Privacy Policy

Effective Date: October 26, 2026
Application: Cadenza Functional Medicine Lifestyle Tracker ("the App")

1. Privacy-first design and identifiers

The App does not ask for or collect your name, email address, date of birth, phone number, street address, Social Security number, or medical record number in the tracker. Please do not enter identifying or sensitive medical details into the App.

The App uses a random six-character clinic pairing code and a SHA-256 hash of a random device token to associate a device with habit records. This design is intended to omit the direct identifiers listed in the HIPAA Safe Harbor standard, 45 CFR § 164.514(b)(2). The code and hash are pseudonymous identifiers; their use alone does not guarantee anonymity or establish that information is legally de-identified under HIPAA. The clinic is responsible for its own HIPAA obligations and any linkage it maintains in its separate medical record system.

The App does not request identity details in tracker forms. Network requests may include an IP address; the service uses a salted, daily-rotating hash for abuse-prevention rate limits rather than storing the address in plaintext. Hosting providers may process connection data to deliver the service.

2. Information stored on your device

• Age: If you enter your age for the estimated 80% maximum-heart-rate calculator, the value is stored strictly on your device in local app/browser storage (AsyncStorage/localStorage). It is not sent to the cloud database.
• Local app data: Your pairing code, device token, and unsynced habit check-ins are kept locally so the App can keep you signed in and support offline use.

3. Information synchronized to the service

When online, the App synchronizes your six-character pairing code, calendar dates, and numeric or completion values for habit check-ins. The server stores a SHA-256 hash of the device token for access control; it does not store the raw token in the database. Habit records are associated with a code that the clinic may be able to link to you in its separate records.

4. Payments

If you purchase an access code, Stripe processes payment through its checkout service under its own privacy and security terms. The App's habit database does not receive or store payment card details, billing name, or billing email.

5. Advertising and tracking

The App does not use third-party advertising trackers, advertising pixels, or analytics SDKs. It does not sell or rent habit data.

6. Retention and deletion

You can remove information stored locally by clearing the App's storage or removing the PWA from your device. To request deletion or deactivation of server-side records, contact Cadenza Medical Clinic and provide your pairing code.

7. Contact and related terms

Contact Cadenza Medical Clinic directly with questions about this policy. Read the Terms of Use & Medical Disclaimer.