Cadence Privacy Policy
Cadence helps you through pregnancy, birth and your baby's early years. The app requires Cadence Pro after onboarding, including for contraction timing. An active contraction session is not interrupted by a purchase prompt. Cadence is made by Afriflow. You do not need an account to use it.
Data on your phone
What you add to Cadence is stored on your phone: your due date and how it was dated, preferences, check-ins and log entries (such as symptoms, weight, sleep, mood and baby's movements), contraction timer sessions, your baby's records (feeds, nappies, sleep, pumping, medicine and growth), notes, appointments, questions, packing lists, birth preferences, your people and their phone numbers, practice and learning progress, and the photos, moments and letters in your Journal. When you add someone from your contacts, Cadence keeps only their name and first phone number.
Photos you add to your Journal are copied into Cadence's storage on your phone and are not uploaded. When you add photos from earlier weeks, Cadence reads the date each photo was taken, on your phone, to suggest its week or month; you can move any photo before it is added. Keepsake images and PDFs, your birth preferences page and your visit summary are made on your phone and only leave it through your phone's share sheet or Messages, when you choose. Your Journal stays viewable, and you can export or delete it, whether or not you have a subscription.
Week stories, narration and other recordings come with the app. Nothing you hear is generated from your data. Reminders are scheduled on your phone.
Export my data in Settings makes one file on your phone, without photos, and hands it to your share sheet so you decide where it goes. Restore reads a file you choose. Your phone's own backups also include Cadence's data.
Cadence does not include AI drafts, scanning or voice recognition, and does not keep your records on its own servers. Copies leave your phone only in the ways this policy describes: what you share or export, your phone's backups, partner sharing through iCloud, and your circle through iCloud.
Apple Watch, widgets and Siri
The Apple Watch app, its complication and the widgets show and save what you log in Cadence on your own iPhone and Apple Watch. Siri and Shortcuts requests are handled by Apple under Apple's privacy terms, and what they log is saved on your phone. Apple privacy policy.
Partner sharing through iCloud
If you invite a partner, Cadence shares your baby's log with them through Apple's iCloud: each child's name if you add one and whether your baby has arrived, feeds, nappies, sleep, medicine and growth, the running feed timer, appointments, your visit questions and packing lists. If you record that a pregnancy has ended, that is shared too, so your partner's app goes quiet as well. Each shared change carries a short code for who made it, and people you share with see your name on what you log: the name you gave Cadence, which you can change in Settings, or otherwise the first name on your iCloud account.
These records are stored in your iCloud account and your partner's, not on Cadence's servers, and Cadence cannot read them. Your notes, your own health records (weight, symptoms, mood, sleep and movements), pumping, notes on a medicine or growth record, your Journal, letters and photos are never shared. You can stop sharing at any time; your partner then no longer receives updates.
Your circle through iCloud
If you invite family or friends to your circle, Cadence shares a small card with them through Apple's iCloud: the first name you give for the circle, whether you are pregnant or your baby has arrived, your due date or your baby's birth date, the size comparison set you chose, and whether sharing is live, paused or ended. Only the photos you choose to share go with it (your bump photos, and after the birth your baby's monthly photos), resized for their screens. The people you invite can see the card and those photos; they cannot change them or send anything back through Cadence. Once someone accepts, your app can show that they are following, using the first name on their iCloud account. If you record that a pregnancy has ended, the card ends too, the shared photos are removed, and their app shows nothing cheerful. If you start another pregnancy, nothing of it is shared with the circle you already have; that circle keeps what it last showed until you stop it.
The card and the photos are stored in your iCloud account and shared from there, not on Cadence's servers, and Cadence cannot read them. Their Cadence app keeps a copy of the shared photos on their phone, including one for the widget. Your notes, your health records, your Journal, letters, the rest of your photos, the baby's log and your other people are never part of the circle.
You can pause sharing at any time; their app then shows a neutral card until you resume. When you stop sharing, Cadence deletes the circle from your iCloud, so everyone in it loses access, and their app deletes the photos it kept the next time it connects. If your iPhone is offline when you stop, this finishes once it is back online. Cadence cannot remove copies someone saved outside the app, such as screenshots, or copies in backups their phone made earlier. Sharing again starts a new circle with new invitations. Someone who leaves your circle stops following it on that phone straight away, its photos are removed from their app, and Cadence asks iCloud to take them off your circle.
Bump Story videos are made on your phone from your own photos and the music in the app. Nothing is uploaded to make one; what you do with the video is up to you. A small Cadence mark on the last second can be turned off in Settings.
Content from our server
Cadence checks for Watch and listen content, and loads its video, audio and images, from our content delivery provider, Cloudflare. Some of the app's animations also download from our server through Cloudflare. Like any web request, this shares your device's IP address and the file requested with that provider. The requests carry no account identifiers or cookies, and nothing you record in Cadence is sent. Animations are fetched a whole stage at a time, so a request does not show your exact week or your baby's exact age, and they are kept in the app's cache on your phone. Episodes you download are kept on your phone until you delete them. Cloudflare privacy policy.
Messages and calls
When you choose to share, Cadence shows you the content first. Let someone know opens your phone's Messages app with the people and draft message you selected; you decide whether to send it. A Call button opens your phone's calling app with the selected number. Cadence does not send messages or place calls on its own.
Purchases
Apple processes purchases. RevenueCat receives purchase history and its own anonymous app user ID to validate purchases, restore Pro access and provide purchase analytics. When measurement is on, Cadence also sends RevenueCat the AppsFlyer install ID, whether the install was organic, and the anonymous PostHog ID, so subscription events can be attributed and counted. Cadence does not send pregnancy or baby records, notes, timer history, your people's details or message drafts to RevenueCat. Monthly and yearly subscriptions renew through Apple unless cancelled; previous lifetime purchases keep Pro access. RevenueCat privacy policy.
Usage and install measurement
The "Share usage and install measurement" setting is on by default. You can turn it off in Settings at any time.
When it is on, Cadence uses AppsFlyer for install attribution and sends fixed events about onboarding, its breath demo outcome, paywall screens, a subscription start and a selected trial feedback option. AppsFlyer also processes technical device, launch and campaign information, approximate location derived from IP addresses, and copies of Apple's aggregate attribution postbacks. RevenueCat reports subscription events, including trials, renewals and refunds, to AppsFlyer. Cadence does not collect the advertising identifier (IDFA) and does not ask to track you. Cadence does not send health records, due dates, notes, your people or typed feedback to AppsFlyer. AppsFlyer privacy policy.
When it is on, Cadence may use Superwall to show and measure the subscription offer. Cadence supplies the app version, the offer screen and whether Pro is active. Superwall may process technical device and anonymous SDK identifiers, approximate location derived from IP addresses, offer interactions and purchase metadata. Cadence does not send health records, pregnancy details, notes or typed feedback to Superwall. RevenueCat remains responsible for purchase access and restores. If Superwall is unavailable or measurement is off, Cadence uses its native offer. Superwall privacy policy.
When it is on, Cadence also uses PostHog (EU servers) for app usage analytics and error reports: which parts of the app are opened or finished (for example Learn, a lesson, Plan, Log, the check-in, breathing, the timer or Pebble's burrow); daily goals, quests and streak milestones reached, the streak goal you choose, rest stones and repairs used, Pebble's swims and taps on Pebble; your circle being opened, joined, paused or ended, how an invitation was sent, and a member starting their own journey; a photo added (from the camera or your library) and Bump Story videos viewed or made (the template, the number of frames, the length and whether the Cadence mark was on); which Watch and listen item is played, by its ID; onboarding finished and which onboarding voice played; the subscription screen shown; the app being installed, updated, opened or closed; app version, device model, iOS version and approximate country. These events contain no due dates, pregnancy week, timer records, notes, names or anything you typed, and no screen recordings. An error report holds only the kind of error, where in the app's code it happened, the screen name and the app version, never what you wrote or recorded. Cadence links the anonymous PostHog ID to its anonymous RevenueCat subscriber, and RevenueCat reports trials, purchases and renewals to PostHog. PostHog privacy policy.
Turning measurement off stops new AppsFlyer, Superwall and PostHog events at once and clears the links to RevenueCat. Reports already sent cannot be recalled. Apple's aggregate attribution postbacks are outside this setting. RevenueCat's attribution deletion must sync before future server reports stop. The crash and performance reports in the next section are not part of this setting.
Each provider keeps this data under its own privacy policy and retention terms, linked above.
Crashes, freezes and performance
To find and fix crashes, freezes and slow screens, Cadence uses two diagnostic services. They run whether or not measurement is on: they are not part of it, and there is no setting for them.
Sentry (EU servers) receives crash and app-freeze reports and a small sample of performance timings. Reports carry a known error type and code location, app version and, when safe, device model and iOS version. Error messages, source excerpts, network addresses, specific navigation paths and arbitrary breadcrumbs are removed on the phone. Expo (EAS Observe) receives app start and interactive timings, a general screen name and render time, grouped animation-load times and memory measurements, and your device model, iOS version and language setting. We use Expo for performance only; it does not receive Cadence error or crash reports. Animation reports use broad groups such as home and companion, never a personal stage or a specific companion variant. Neither service receives an account, names, notes, pregnancy or loss dates or details, photos, anything you typed, screenshots or screen recordings.
Neither service is used for advertising or tracking. Each associates its records with a random ID stored for this installation: Expo for performance records, and Sentry for its crash-free session counts. This links those records to the device under Apple's App Privacy rules, even though the ID is not your name or account. Each service keeps this data for the period set by its own plan and privacy policy. Sentry privacy policy · Expo privacy policy.
Your choices
Delete anything in the app, or delete the app to remove its data from your phone. Deleting the app does not cancel an Apple subscription, erase purchase records held by Apple or RevenueCat, or remove what you shared to your partner's iCloud; stop sharing first. We do not use your pregnancy or baby information for advertising. To ask about, or ask us to delete, measurement or purchase data linked to your install, email us.
Medical information
Cadence is informational only. It does not provide medical advice, diagnosis or predictions. Ask your healthcare provider or midwife about care decisions.
Earlier versions
Cadence 1.1.0 offered core contraction timing without a purchase. Some earlier 2.0.0 TestFlight builds offered optional cloud drafts and on-device speech recognition. In those builds, if you opted in and chose Organize or Scan, your selected text or photo went through Cadence's Supabase service to OpenAI. It may have contained pregnancy, health or identifying information. OpenAI returned an editable draft. Cadence did not automatically upload your entire book, timer history or microphone audio. Supabase created an anonymous session and stored its identifier, request counts and request times for abuse and cost controls. Infrastructure providers may have processed IP addresses and other technical request details. Cadence's functions did not save draft contents in a server database or intentionally log them. OpenAI's standard abuse-monitoring retention can last up to 30 days, with exceptions in its data controls. Deleting a local draft does not erase provider security records. OpenAI data controls · Supabase privacy policy.
Contact and changes
cadencesupport@afriflow.online
We update this page when our data practices change.