privacy

What we know about you, and what we do with it

Last updated 9 August 2026

1. Who we are

Cadenza is operated by Global Online Marketing Agency Inc., a company registered in the United States. Our registered postal address is available on request — write to privacy@meetcadenza.com and we'll send it. For anything in this policy, write to privacy@meetcadenza.com and a person will answer.

Where the law requires it, we are the data controller for the information described here.

2. What we collect

Things you give us on purpose

• Your account. Email address, the name you'd like to be called, and your password in hashed form. We never see your actual password.
• What you say to Cadenza. Conversations, journal entries, gratitudes, and legacy interview sessions — as text. See the next section about audio.
• Your preferences. Your posture setting, when you'd like to be nudged, what you've told us lifts you and what doesn't.
• Anything you write to us. Support emails and the like.

Things the system records on its own

• Whether a nudge fired, and whether it was done. That is the whole of our engagement analytics. It exists so we can tell whether the product is working, and for no other purpose.
• Basic technical information — the type of device, rough time zone, error logs — kept briefly so we can fix things that break.

Payment

Handled entirely by our payment processor, Stripe. We never see or hold your card number. We keep a record that a subscription exists and when it renews.

3. What we deliberately don't collect

This list matters as much as the one above, and these are commitments rather than current circumstances.

• No voice recordings, ever. When you speak, the audio is transcribed and then discarded. We hold no biometric voice data, we build no voice model, and nobody can produce a recording of you saying something you did not say.
• No health or symptom data. We do not ask how your symptoms are, we do not score anything, and we do not keep a chart. Nothing here could end up in a medical or insurance file, because none of it exists.
• No physiologic data. Cadenza does not connect to a watch, a ring, or any sensor. No heart rate, no tremor readings, no sleep staging, no step counts. This is a permanent product commitment, not a feature we haven't got to yet.
• No medication information. Cadenza does not ask what you take or when.
• No advertising identifiers, no third-party ad trackers, no cross-site tracking.
• No precise location.

4. Why we hold it

• To be a companion that knows you. The memory is the product. Without it Cadenza starts over every morning.
• To reach out at the right times, in the way you've asked to be reached.
• To keep the service running and to fix it when it breaks.
• To take payment for the subscription.
• To answer you when you write to us.

Where the law requires a legal basis, ours is the performance of our contract with you, our legitimate interest in operating and securing the service, and your consent for anything you choose to share with another person.

We do not use what you say to Cadenza to train any AI model, ours or anyone else's, unless you have separately and explicitly opted in. Opting in is never required and can be withdrawn at any time.

5. How your words reach an AI model

Cadenza speaks and listens using AI models operated by OpenAI. To answer you, the relevant part of your conversation is sent to that provider and a response comes back.

Two things about that are worth stating plainly. First, only what is needed for that reply is sent — not your whole history. Second, we have contracted with the provider so that your content is not used to train their models.

Cadenza also uses speech recognition to turn your words into text. That processing happens on the audio only, and the audio is discarded once the text exists.

6. Who else sees anything

We do not sell your personal information and we do not share it for advertising. A small number of companies process data on our behalf so the service can exist at all:

• Supabase — the database where your account and entries are stored
• Render — the servers that run the application
• OpenAI — the AI models that speak and listen
• Stripe — subscriptions and billing
• Google — the emails we send you

Each is bound by contract to process the data only on our instructions. We will publish an up-to-date list here whenever it changes.

We may also disclose information if we're legally compelled to, or to protect someone's life or safety. If we're ever compelled and permitted to tell you, we will.

7. Sharing with your family

Nothing you say is visible to anyone else unless you choose to share it.

Sharing works one item at a time. One journal entry. One gratitude. One legacy session. There is no master switch that hands your whole account to somebody, and there never will be.

On Cadenza Together, two people each have their own companion. What is private on either side stays private on that side. A caregiver can pay for the subscription without gaining any access to the other person's entries. Paying does not confer ownership.

You can revoke any share at any time. Revoking removes it from the other person's view immediately.

8. What you can make us do

These apply to everyone, wherever you live. We're not going to make you prove a jurisdiction to get your own data.

• See it. Everything we hold about you, including your raw entries.
• Export it. In a portable format you can keep or take elsewhere.
• Correct it. Including anything Cadenza has remembered wrongly.
• Delete any part of it. One tap on any single item.
• Delete all of it. Close the account and the data goes with it.
• Withdraw consent for anything you previously agreed to.
• Object or complain. Write to us first, and we'd like the chance to fix it. You may also complain to your local data protection authority.

If you're in the EU or UK, these are your rights under the GDPR. If you're in California, the CCPA gives you rights to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined, so there is nothing to opt out of. We will not discriminate against you for exercising any right.

9. How long we keep things

• Audio: not at all. Discarded once transcribed.
• Your entries and memory: for as long as your account is open, because that's the point of them.
• When you delete an item: it is removed from every memory layer and from anything shared, and it does not go to a bin we can restore from.
• When you close your account: we delete your personal data within 30 days, other than what we must keep for tax and accounting records.
• Technical logs: 30 days.

10. How it's protected

• Row-level security enforced at the database, not in application code. Even if we shipped a bug tomorrow, one account still could not read another's.
• Encrypted in transit with TLS, and at rest.
• API rate limiting, CORS lockdown, CSP headers, protection against cross-site scripting and clickjacking, HSTS preload.
• Access to production data is limited to the people who need it to keep the service running.

No system is perfect. If there is ever a breach affecting your data, we will tell you and the relevant authority within the time the law requires, and we will tell you plainly what happened.

11. Children

Cadenza is for adults. It is not directed at anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

12. Where your data lives

Your data is stored in the United States. Some of our processors operate in other countries. Where data moves internationally, we rely on the European Commission’s Standard Contractual Clauses.

13. Changes to this policy

If we change something that matters, we will email you before it takes effect rather than quietly updating a date at the top of a page. The date at the top will change too.

14. How to reach a person

privacy@meetcadenza.com. If you need our postal address for a formal notice, ask and we'll provide it.

You'll get a person, not a form.