Security at Cadence

Where your data lives

Cadence’s database, which holds your account and your clients’ information, runs on Supabase in Canada, in Montréal. It is encrypted at rest and in transit. Cadence’s website, dashboard and apps are served by Vercel, which processes requests in the United States and other regions as they pass through.

Who can see it

Your account, on the devices you sign in. There are no passwords to steal: you sign in with a code to your email or with Google, and you can see every device signed in to your dashboard, and sign any of them out, under Settings.

Cadence’s team opens a clinic’s app only to help that clinic, and each time is written to your Access record in Settings, which is only ever added to, never changed. Direct access to the database is held by Cadence’s founder alone.

What we never do

• Sell your list, or share it with another business.
• Use it to train AI. When you turn on your app’s chat assistant, it reads a client’s message to answer it, and Anthropic, which runs it, doesn’t train on those messages.
• Message your clients without you. Every reminder, notification and email goes out under settings you chose, and offers go only to clients who said yes to them.

Your controls

• Download your clients, or your invite list, any time from Clients.
• Remove one client, or delete your whole list, from Clients. A client can also leave your app from their profile.
• See every device signed in to your dashboard, and sign any out, in Settings.
• Read your Access record in Settings: every sign-in, every download, import or removal, and every time Cadence’s team opened your app.
• When your plan ends or you close your account, we keep your data for 90 days so you can take it with you, then delete it.

Your clients’ side

Each client’s phone holds only their own card and points, signed for your app alone. A client confirms their email with a code before their card is theirs. Notifications arrive only with their consent, offers only to those who asked for them, and every email carries a one-click unsubscribe.

How Cadence is built

• Every page of your dashboard reads your clinic from your signed session, never from anything a browser sends.
• The database refuses everything but Cadence’s own server: row-level security on every table, with no public access.
• Sign-in codes last ten minutes and allow five tries, and repeated attempts are limited.
• Downloads and deletions ask for a fresh code when you signed in more than a day ago.
• Everything Cadence fetches from the web for you, such as your website for Import, is checked so it can only reach public addresses.
• Payments go to Stripe. Cadence never sees or stores your card number.

Who else processes it

Our Privacy Policy lists every service provider, what each does and where it is: Supabase (the database, Canada), Vercel (hosting, United States), Resend (email), Twilio (text messages), Stripe (billing), Anthropic (Import from your website and the chat assistant), Replicate (team photo cut-outs), and Apple, Google, Mozilla and Microsoft (delivering notifications).

If something goes wrong

If a breach affects your clients’ information, we tell you at the first reasonable opportunity, with what happened, what was affected and what we did, and we notify the Privacy Commissioner of Canada where the law requires it.

Report a problem

Found a security problem? Write to security@cadencepass.com. We answer within two business days and fix confirmed problems before talking about them. Please test with a free account of your own, never a real clinic’s app.