Privacy Policy

Last updated: 2026-07-13

Cadenza is a local-first Mac app with an optional hosted Web Sync service in private beta. This policy separates what happens on your Mac, on the public cadenzapp.com marketing site, and in Web Sync.

The short version: the Mac app keeps recordings on your Mac unless you enable Web Sync. Web Sync is optional, uses Cadenza-operated infrastructure, and its browser app is available to approved private-beta accounts at cadenzapp.com/app.

1. Public website and access logs

The web server for cadenzapp.com writes access logs containing:

• Your IP address, masked to a /24 block for IPv4 or /48 block for IPv6 before it is written to disk.
• Your user agent string.
• The URL path and query string you requested.
• The timestamp of the request.

Referer, Authorization, and Cookie headers are removed from the log format. Logs are retained for 30 days, then deleted by log rotation. The public marketing pages do not use analytics, advertising trackers, or a tag manager.

2. Data on your Mac

Audio recordings, transcripts, and summaries are stored locally on your Mac unless you explicitly enable Web Sync. Cadenza does not collect product analytics or send automatic crash reports.

The Mac app may send data directly to a provider when you choose a cloud-powered feature. For example, cloud transcription may send audio to the selected transcription provider, and summarisation may send transcript text to the selected AI provider. Local Whisper keeps transcription on the Mac. Provider credentials configured in the Mac app are stored in the macOS Keychain.

The Mac app also integrates directly with services such as Apple Calendar, Google Calendar, Notion, Craft, and Zoom when you enable the relevant feature. Those providers process data under their own privacy terms.

3. Optional Web account and Web Sync

The private Web beta uses Google sign-in and is available to approved beta accounts at cadenzapp.com/app. Cadenza receives the identity information needed to create and display your Web account, such as your Google account identifier, email address, display name, and profile image. After sign-in, the Web service uses a secure HttpOnly session cookie to keep you signed in.

When you explicitly enable Web Sync in the Mac app, Cadenza-operated infrastructure receives the recording data selected for sync:

• Uploaded audio is retained for 14 days after the upload is committed, then removed by the retention process.
• Recording metadata, transcripts, and summaries are retained until you request deletion or a future retention setting changes that policy.
• Server-held recording data is encrypted at rest. It is not end-to-end encrypted, so the service can process and return it for authorised Web features.

Web features may call third-party services through Cadenza servers when the feature requires a server-side integration. For example, Google OAuth is handled through the Web backend for account access, and private-beta Notion features may use server-side OAuth and proxy endpoints. The Mac app’s separately configured provider integrations continue to operate directly from the Mac unless their interface says otherwise.

4. Cookies and tracking

The public marketing site does not set analytics or advertising cookies. The private Web service uses the session cookie described above for authentication. Cadenza does not use that cookie for cross-site tracking or advertising.

5. Data deletion and account requests

• Delete local recordings: use Cadenza’s Move to Trash action or remove the relevant files from the app’s container on your Mac.
• Delete Web Sync data or the Web account: until self-service deletion is implemented, email hello@cadenzapp.com from the address associated with the account. After identity verification, the request will be handled manually.
• Disconnect an integration: disconnect it in Cadenza Settings, then revoke Cadenza in the provider’s own account settings if you also want to invalidate the provider token.
• Delete the Mac app: drag Cadenza to the Trash. You can also remove its container if you want to delete remaining local data.

6. Security and service status

Cadenza uses transport encryption for network traffic and encryption at rest for server-held recording data. No system can guarantee absolute security. The Web service is a private beta and may be interrupted while reliability, backup, deletion, and export controls are completed.

7. Future changes

This policy will be updated with a new date when data handling or beta-access terms change materially.

8. Contact

Questions, privacy requests, or deletion requests: hello@cadenzapp.com.