Privacy Policy
Last updated: 2026-10-30. This is a translation: if the two versions differ, the French version prevails.
1. Who we are and what this policy covers
Cadence is operated by Quentin Krenger and Charlotte Bondaz (“Cadence”, “we”, “us”). We are the controller of the personal data processed through mycadence.ch.
This policy supplements our Terms and Conditions. It explains what data Cadence collects, why, who we share it with, and the choices you have. It applies to the future Cadence mobile app, the mycadence.ch website and its waitlist, and related services. We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and Washington’s My Health My Data Act (MHMDA). Where these laws differ, we apply the strictest rule to everyone.
The app is still being built. Today, we only collect the waitlist data described in section 2. Everything else in this policy describes how the app will work when it opens. We will update this policy if that changes.
Cycle and health data are some of the most personal information you can share. Our approach is simple: we collect what the app needs to show you patterns in your own data, you control what counts, and you can export or delete everything at any time.
Cadence is not a medical device. It does not diagnose, treat or predict medical conditions, and it is not a contraceptive or fertility tool.
2. What data we collect
We collect three kinds of data: what you tell us, what your connected services send us, and basic technical data needed to run the app.
| Category | Examples | Source |
|---|---|---|
| Account and profile | Name, email address, goal, weekly target, units (km / mi), app settings | You |
| Cycle data | Period start and end dates, flow, average cycle and period length, past periods you add or correct, the phases you declare, contraception if you choose to tell us, the cycle day we calculate from your dates | You (manual logs) |
| Daily check-in | Mood, energy, symptoms (for example cramps, fatigue, bloating, headache, sore legs, cravings), free-text notes | You |
| Activity feedback | Effort rating after each run (RPE 1–10), runs you exclude from analysis | You |
| Activity data | Distance, pace, time, heart rate, elevation | Garmin Connect, Apple Health, Suunto, Polar (if you connect them) |
| Physiological data | Resting heart rate, heart rate variability (HRV), recovery, sleep, workouts | Whoop, Apple Health, Oura, Garmin Connect (if you connect them) |
| Technical data | Device type, operating system, app version, authentication tokens for connected services | Your device, connected services |
| Waitlist | Email address, first name (optional) | You, through the form on mycadence.ch |
Cycle data, RPE, symptoms, mood, heart rate, HRV, sleep and recovery are health data. Under the GDPR and the FADP, they are special category / sensitive personal data and receive extra protection. Under the MHMDA, they are consumer health data.
Waitlist. The waitlist form on mycadence.ch is provided by Infomaniak Newsletter, hosted in Switzerland. We use your email address (and first name, if you give it) only to tell you about the launch, invite you to the beta and occasionally send you project news. You confirm your sign-up by email (double opt-in) and can unsubscribe at any time with the link in every message. The waitlist collects no health data.
The app does not collect your location from your phone. If a connected service sends route maps or GPS traces with a run, we keep them in that run’s raw file, which is deleted with your data, and we use them neither for your insights nor for your plan.
Contraception. You can choose to tell us about your contraception, because it influences your cycle and its effects. We take it into account for your plan and insights, and we never advise you on a method.
You choose what to connect. Cadence works with manual logs alone. Each integration with another application or service (for example Garmin Connect, Whoop or Apple Health) is optional and needs its own specific consent, which we ask for when you connect it. Consenting to one integration never covers another. You can disconnect any integration at any time in your profile: we then delete its access tokens and stop syncing data from it. When you disconnect, we ask whether you want to keep or delete the data already imported.
3. Why we use your data and on what legal basis
We process health data only with your explicit consent. Withdrawing consent stops future processing but does not affect processing that took place before.
| Purpose | Data used | Legal basis (GDPR / FADP) |
|---|---|---|
| Create and run your account | Account and profile, technical data | Performance of our contract with you (Art. 6(1)(b) GDPR) |
| Show your cycle day and the phases you declare, and adapt your training plan to them | Cycle data | Explicit consent (Art. 9(2)(a) GDPR; Art. 6(7) FADP) |
| Show your personal insights, such as effort vs heart rate, heart rate at the same effort, resting HR and HRV by cycle day, symptom frequency by phase | Cycle data, check-ins, activity feedback, activity and physiological data | Explicit consent |
| Import data from services you connect | Activity and physiological data, authentication tokens | Explicit consent, given separately for each connected service |
| Personalise your training over time with machine learning (when available) | Cycle data, check-ins, activity feedback, activity and physiological data | Explicit, separate opt-in consent |
| Send waitlist emails (launch, beta invitation, project news) | Email address, first name | Consent, given through double opt-in |
| Keep the app secure and fix bugs | Technical data | Legitimate interest in a reliable and secure service (Art. 6(1)(f) GDPR) |
| Comply with the law and handle legal claims | Data needed for that purpose | Legal obligation; legitimate interest |
We do not predict your cycle. Cadence does not predict ovulation, periods or fertility. It works from the dates and phases you declare.
How insights work. Insights unlock only after you have logged three full cycles. Every insight compares you with your own history, never with other users or an “average” cycle.
Personalisation through machine learning. Over time, Cadence may use machine learning to adapt its training rules to you, based on your own history: how your effort, recovery and symptoms respond to training across your cycle. This is off until you opt in, separately from your other consents. You can withdraw it at any time; Cadence then goes back to its general rules, and we stop using your data for personalisation. These models do not diagnose anything and do not predict ovulation, periods or fertility.
Automated processing. Cadence calculates your insights and, if you opt in, personalised adjustments automatically. These calculations do not produce legal or similarly significant effects on you; they are suggestions you are free to ignore, correct or exclude.
4. What we do not do
- We do not sell your personal data, and we do not share it for advertising.
- We do not use your cycle or health data for targeted ads or profiling for marketing.
- We do not rank you against other users or publish leaderboards.
- We do not diagnose conditions or make fertility or contraception claims.
- We do not share your data with a coach, employer, insurer or anyone else without your explicit action.
- We do not show cycle details on your lock screen: notifications stay generic by default.
5. Who we share data with
We share personal data only in the cases below.
Services you connect. When you connect Garmin Connect, Oura, Polar, Suunto, Apple Health or Whoop, we receive data from that service with your authorisation. We do not send your cycle data back to them. Each service handles your data under its own privacy policy.
Service providers (processors). We use two providers: Microsoft Azure (hosting and storage of the app, in Switzerland) and Infomaniak (waitlist, newsletter and email, in Switzerland). They act only on our instructions, under a data processing agreement, and may not use your data for their own purposes.
Legal reasons. We may disclose data where required by law or a binding order from a competent authority, or to protect our rights. We will push back on requests that are not legally valid and, where allowed, tell you about them.
Business transfers. If Cadence is merged or sold, your data may be transferred to the new owner, who must respect this policy. We will inform you beforehand.
International transfers
Your data is stored in Switzerland. If a provider processes data in a country without an adequate level of protection, we use recognised safeguards such as the European Commission’s Standard Contractual Clauses (with the Swiss adaptations) and additional measures where needed.
6. Notifications and privacy settings
Lock-screen notifications are generic by default (for example “Time for your check-in”) and never name your phase or period. You can change lock-screen privacy, alerts and reminders at any time in your profile.
7. How we protect your data
We use encryption in transit (TLS) and at rest, and strict access controls on a need-to-know basis. On top of this:
- Identity and health data are kept apart. Your identity data (email address, name) and your health data (cycle, symptoms, RPE, data from your devices) are stored separately and linked only by a pseudonymous identifier.
- Your most sensitive data is encrypted by the application itself. Cycle data (flow, declared phase, contraception), symptoms and free-text notes are encrypted with a key of your own, which is itself protected by a master key kept in Azure Key Vault. When you delete your account, we delete your key, which makes this data permanently unreadable, including in backups.
- Every access to health data is logged, including access by the founders.
- Tokens for connected services are stored encrypted and are deleted when you disconnect the service.
No system is perfectly secure; if a breach affects your data and creates a risk for you, we will notify you and the competent authorities as required by law.
8. How long we keep your data
We keep your data only as long as we need it.
| Data | Retention |
|---|---|
| Account, cycle, check-in and activity data | As long as your account is active |
| After you delete your account | Deleted within 30 days from live systems and within 90 days from backups |
| Data from a disconnected service | As you choose when disconnecting: deleted, or kept until you delete it |
| Technical logs | 90 days |
| Waitlist | Until you unsubscribe |
9. Your rights and choices
You have the right to:
- Access your data and receive a copy.
- Correct inaccurate data, for example by editing or adding past periods.
- Delete your data and your account.
- Export your data in a portable, machine-readable format.
- Withdraw consent at any time, for health data processing, each connected service or machine-learning personalisation.
- Object to or restrict certain processing.
- Lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority of your country of residence.
You will be able to export or delete everything directly in your profile. Until the app opens, write to us (section 12).
If you live in Washington State (MHMDA). We ask for your consent separately to collect your consumer health data and to share it; we never bundle the two. We never sell your consumer health data. You can confirm whether we hold your consumer health data, access it, get the list of third parties and affiliates we have shared it with, withdraw your consent and have your data deleted. We do not use geofencing around places where health care is provided. To exercise these rights, use your profile or contact us (section 12).
Excluding an activity from analysis removes it from your insights but does not delete it.
10. Children
Cadence is not intended for children under 13. Users aged 13 to 15 need the permission and help of a parent or legal guardian to set up the privacy settings for their health data. We do not knowingly collect data from users who do not meet these conditions and will delete it if we learn of it.
11. Changes to this policy
We will tell you in the app before any significant change takes effect. If a change affects how we use health data, we will ask for your consent again.
12. Contact
Quentin Krenger and Charlotte Bondaz, contact@mycadence.ch