Cado privacy policy

• Apple Health. Heart rate variability, resting heart rate, sleep, and your running workouts (with their step counts and, when available, heart rate, elevation and route). Cado uses them to read how ready you are, to show your runs and their routes for you to draw on, and to work out your usual cadence. Cado only reads from Health. It never writes to it. You choose what to allow, and you can change it any time in the Health app.
• Your location. Only while you are using the app, to find the weather for your outfit suggestion. Before it is used, your location is rounded to about a kilometre.
• Your photos. Only when you choose to put a photo behind a run drawing. Cado shows the photos from that day, or the one you pick. Exports are redrawn, so the photo's own metadata is not shared.
• Your calendar. Only if you turn on Calendar in Settings. Cado then creates a calendar called Cado and writes your run days into it. It never reads or changes anything else in your calendars.
• What you tell Cado. Your name, units, goal pace, heart rate, plan choice, edits, check-offs, notes, drawings, shoes and any recent race or age you add.

• On your phone. Your plan, runs, drawings and settings are stored on your device.
• In your iCloud. If you are signed in to iCloud, Cado keeps the same data in your private iCloud so it follows you to a new phone. Only you can access it. Cado's developer cannot see it.

Cado has no accounts and no servers of its own. Your data is not sent to the developer.

Cado talks to three outside services, and only for the reasons below.

• Open-Meteo (weather). Cado sends your rounded location to get a forecast. No name or other identifier is sent. See open-meteo.com for how they handle requests.
• Anthropic (the coach), only if you add your own key. If you paste an Anthropic API key into Settings, Cado sends what the coach needs to write about your day (for example your name, today's session, recent runs, and recovery numbers) to Anthropic using your key. Your key is stored in your phone's Keychain and is never sent anywhere except Anthropic. Anthropic's terms and privacy policy apply to those requests, and any cost is billed to you by Anthropic. Without a key, the coach runs on your phone using Apple's on-device model where available, or simple built-in rules. Nothing is sent.
• Strava, only if you connect it. Cado asks Strava for your runs and their routes so you can draw on them. It is read-only. What comes from Strava is held on your phone for up to seven days at a time, is never sent to the coach, and is deleted when you disconnect in Settings.

• It does not sell your data.
• It does not track you across other apps or websites.
• It does not show ads.
• It does not include analytics or crash-reporting tools.

• Turn off Health, location, photos or calendar access at any time in your phone's Settings.
• Turn off Calendar in Cado's Settings to delete the Cado calendar.
• Disconnect Strava in Settings.
• Remove your Anthropic key in Settings.
• Delete the app to remove its data from your phone. To remove what is in your iCloud, go to iPhone Settings, then your name, then iCloud, then Manage Storage, then Cado.

Cado is not directed at children under 13, and does not knowingly collect information from them.

If this policy changes, the date above changes, and significant changes will be mentioned in the app.

Questions or requests: hello@giangn.com