Cadence
TermsPrivacy

Cadence / Legal

Privacy policy

What we collect, why we need it, who can see it, how long we keep it, and the choices and rights you have.

Last updated October 17, 2026

On this page01Who we are02Information we collect03How we use information04AI features05Who can see your information06Where information is processed07How long we keep information08How we protect information09Your choices and rights10Children, students and schools11Cookies and browser storage12Google user data13Changes to this policy14Contact

01Who we are

Cadence (trycadence.me) is operated by Leo, an individual based in Ontario, Canada (“Cadence”, “we”, “us”). This policy explains how we handle personal information when you use the Cadence website and app, and the emails we send about your account. Leo is responsible for Cadence’s privacy practices and acts as its privacy officer. You can reach us at cadence.supports@gmail.com.

In short:

  • We collect what is needed to run your account and group projects, and an optional study profile that you can edit or ask us to remove.
  • We do not sell personal information, show ads, or use advertising or third-party analytics trackers.
  • Assignment and submission text goes to our AI provider only when you use an AI feature. Neither we nor that provider use it to train AI models.
  • You can ask us for a copy of your information, to correct it, or to delete your account at any time.

02Information we collect

Information you give us

  • Account: your name, email address, sign-in method, and any profile picture you add. Passwords are handled by our authentication provider and are never visible to us.
  • Study profile (optional): education level, year of study, expected graduation year, country, region, school, subject, goals, group-work experience and workspace preferences. Birthday and academic average are optional within it.
  • Project content: assignment briefs and files and the text we extract from them, generated plans and tasks, group nicknames, comments, reactions, private messages, submissions and their files, review decisions and notes, invitation settings and project covers.
  • Support: what you send when you contact us.

Information from your teammates

Teammates can add content that mentions you, such as comments, review notes or files, and a leader can assign you tasks or remove you from a project.

Information from Google

If you sign in with Google, we receive your name, email address, profile picture and Google account identifier. If you import a Google Doc into a submission, you choose the document in Google’s picker and we receive only that document, exported as text. We do not store your Google access token.

Information collected automatically

  • Sign-in and activity records: your active sessions, the days you sign in (for the login streak), when you accepted our terms and which version, and project and plan-generation activity used to apply monthly allowances.
  • Technical data: IP address, browser and device details, and request times. We use IP addresses in short-lived, hashed form to limit abusive traffic. Our hosting and infrastructure providers also keep operational logs.
  • Cookies and browser storage: described in “Cookies and browser storage” below. We do not use advertising or analytics cookies.

03How we use information

We use personal information only for these purposes. Where a law asks for a legal basis, such as the GDPR, the basis is shown in brackets.

  • To provide Cadence: create and secure your account, run your projects, show your team’s work, deliver notifications, generate contribution reports, and remember your preferences (to perform our agreement with you).
  • To run the AI features you use: turn briefs into plans, apply plan changes the leader requests, and check submissions (to perform our agreement with you).
  • To apply plans and limits: count monthly project generations, including canceled or deleted ones, and apply plan or gift access (to perform our agreement with you).
  • To keep Cadence safe: prevent abuse and fraud, enforce our Terms of Use, investigate problems and protect users (our legitimate interest in a secure service).
  • To understand and improve Cadence: view aggregate usage statistics and service health in a restricted owner dashboard, and look up individual accounts when needed for support, gifts or abuse cases (our legitimate interest in running and improving the service).
  • To communicate with you: send verification codes, password resets and replies to your requests. We do not send marketing email (to perform our agreement with you).
  • To meet legal obligations and respond to lawful requests (legal obligation).

Study-profile answers set the workspace defaults you choose and contribute to aggregate statistics. They are never shown to teammates or sent to the AI provider. You can defer the study profile, edit your answers in Cadence, or ask us to remove them by emailing cadence.supports@gmail.com.

04AI features

Cadence uses open-weight language models hosted by Cloudflare Workers AI. When you use an AI feature, we send only what that feature needs: the assignment text to create a plan; the plan and the leader’s instruction to change it; or the task and submitted work to check a submission. Cloudflare states that it does not use this content to train AI models. We do not train AI models on your content either.

AI output can be wrong. When a leader turns on submission checks, a passing check marks the task complete automatically. Any other result sends the work to the leader, and you can always ask your leader to review your work directly. AI checks look for basic relevance and completeness. They are not grades and are not used for decisions with legal or similarly significant effects.

05Who can see your information

  • Your project team: members can see the shared plan, assignment files, tasks, owners, comments, and the status and AI summary of submissions. Full submission text and files are visible only to their author and the project leader. Private messages are visible only to their sender and recipient.
  • Contribution reports: when a project is complete, any member can download a PDF report of who owned which tasks, workload shares, submission dates and outcomes, and comment counts, limited to what that member can already see in Cadence. Members may share their report, for example with an instructor.
  • People with an invitation link: they see the project’s invitation card (title, description, cover image and member count) before joining.
  • Service providers: they process information on our behalf to run Cadence, under their own security and privacy terms (listed below).
  • Legal and safety: we may disclose information when required by law, or when reasonably necessary to protect someone’s safety, our users or Cadence.
  • Business changes: if Cadence is transferred to a new operator, your information may be transferred as part of it, and this policy will continue to apply until you are notified otherwise.
ProviderWhat it does for Cadence
VercelHosts and delivers the website and app.
SupabaseAuthentication, sign-in emails, the database and private file storage.
CloudflareRuns the AI models for plans, plan changes and submission checks.
GoogleGoogle sign-in and Google Doc import, when you choose them.

We do not sell personal information or share it for cross-context behavioural advertising, and no advertisers or data brokers receive it.

06Where information is processed

Our providers store and process information in the United States and other countries, which may be outside where you live. Laws there may differ from those in your country, and authorities there may be able to access information under their laws. We rely on our providers’ contractual commitments to protect it, including standard contractual clauses for transfers from the European Economic Area, the United Kingdom and Switzerland where they apply. Quebec residents: we consider the protection this gives before information about you leaves Quebec.

07How long we keep information

InformationHow long
Account and profileWhile your account exists. After you ask us to delete your account, we delete it within 30 days, apart from the exceptions below.
Study-profile answersUntil we fulfil your request to remove them or your account is deleted.
Project contentUntil the project’s leader deletes the project. Its active records are removed and associated files are removed by our cleanup process.
Uploads not attached to a projectAbout three hours.
Files from an unsuccessful plan generationSeven days after the last attempt, or sooner if you remove them.
Generation records (without file contents)Kept to calculate monthly allowances and account history.
Sign-in daysThe most recent 370 recorded UTC sign-in dates, which may span more than 370 calendar days.
Rate-limiting records (hashed)Used for up to 24 hours. Expired entries are removed during routine cleanup.
Usage statisticsDaily totals are pruned after 400 days. Lifetime totals and per-account generation totals are kept for usage history.
Service health recordsPruned after 30 days during routine cleanup.
Database backupsRetention follows our database provider’s configured backup schedule. Deleted information can remain in a backup until it expires.

We may keep information longer where the law requires it, or where it is reasonably needed to resolve a dispute, prevent abuse or keep a record of a security incident. When you delete your account, comments and submissions you added to other people’s projects may remain there in de-identified form so your teammates’ records stay complete. Ask us if you want them removed.

08How we protect information

We use safeguards suited to the information’s sensitivity. All connections use HTTPS. Files are kept in private storage and opened through short-lived links only after a permission check. Session tokens are stored hashed. Every private request is authenticated and checked against project permissions, and requests are rate-limited. Only authorized operational access is permitted.

No online service is completely secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and report it to the Privacy Commissioner of Canada and other authorities as the law requires.

09Your choices and rights

In Cadence you can edit your name, picture, preferences and notification settings; edit your study-profile answers; delete your own comments; delete projects you lead; and sign out on any device you use. To remove study-profile answers, email cadence.supports@gmail.com.

To make any other request, email cadence.supports@gmail.com. You can ask to access a copy of your personal information, receive it in a portable format, correct it, delete your account, withdraw consent, or object to or restrict certain processing. We will verify your identity before acting and reply within 30 days, or sooner where the law requires. If we cannot fully meet a request, for example because the law requires us to keep certain information, we will tell you why. You will not be treated differently for using your rights.

Canada

You have rights under the Personal Information Protection and Electronic Documents Act and, in Quebec, the Act respecting the protection of personal information in the private sector. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

European Economic Area, United Kingdom and Switzerland

You have the rights of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time. You can also complain to your local data protection authority.

California and other U.S. states

Depending on where you live, you may have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing. Cadence does not sell or share personal information, and uses sensitive information only to provide the service. You can use an authorized agent, and you can appeal a decision by replying to our response. We treat Global Privacy Control signals as an opt-out request. Because we do not track you across other sites, we do not respond differently to Do Not Track signals.

10Children, students and schools

Cadence is for people aged 13 or older and is not directed to children under 13. Users under the age of majority where they live need a parent or guardian’s permission. In Quebec, the consent of a parent or tutor is required for users under 14. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used Cadence, or you are a parent or guardian who wants to review or delete your child’s information, contact cadence.supports@gmail.com and we will act promptly.

Students use Cadence directly. It is not provided on behalf of, or under contract with, a school. A school that wants to use Cadence under its own agreement can contact us.

11Cookies and browser storage

Cadence uses only the cookies and browser storage it needs to work. There are no advertising, analytics or cross-site tracking cookies.

NamePurposeDuration
__Host-cadence_session (cadence_session in local development)Keeps you signed in to Cadence.Until you sign out; renewed for up to 400 days.
sb-… (Supabase)Verifies your sign-in with our authentication provider.Until you sign out; renewed for up to 400 days. Server-side session checks can end access sooner.
__Host-cadence_oauth (cadence_oauth in local development)Protects Google sign-in from forgery.10 minutes.
Browser storageRemembers interface choices, such as your theme, completed tours, celebrations already shown, and claim confirmations you chose to skip.Until you clear it.

Blocking these cookies will prevent you from signing in.

12Google user data

Cadence’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Doc import uses the “drive.file” permission, so Cadence can open only the document you select. That document’s text is used only for your submission and its check, is never used for advertising, is never used to train AI models, and is not transferred to anyone except as described in this policy.

13Changes to this policy

We will update this policy as Cadence changes, and change the date at the top. If a change materially affects how we handle your information, we will tell you in Cadence or by email before it takes effect, and ask you to accept it when you next sign in. Earlier versions are available on request.

14Contact

For privacy questions, requests or complaints, contact Cadence’s privacy officer at cadence.supports@gmail.com. You can also contact the authorities listed under “Your choices and rights”.

Questions about your privacy?

We’re here to help.

cadence.supports@gmail.com
© 2026 CadenceTerms of usePrivacy policyBack to Cadence