Privacy Policy

1. What we collect

Account details: your name, email address and sign-in credentials (passwords are stored only as secure hashes).

The life data you enter: goals, commitments, schedules, time blocks, logs, emotional check-ins, reflections, life events, calendar links and AI chat messages.

Basic technical data needed to run the service, such as device/browser type and reminder notification permission.

2. How we use it

To provide the service: building your schedule, sending reminders, showing your progress and reflecting your check-ins back to you.

When AI processing is enabled, relevant inputs are sent to our AI service provider to generate plans, reflections, emotional insights and chat answers. You can turn this processing off in Settings; AI-dependent features will then stop working.

We do not sell your personal data, and we do not use your private entries to advertise to you.

3. How your data is stored

Everything you enter is stored in a managed, access-controlled database. Every table uses row-level security rules, so each record can only be read by the account that owns it.

Data is encrypted in transit (HTTPS) and encrypted at rest by our hosting provider. Connection keys for outside services (for example calendar or Calendly links) are additionally encrypted with AES-256 before they are saved.

Passwords are never stored in readable form. Backup codes for two-step sign-in are stored only as one-way hashes.

Voice recordings are turned into text and immediately thrown away — audio is never saved.

4. Who can see your data

Your plan, check-ins, reflections, health data and chats are isolated to your account. Other Cadence users cannot see them.

Your stored entries are not end-to-end encrypted. Authorized infrastructure operators and service providers can technically access them when necessary to operate, secure, investigate abuse, comply with law, or support the service. Access should be limited and controlled, but we cannot honestly promise that no operator can ever see plaintext data.

If you connect an external calendar, events from that calendar are imported so the planner can schedule around them. That link is stored privately in your account.

5. Sharing with a practitioner (patients)

A therapist or practitioner sees nothing about you by default. They can only see your data after you accept their invitation and explicitly choose what to share.

You can see exactly which practitioner has access and to what. You can press Stop sharing at any time — access ends immediately — or Stop and delete to also remove the shared records.

Practitioners cannot edit your plan, read your private AI chats, or see anything you did not choose to share. Their access is tied to their own verified account.

We never share patient data with employers, insurers, advertisers or data brokers.

6. Your AI companion

Your companion's memories belong only to you. You can view, edit or delete what it remembers, or turn AI processing off entirely in Settings.

The AI only suggests changes to your schedule. Nothing changes until you tap Apply, and imported calendar meetings are never moved.

Body signals from health data are shown as observations, never as a diagnosis. Cadence is not a medical service and does not replace a professional.

7. Notifications and reminders

Reminders are delivered using your device's notification system or email, only if you allow it. You can turn them off at any time in Settings.

8. Your choices and rights

You can edit app data and clear chat, emotion check-ins, or imported calendar data in Settings.

You can download a machine-readable copy of your account data and permanently delete your account in Settings. Backup copies may remain temporarily until routine backup expiration or where retention is legally required.

Depending on where you live, you may have additional rights under laws such as GDPR or CCPA — we will honour valid requests.

9. Account security

You can turn on two-step sign-in in Settings. After your password, you'll also enter a 6-digit code from an authenticator app, so a stolen password alone can't open your account. One-time backup codes keep you from being locked out if you lose your phone.

We generally keep your data while your account is active. Minimal safety-event metadata is assigned a 90-day expiry for deletion. No system is perfectly secure — please use a unique password.

10. Safety and emergency limits

Cadence may interrupt chat or a check-in and show crisis resources when clear urgent language appears. It can miss danger and cannot monitor you continuously, verify your location, contact emergency services, or guarantee a response.

Cadence stores only a minimal category, source and timestamp for a detected safety event rather than creating a second copy of the message. We do not automatically report a user to authorities. If danger may be immediate, contact local emergency services yourself.

An optional trusted contact is stored only for you to use. Cadence will not contact or share with that person without your confirmation.

11. Children

Cadence is not directed at children under 16, and we do not knowingly collect their data.

12. Changes to this policy

If we change how we handle your data, we will update this page and revise the date above. Continued use after changes means you accept the updated policy.