Cadence

Privacy Policy

Effective October 18, 2026 · Rogan Riley

This policy describes what Cadence actually stores and who else receives it. Cadence is operated by Rogan Riley. Questions and privacy requests go to rileyboys2007@gmail.com.

What Cadence stores

Account. Your email address, an optional name, a password hash (PBKDF2-SHA256 with a per-account salt), and the time you confirmed the email, once you do. Cadence does not store the password itself. Accounts created before email confirmation was added are treated as already confirmed.
Session. A random session token in an httpOnly cookie. The database stores only an HMAC of that token, plus when the session expires.
Your entries. Planner data lives in the entries table, keyed to your account. That includes journal text, sleep and energy notes, food logs, workouts, water, supplements, trading notes, checklists, baseline, settings, appearance, custom sections, and saved AI proposal previews (which can include the message you sent).
Push subscriptions. If you turn on notifications, Cadence stores the browser push subscription (endpoint and keys) so it can deliver reminders.
AI usage counts. A per-account and a global count of AI calls per UTC day. These rows are counters, not transcripts.
Short-lived security logs. Login, signup, reset, and password-check throttles are rows in login_attempts: a key and a counter. Email and IP keys are an HMAC of the email or of the IP network when the session secret is set (IPv6 is reduced to the /64 before that HMAC, not the full address). If the session secret is unset, the client-log rate key falls back to that same IP network. Error logs in client_log keep the kind of error, a short message, stack, page path, user agent, and a keyed HMAC of the IP address. Passwords and form values are not logged. Both tables are deleted after 7 days by the scheduled job. Expired password-reset and email-verification tokens are deleted on the same schedule.

What is not collected

Cadence does not run advertising or analytics trackers, and it does not sell personal information. There is no third-party analytics SDK in the app.

Third parties

Cloudflare. The app is hosted on Cloudflare Workers, with account data in Cloudflare D1. Cloudflare processes the connection, including the IP address, as the host.
OpenAI. AI features (the planner assistant, workout swaps, food lookup, onboarding polish, supplement summaries, and the weekly review) send the relevant request to OpenAI. Those requests are sent with store: false. Food lookup can also ask OpenAI to search the web using the food description you typed. Your password is not included. Workout swaps are planning suggestions, not medical advice.
Google Calendar. If you connect Google, Cadence stores an encrypted refresh token and a short-lived encrypted access token so it can read your primary calendar and, only if you turn it on, write Cadence time blocks to a separate Cadence calendar. The encryption key comes from the session secret. Disconnecting or deleting the account removes those tokens. Google receives the OAuth consent and the calendar calls. Calendar data is not sent to OpenAI except the busy times needed to plan the day you asked about.
Open-Meteo. When you load weather, an approximate latitude and longitude (rounded to two decimal places) is sent to Open-Meteo. That coordinate is not written to your account. It may sit in short-lived server memory so the same forecast is not fetched again for a few minutes.
Browser push services. If notifications are on, the push message goes through your browser’s push service (for example Apple, Google, or Mozilla, depending on the browser).
Resend. Password-reset email, email-verification email, and the “someone tried to sign up” note are sent through Resend when the operator has configured it. Resend then receives your email address and that message. If email is not configured, no message is sent.
Stripe (payments, coming). Free during early access. A paid plan of $4.99/month (auto-renewing, cancel anytime online) is coming. Subscription billing is not switched on, and Cadence does not send card numbers today. When billing is on, Stripe will process that subscription. Cadence does not plan to store your full card number.
Amazon Associates. Supplement pages can link to Amazon search results. If an associate tag is configured, the link includes it and Amazon can tell that the visit came from Cadence. Scanning a nutrition label does not send the photo to Amazon.

Nutrition-label OCR runs on your device with Tesseract.js. The photo is read in the browser and is not uploaded for recognition.

Export and deletion

In Settings, Keep a backup → Export my data downloads the entries saved in your account. Delete account asks for your current password and then permanently deletes the account and the rows it owns (entries, push subscriptions, AI counts, sessions, reset tokens, and any Google Calendar connection). Security-log rows and expired Calendar sign-in states age out on the 7-day purge. You can also email rileyboys2007@gmail.com to ask for a copy or for deletion.

California privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information is collected, to delete it, to correct it, and to opt out of the sale or sharing of personal information. Cadence does not sell personal information and does not share it for cross-context behavioral advertising. You will not be discriminated against for exercising these rights. Send requests to rileyboys2007@gmail.com. You may use an authorized agent if they provide proof of authorization. Cadence will confirm the request using the email on the account.

Children

Cadence is not for children under 13. Do not create an account if you are under 13. If you believe a child under 13 has an account, email rileyboys2007@gmail.com and it will be deleted.

Not medical advice

Cadence is a planner. Journal notes, sleep and energy check-ins, food estimates, workout logs, and supplement information are not medical advice, not a diagnosis, and not a medical device. Talk with a qualified clinician about health decisions.

Changes

If this policy changes, the effective date above will change. Continued use of Cadence after that date means the new policy applies to new activity.