SteadyCAD Privacy Policy
Published / last updated: 2026-10-25
1. Operator and contact
DAYDAY operates SteadyCAD for Android. Privacy contact: Keunsol Kim (김큰솔), [email protected]. This policy concerns SteadyCAD; separate services have their own policies. You may request access, correction, deletion, restriction or withdrawal of consent. We verify only what is necessary to establish your identity or authority, respond under applicable law and explain any legal restriction.
2. Drawings and local information
Drawings, filenames, text, edits, recovery copies, recent-file locations, view history, settings and imported fonts are processed on your device. We do not automatically upload drawings or their names or paths to the account server, analytics or advertising services. Internal working copies and caches may remain after closing a drawing. With your permission, device drawing discovery indexes DWG/DXF names, paths, sizes and modification times locally. Android 11+ uses All files access; older supported versions use storage permissions. This does not grant access to other apps' private storage. Without that permission, you can still choose files through Browse and use recent work and the drawing library.
3. Files, sharing and fonts
Files opened from storage are imported as working copies. Renaming or deleting a file from device drawings affects the external original after the relevant action or confirmation. Sharing sends a read-only copy to the app you choose. Exported drawings, PDF and images are sent to your chosen destination. Cloud or messaging services you choose apply their own policies. Android automatic backup is disabled. Save important work outside the app. If a needed substitute font is not available locally or in your imported fonts, the app may download it from the official Google Fonts repository; the connection exposes the font URL, IP and network information, not drawing text. Downloaded fonts are cached locally.
4. Optional sign-in, devices and purchases
Google/Firebase Authentication processes the name, email, account identifier, Firebase UID and authentication state provided through optional Google sign-in. We do not receive your Google password. Firestore stores a random installation identifier, a hash used to verify device credentials, model/manufacturer and registration/check times, to manage a maximum of five devices. Supported versions also derive a matching hash from Android ID, scoped to this app and signed-in account, to recognize a previous installation. The raw Android ID is not sent to the server or analytics. Purchase records include product/base-plan identifiers, purchase tokens, pseudonymous purchase-account links, status, expiry, renewal and any administrator-provided entitlement. We do not receive card numbers, bank account numbers or the email of your Google Play payment account. Firebase App Check and Play Integrity process integrity evidence and tokens to reduce abuse.
5. Transfers and deletion
Account transfer authenticates both accounts, moves eligible subscription and device records, and deletes the former SteadyCAD account and its personal history. The receiving account retains completion date/device count and purchase records needed to continue service. Account deletion can be requested from the app account menu or at /delete-account/. The app prepares an email that you must send yourself. Requests remain available on the web after uninstalling. Deletion covers Firebase Authentication, registered devices, entitlement and purchase links, requests and personal history; a subscription already transferred to another account is preserved. SteadyCAD account deletion does not delete a Google account or cancel Google Play renewal. Cancel renewal in Google Play separately. Device-only drawings and external copies must be deleted where stored.
6. Optional analytics and crash diagnostics
Firebase Analytics measures feature/screen use, operation outcomes and timing, error categories, and sign-in/purchase steps. Firebase Crashlytics collects crash or diagnostic events, stack/location information, OS/app/device information and installation identifiers. Handled sign-in, registration and billing failures use limited stage/result/error classifications. The app excludes drawing content, filenames, paths, names, emails, Firebase UID and purchase tokens from custom diagnostic events; it does not set the sign-in UID as an Analytics or Crashlytics user ID. SDKs still process their documented technical information. In the European Economic Area, the United Kingdom and Switzerland, usage analytics and error reporting stay off until you agree. Outside those regions, the previous setting applies (on by default if no choice was saved); an earlier refusal is preserved. Reporting stays off until the connection region is known, including if the check fails. A region check uses HTTPS on our existing cad.dayday.kr domain through Cloudflare and reads only the IP-derived country code. The app does not retain the returned IP or trace response. This is an approximate connection region, not verified residence; VPNs can affect it. Your choice, policy version and choice time are saved on your device. Advertising choices are separate. In More → App info & language → App info → Usage analytics, you can turn it off without losing app features. This stops subsequent app analytics and Crashlytics reporting, resets local Analytics data and deletes unsent Crashlytics reports. It does not immediately remove reports already transmitted or stop the separate advertising SDK's necessary processing.
7. Advertising and external providers
AdMob/Google Mobile Ads may process IP-derived approximate location, app/ad interactions, diagnostics, advertising ID, app-set ID and other identifiers according to SDK, device, regional and consent settings. These support ad delivery, measurement and fraud prevention. App-set ID is not used for ad personalization. Google UMP handles applicable ad consent and privacy options. The app does not initialize/request ads before UMP permits it. When required, privacy options are available under More → App info & language → Ad privacy settings. Premium activation automatically switches ads off; if you subsequently turn ads on yourself, ads can be shown again. Disabling usage analytics alone does not disable ads. No additional mediation SDK is currently included. We do not send drawings as ad targeting data or sell personal information for money. Advertising-related disclosures may be considered sale, sharing or targeted advertising under some US state laws. Where offered, use Ad privacy settings to opt out of sale/sharing and targeted advertising. Contact [email protected] for applicable privacy-rights requests or an appeal; we handle these under applicable law. Service providers, chosen sharing recipients, consented disclosures and legal requirements may involve transfers.
8. Retention and disposal
Local drawings/settings remain while needed for work and recovery or until you delete app data/uninstall. Closing a file, clearing cache or removing a recent item does not delete every working copy. Exports and shared files remain at their destinations. Account/device/purchase links are retained for the account and service, then deleted after a verified deletion request except any necessary legal or dispute retention. Purchase-processing results and completed transfer results become eligible for automatic deletion after 24 hours; actual deletion may be delayed. Analytics retention follows the configured Google Analytics settings and deletion procedures. According to Firebase, Crashlytics retains stack traces and associated installation identifiers for 90 days before beginning removal from live and backup systems. Because app analytics/Crashlytics are not indexed by your login email/UID, account deletion does not automatically identify all past diagnostic records. Contact us about privacy requests. Correspondence and attachments are kept while needed to resolve your request, then deleted; any legal/dispute exception is limited to the necessary data, purpose and period and explained in the response. Provider backups follow provider deletion procedures.
9. International processing, children and security
Account Firestore and server functions use the Seoul region. Google LLC services including Authentication, Analytics, Crashlytics, AdMob, Play Integrity and Play may process necessary information in the United States and other infrastructure locations. HTTPS protects network transport. Login and subscriptions are optional; you can turn off analytics and use available ad choices. Declining account information prevents account/device-linked features. This general productivity tool is not designed primarily for children under 14. Applicable parental-consent requirements are respected when children's information requires consent; contact us if information was provided without necessary consent. The app requests no contacts, calls, SMS, microphone, camera or precise-location permission. App-private storage, disabled Android backup and access restrictions reduce exposure, but app-specific encryption of all drawings is not promised. Keep your device secure.
10. Website, communications and changes
Cloudflare processes IP, request/time and browser/device information to deliver and protect this website; mail providers process support messages. This policy page has no account form or AdMob SDK and its source adds no Google Analytics or AdSense script. Hosting security and traffic statistics follow hosting settings and provider policies. We update this policy when processing changes, publish the effective date and notify material changes in advance where required. Notices do not replace any required consent. The original Korean policy took effect on September 30, 2026; this revision was published on 2026-10-25. See the Korean policy and provider documents linked below for the corresponding details.