Privacy Policy

Cadence is operated by Mohamed Shembesh, a sole trader (individual) based in Debrecen, Hungary, who is the data controller for the purposes of the GDPR. You can reach us at support@cadenceadhd.com, and our full postal address is available on request to that email.

This policy explains what personal data Cadence (“we”, “us”) processes, why, and the rights you have. It applies to the Cadence website at cadenceadhd.com and the Cadence iOS and Android apps.

• Performance of a contract — to create your account, store and sync your study data, run the AI features you request, and manage your subscription.
• Legitimate interests — to keep the service secure and working (error monitoring), prevent abuse, and send you onboarding/trial emails about a product you signed up for. You can opt out of those emails at any time.
• Legal obligation — to keep payment and tax records for the period required by law.
• Consent — where we ever rely on it, you can withdraw it at any time without affecting earlier processing.

Cadence’s lesson generation, study tutor, study map, and document text extraction are powered by Google’s Gemini AI. When you actively use one of these features, the relevant text (and, for scanned files, the image) is sent to Google to produce the output, and is handled under Google’s API terms.

• We do not use your study content to train any AI model of our own.
• Your account credentials, payment details, and check-in notes are not sent to the AI — only the study material you choose to generate from or ask about.

We do not sell your personal data and we do not share it for advertising. We use a small set of trusted service providers (processors) who handle data only on our instructions:

• Supabase — database, authentication, and hosting of your account and study data.
• Google (Gemini API) — the AI that generates lessons, tutoring, and text extraction.
• Stripe — payment processing on the web.
• RevenueCat and Apple App Store / Google Play — subscription and payment processing in the mobile apps.
• Resend — sending account and onboarding emails.
• Sentry — error and performance monitoring.
• Vercel — application hosting and delivery.

We may also disclose data if required by law, to protect our rights, or as part of a business transfer — in which case we will tell you.

Some of our providers (including Google, Stripe, and Supabase) may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the providers’ data-processing agreements. You can ask us for more detail at support@cadenceadhd.com.

• Your account and study data are kept for as long as your account is active. When you delete your account, they are permanently removed from our live systems, with residual copies purged from encrypted backups within 30 days.
• Payment and tax records are retained for the period required by Hungarian and EU law (generally up to 8 years).
• Error logs are retained on a short rolling window by Sentry.

If you are in the EU/EEA or UK, you have the right to:

• Access the personal data we hold about you.
• Rectify data that is wrong or incomplete.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Port your data — receive it in a machine-readable format.
• Withdraw consent at any time where we rely on it.

You can exercise the two most common rights yourself, instantly, from your profile: Download my data (access & portability) and Delete my account (erasure). For anything else, email support@cadenceadhd.com and we’ll respond within one month.

If you are a California resident, you have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of its “sale” or “sharing.” We do not sell or share your personal information (as those terms are defined under the CCPA/CPRA), and we will not discriminate against you for exercising your rights. Use the same tools in your profile, or email support@cadenceadhd.com.

Cadence is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has created an account, contact support@cadenceadhd.com and we will delete it.

We use only the strictly necessary cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies. See our Cookie Notice for the details.

• Data is encrypted in transit (HTTPS).
• Passwords are stored only as secure hashes; we never see them in plain text.
• Your study data is protected by row-level security, so each account can only ever access its own data.
• Card data is handled entirely by PCI-DSS-compliant payment providers and never touches our servers.

No system is perfectly secure, but we take these measures seriously and keep them under review.

We’ll update this page when our practices change and revise the “last updated” date above. For significant changes, we’ll give you notice in the app or by email.

Questions or requests about your data? Email support@cadenceadhd.com.

If you’re in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. In Hungary, that is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — naih.hu. We’d appreciate the chance to resolve it with you first.