Privacy Policy

1. Who we are

Cadnce is operated by KM DIGITAL SOLUTIONS LTD, United Kingdom ("Cadnce", "we", "us" or "our"). This policy applies to cadnce.fit and the Cadnce apps for iPhone, Apple Watch, Android and Garmin devices.

2. Information processed on your device

With your permission, Cadnce reads selected health and fitness information to provide training summaries, recovery insights, trends and recommendations.

• Apple platforms: workouts, heart rate, resting heart rate, heart-rate variability, active energy, distances, steps, exercise time, sleep, VO2 max, respiratory rate, blood oxygen, wrist temperature, height, weight and date of birth. If you separately enable cycle-aware insights, Cadnce can also read the cycle, reproductive-health and symptom categories shown in Apple's permission screen.
• Android: exercise sessions, active calories, distance, steps, resting heart rate, heart-rate variability and sleep through Health Connect.
• Information you enter: training goals and preferences, birth year, gender, experience level, workout notes, perceived exertion and optional photos or voice-transcribed notes.

This information is used inside the app and stored locally where needed. Cadnce may write a workout completed on Apple Watch, or body mass when you explicitly use that feature, back to Apple Health. Android health access is currently read-only. Operating-system backups may include local app information according to your Apple or Google backup settings.

3. Garmin devices and Garmin Connect

Connect IQ companion app

When you link a compatible Garmin watch, Cadnce stores the selected watch identifier on your phone and sends a small training snapshot to the watch through Garmin Connect Mobile and the Connect IQ companion SDK. The snapshot contains the Cadnce score, recovery score, guidance headline, data-quality status and generation time. It does not contain your name, email address, raw heart-rate samples or workout route.

Optional Garmin Connect cloud connection

If this connection becomes available and you choose to enable it, Garmin will ask you to authorise access. Cadnce may then receive the Garmin connection identifier, authorisation tokens, selected activity and all-day health summaries, and information needed to send user-requested courses or workouts to Garmin. We use it only to provide Cadnce training, recovery, route, checkpoint, course and workout features.

• Raw Garmin push payloads or FIT files will be deleted after processing and within 24 hours.
• Authorisation tokens will be revoked and deleted within 24 hours after disconnection.
• Normalised Garmin summaries, courses and workouts will be retained while connected and deleted within 30 days after disconnection or a verified deletion request.
• Garmin health, activity, route and authorisation data will not be sent to Firebase Analytics, Firebase Crashlytics, advertising services or external generative-AI providers.

4. Analytics and diagnostics

Cadnce uses Google Firebase services to understand app reliability and, only when you opt in, general product usage.

• Firebase Analytics: disabled by default. If you consent, Cadnce sends events such as screens or features used, broad interaction categories, app and device information, and a pseudonymous installation identifier. We do not send raw health readings, workout notes, typed questions, photos, routes or Garmin API data. You can withdraw consent in the app's Privacy settings.
• Firebase Crashlytics: receives crash traces, app version, device and operating-system information, technical diagnostics and pseudonymous installation identifiers so we can diagnose failures. Crashlytics retains crash information and associated identifiers for 90 days before deletion begins.

Firebase services may process information on Google's global infrastructure. Google acts as our service provider for this processing. We do not use Cadnce information for third-party advertising and do not sell personal information.

5. On-device intelligence and speech

Cadnce recommendations are calculated on your device. On supported Apple devices, Cadnce may use Apple's on-device Foundation Models to rewrite an insight; it does not send that information to an external Cadnce AI service. Optional speech-to-text uses Apple's Speech framework. Depending on your device and settings, Apple may process speech on its servers. Cadnce stores the resulting note locally and does not retain the recording on our servers.

6. Website and beta signup

The website does not use advertising cookies or website analytics. If you submit the optional beta form, we collect your email address, consent record and submission time, plus any first name and training focus you choose to provide. We also create hashed forms of the requesting IP address and browser user-agent for duplicate detection, security and abuse prevention.

Beta signup records are encrypted and stored in AWS eu-west-2 (London) for up to 365 days unless you ask us to delete them sooner. Related security logs are retained for 30 days. The website loads its typeface from Google Fonts, so your browser may send Google standard request information such as its IP address and user-agent.

A beta signup is not a Cadnce app account. The current Cadnce apps do not require an account and do not collect an account email address.

7. Storage, security and international transfers

Website signup data is hosted in AWS London. The planned Garmin cloud integration will use AWS eu-west-1 (Ireland). We use encrypted HTTPS connections, encryption at rest and access controls appropriate to the service. Firebase and Apple may process information outside the United Kingdom. Where required, we rely on adequacy regulations or contractual safeguards for international transfers.

8. Legal bases

Where UK or EU data-protection law applies, we process optional analytics, beta marketing signup information and Garmin health information with your consent. We process limited technical diagnostics and security information for our legitimate interests in securing, maintaining and improving Cadnce. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

9. Sharing

We share information only as needed with service providers that operate Cadnce, including Amazon Web Services, Google Firebase, Apple, Google and Garmin, or when legally required. These providers process information under their own terms and applicable data-protection obligations. We do not sell personal information or share it with data brokers or advertising networks.

10. Retention and deletion

• Local app information remains until you delete it in the app, clear the app's data or uninstall the app, subject to your device backups.
• Beta signup information is retained for no more than 365 days.
• Firebase Analytics user-level and event-level information is retained for no more than 14 months; aggregated reports may remain after that information expires.
• Firebase Crashlytics retains crash information and associated identifiers for 90 days before deletion begins.
• Future Garmin cloud information follows the specific periods in section 3.

11. Your choices and rights

You can decline or revoke Apple Health, Health Connect, microphone, speech, notification, analytics and Garmin permissions using Cadnce or your device settings. You may also ask us to access, correct, export, restrict or delete personal information we hold about you, or object to certain processing. We may need to verify your request.

You may complain to the UK Information Commissioner's Office or your local data-protection authority.

12. Children

Cadnce is not directed to children under 13 and we do not knowingly collect their personal information through the website. A parent or guardian who believes a child has submitted information should contact us so we can delete it.

13. Changes to this policy

We may update this policy as Cadnce changes. We will publish the revised policy here, update the date above, and provide an additional notice where a change materially affects your choices.

14. Contact

For privacy questions or requests, contact KM DIGITAL SOLUTIONS LTD at support@kmdigital.dev.