Privacy policy
Steadywave by Sound Mind · Last updated: October 11, 2026
The short version: we collect what we need to run your neurofeedback training and nothing more. We don’t show ads, we don’t sell your data, and we don’t use third-party tracking or analytics. Your information is stored in the United States.
Who we are
Steadywave is a neurofeedback training app run by Sound Mind Counseling & Neurotherapy, 108 Gateway Blvd, Ste 206, Mooresville, NC 28117 (“we”, “us”). This policy covers the Steadywave apps for Android, Mac and Windows, the client portal at app.steadywavemind.com and this website. Questions? Email hello@steadywavemind.com.
Steadywave is a wellness and training tool. It is not a medical device and is not a substitute for medical care. It does not diagnose, treat or cure any condition.
What we collect
Account information
Your name (or preferred name), email address, password (stored only as a secure hash), time zone and the practice you train with. Your practitioner creates your account or invites you.
Training and session information
- Session metrics worked out from your headset’s brainwave (EEG) signal: things like time in range, signal quality, the training protocol and sensor site, session length and rewards.
- Detailed brainwave traces for a session, used by your practitioner to fine-tune your plan.
- Session history, training plan and progress (for example badges and goals).
- Your answers to the short questions after each session.
The app does not record audio or video, and it doesn’t record what you watch. It only notes which streaming service you picked so it can open it for you.
Messages and scheduling
Messages you exchange with your practitioner or coach in the app, plus appointment and training-time requests.
Payment information
If you pay through Steadywave, payments are handled by Stripe. Your card details go straight to Stripe and never reach our servers. We only keep your Stripe customer and subscription IDs and your payment status.
Technical information
Basic error and connection logs that help us keep the service working, such as app version, device type and error messages. We keep personal health information and email addresses out of these logs. If you choose to send a diagnostics report from the app, it opens your own email app so you can see what you’re sending first, and emails and sign-in tokens are removed from it.
Permissions the Android app asks for
| Permission | Why |
|---|---|
| Bluetooth / Nearby devices | To find and connect to your neurofeedback headset (the Callibri sensor). The app doesn’t use this to work out your location. On older Android versions (10 and below), Android asks for location permission to scan for Bluetooth devices, but the app never reads your location. |
| Display over other apps | To show the gentle feedback (dimming and the in-range indicator) over your streaming app during a session. |
| Notifications | For local reminders about training times and to show that a session is running. |
| Foreground service / keep awake | So your session keeps running smoothly with the screen dimmed or while another app is open. |
| Internet | To sign in and sync your sessions and messages. |
How we use your information
- To run your training sessions and show your progress.
- So your practitioner or coach can review your sessions and adjust your plan.
- To send messages, reminders and account emails, such as session summaries, sign-in links and billing notices.
- To take payment, if you pay through the app.
- To keep the service secure and working.
We do not use your information for advertising. We do not sell or rent it, and we do not share it with data brokers or use third-party tracking or analytics.
Who we share it with
Your practitioner or coach at Sound Mind can see your account, sessions, answers and messages. Beyond them, we only use service providers that help us run Steadywave, and only for that purpose:
- Microsoft Azure (United States) hosts our servers, database and app downloads under a Business Associate Agreement (BAA).
- Paubox sends our emails using HIPAA-compliant encrypted email.
- Stripe processes payments.
We may also share information if the law requires it, or to protect someone’s safety.
How long we keep it
- Detailed brainwave traces are deleted automatically after a set period (90 days by default). Your practitioner can choose a different period.
- Session summaries, answers, messages and account details are kept while your account is active and afterwards as long as health-record laws require. Then they’re deleted.
- Error logs are kept for a short time, and billing records for as long as tax law requires.
Deleting your account
You can ask us to delete your Steadywave account and its data at any time:
- In the app: open Help (or your account menu) and tap Request account deletion, or
- Email hello@steadywavemind.com from the email address on your account, with the subject “Account deletion request”.
We’ll confirm your request and delete your account within 30 days. Some records may have to be kept longer where the law requires it, such as health-record or billing rules. If so, we keep them securely and only for that purpose, and we’ll tell you. Uninstalling the app doesn’t delete your account.
Your choices and rights
You can ask to see, correct or get a copy of your information, or ask us to delete it, by emailing hello@steadywavemind.com. You can turn off notifications and permissions at any time in your device settings, though some features (like connecting the headset) need them.
Security
Data is encrypted in transit (HTTPS) and at rest. Passwords are hashed, and the app keeps your sign-in in your device’s secure storage. Access is limited to the people who need it and is logged. No system is perfectly secure, but we work hard to protect your information. We will let you know if a breach affects you, as the law requires.
Children
Steadywave is not directed at children under 13. Minors may use Steadywave only with a parent or guardian’s permission, through an account set up by their practitioner, and the parent or guardian can make the requests described above for them.
Where your data is stored
Steadywave is offered in the United States, and our servers and data are hosted in the United States.
Changes to this policy
If we change this policy, we’ll update the date at the top. If the change is significant, we’ll tell you in the app or by email before it takes effect.
Contact
Sound Mind Counseling & Neurotherapy
108 Gateway Blvd, Ste 206, Mooresville, NC 28117
hello@steadywavemind.com