Cadence Consumer Health Data Privacy Policy

1. Categories and sources

Information you choose to enter can include smoking or vaping use and purchase history, baseline habits, cravings, triggers, goals, reasons for change, reflections and journal entries, coping activities and feedback, and progress through lessons. Depending on what you write, a reflection can include physical or mental health information. The current app processes these activity records on your device and does not automatically upload them to our account or billing providers. Website quiz responses are processed in your browser and are not stored as account records.

Account and subscription information can include email, account and transaction identifiers, subscription status, and technical connection information. An identifier associated with use of Cadence can reveal that someone is seeking help with smoking or vaping. If you discuss your health in a support message, that message also contains health information.

Sources are you, your device or browser while you use the service, and authentication and billing providers supplying the information needed to verify an account or purchase. We do not obtain health profiles from data brokers.

2. Purposes

We process this information to provide the requested account, subscription, tracking, reflection, lesson, and coping-tool features; display progress from your entries; remember settings; deliver reminders you request; and respond to support or privacy requests. Device-only activity data is processed locally for those features. Account and purchase verification use the minimum information needed by the relevant service providers.

Where applicable law requires consent for collection or sharing beyond what is necessary to provide a requested service, we obtain that consent separately. This notice itself is not a consent request.

3. Sharing and recipients

Device-only activity records are not automatically shared with our service providers. Information that you choose to share through a system sharing feature goes to your selected recipient. Information you send to support is handled by Battise Built and its support-email provider.

Supabase processes account and authentication information. RevenueCat processes customer identifiers, subscription and transaction information. Stripe processes web payment and billing information. Website-hosting, security, and support-communications providers process information needed to deliver those functions. These processors may encounter information indicating use of Cadence even when they do not receive your activity records. They are authorized to process information on our behalf for the specified services, subject to appropriate obligations.

We do not sell consumer health data or disclose it to advertising platforms. We do not share consumer health data with affiliates or independent third parties for their own marketing. Any disclosure required by law remains subject to the applicable law and its exceptions.

4. Your rights and how to use them

Where applicable, you may request confirmation of whether we collect, share, or sell your consumer health data; access to that data and required information about recipients; withdrawal of consent to collection or sharing; and deletion of consumer health data. Email support@battisebuilt.com with "Consumer health privacy request" and describe the request. We will reasonably verify your identity and respond within the applicable legal time limits. You do not need to include detailed health information to make a request.

For device-only records, use Settings > Local data > Clear all local data. We cannot retrieve a cloud copy of records the current app never uploads, or remotely erase records on an offline device. We will explain which controls and provider deletion steps apply to your request. Where required, we communicate deletion requests to relevant processors and recipients, including applicable backup-deletion requirements. Withdrawing consent does not undo processing that was lawful before withdrawal, and removing data necessary for a feature may prevent that feature from operating.

If we deny a request and an appeal right applies, email support@battisebuilt.com with "Consumer health privacy appeal." We will review it and explain the outcome within the applicable deadline. Washington residents can contact the Washington Attorney General through https://www.atg.wa.gov/file-complaint.