple relay address. Stedaro stores account and session identifiers to sign you in and secure your account.

With Cloud Sync. Turning it on uploads your activity and history, Help results, learning progress and reminder settings to Stedaro’s servers so you can restore and sync them. This can include sensitive information you record about your wellbeing and porn use.

With Partner. Connections, invitations and the update categories you enable are stored to share activity with the person you choose. Your display name and selected updates are visible to that person. Push notifications use an Apple device token and may display your name. Private check-in reasons and notes are not shared with your Partner.

With Protection. Apple’s device controls apply your chosen restrictions. On supported iOS versions, Full protection uses private URL lookups. Our service stores a hashed random installation credential and cryptographic request data to operate the filter; it does not receive your browsing history or website contents. Custom sites stay on your device.

Usage analytics

Usage analytics helps identify useful features and fix reliability problems. It is enabled by default during normal app use. The app sends small batches of predefined usage events and technical error codes, with app and iOS versions and random installation, session and event identifiers.

Analytics applies to guest use as well as signed-in use. The installation identifier lets us recognise repeat use of the same installation. It is pseudonymous, not fully anonymous, and is kept separate from your Stedaro account. We do not include names, email addresses, Apple identifiers, check-in answers or reasons, notes, urge levels, website addresses, advertising identifiers or free-text error messages in analytics.

Raw events, including predefined error categories, are kept for up to 90 days. Per-installation active-day records are kept for up to 365 days; daily totals without installation identifiers for up to 730 days. Installation metadata expires after 365 days of inactivity. We do not collect detailed crash logs through this system. Apple may separately share crash reports according to your Apple diagnostics settings.

Services & security

Stedaro uses Hetzner for hosting, Cloudflare for delivery, security and encrypted backups, and Apple for sign-in, device protection and push notifications. These providers process the data needed to deliver their services. Network requests necessarily expose an IP address and technical connection information to the services handling them; IP addresses are not stored in Stedaro’s usage analytics.

Connections use HTTPS. Cloud Sync and Partner activity payloads are encrypted on the server, and database backups are encrypted. The service holds the keys needed to process these features, so this is not end-to-end encryption.

This website stores your chosen light or dark theme in your browser. It sets no analytics cookies and loads no analytics scripts. If you email support, your address, message and attachments pass through email providers, including Cloudflare’s forwarding service, to the developer’s inbox. They are used to answer and resolve your request. Providers may process information outside your country under their applicable data-protection arrangements.

The current release is free, with no purchases or payment details required. We may disclose information when required by law or necessary to address abuse or security incidents.

Keeping & deleting data

Account, Cloud Sync and Partner data are kept while needed for those features. Turning off Cloud Sync stops syncing on that iPhone; it does not erase the existing cloud copy. Ending a Partner connection removes its shared activity from the service, but cannot erase information someone has already seen or saved.

Use Account & Settings → Delete account to remove the active account’s name, email, identity, sessions, cloud history and Partner data, and clear your local data on this iPhone. The app then returns to onboarding. Deletion leaves a limited account identifier and deletion timestamps for service integrity, and any Apple credential awaiting revocation is kept encrypted until that work finishes.

Deleted data may remain in encrypted backups until those backups expire. Support correspondence is kept as needed to resolve your request and any follow-up, or meet a legal obligation.

When an installation’s raw analytics events and active-day records are deleted, aggregate totals remain. A deleted-installation marker is kept for 90 days to reject delayed uploads. Reinstalling or starting again after account deletion creates a new analytics identifier. Pending requests to erase the old analytics history remain until delivered; analytics identifiers and queued events are excluded from device backups.

The separate random Protection credential remains until revoked; temporary cryptographic evaluation keys expire after seven days.

Your choices

You can use Stedaro without an account, choose whether to enable Cloud Sync, change or end Partner sharing, and manage notification and device-control permissions in iOS. Local data may also be included in backups you manage through Apple.

Depending on where you live, you may have rights to access, correct, export or erase personal data, restrict or object to its use, and withdraw consent. Email support to make a request, including for analytics data. We may need information to locate the relevant record and verify it is yours. You can also contact your local data-protection authority.

Stedaro is intended for adults. If you believe a child has provided personal information, contact us so we can investigate and remove it.