Legal
Privacy policy
Last updated November 2, 2026
Draft. This is a plain-language draft for counsel to review before launch. It is not yet a binding agreement.
Cadence is private by default. This page says, in plain words, what we keep, who can see it, and what we never do.
What your circle can see
- Your first name and avatar.
- Whether you showed up this week: a full ring, a partial ring, or none.
- Prayer requests you choose to share with them, flares you send, and blessings you write to them.
That’s all. Your circle never sees your tasks, lessons, plans, Sunday review answers, or anything in your legacy.
Your pace is yours alone
The pace you choose (Steady, Committed, or All In), your weekly targets, and your kept counts are visible only to you. No one in your circle can work out which pace you chose.
Accountability
If you pick a man to keep you accountable and you go quiet for four days, he gets one message saying only that. It never names a pillar, a task, or your pace, and only he sees it. A flare carries no message: your brothers learn only your first name and the time you sent it.
Your legacy
- Everything in your legacy is private to you unless you mark it Kept, which lets the family members you chose see it.
- A sealed letter or recording is shown to no one but you until the day it opens. Not your family, not your trustee, and not the Cadence team through our content tools.
- Your trustee can only ask for your sealed items to be released. They never see what’s inside, and you get 14 days to cancel any request.
- You can export all of your legacy, including your original recordings, at any time.
Your journal
Your journal is yours alone. Nothing in Cadence shows it to your circle, your family, or the Cadence team’s content tools, and it never appears in a notification. It leaves Cadence only in your own export. The one exception is yours to make: you can let your trustee read it, but only after a release request has gone through and you didn’t cancel it. You can turn that off again any time.
Your words are encrypted
Your journal, the lines you write when you keep a pillar another way, your Sunday review answers, your letters, your prayers, and your conversations in the Forge are encrypted before they’re stored. A copy of our database or a backup shows only scrambled text. Everything travels to and from Cadence over an encrypted connection.
To be plain about it: this isn’t end-to-end encryption. Cadence’s servers unlock your words to show them to you, and to the people you chose (a family member for a Kept letter, your trustee if you let them read your journal). The titles of letters aren’t encrypted, so a sealed item can show its title on its placeholder.
Plans of your own
A plan you build in the Forge or send from the AI you connected is yours alone. A connected AI can see only what a plan needs (your pillars and the plans you’re running), never your journal, circle, prayers, pace, or legacy. A plan leaves you only through a link you make; whoever has it sees the plan and your first name, nothing else. Stop sharing and the link stops working.
AI and transcripts
Cadence asks before anything of yours goes to an AI or speech company, the first time it would, and names the company. Nothing goes until you tap Allow.
- The Forge writes with Claude, an AI from Anthropic. If you allow it, Cadence sends Anthropic what you type in the Forge, your first name, and your pillars, season and plans. Never your journal, circle, prayers, or legacy.
- If you allow it, Cadence sends Deepgram each answer you record, video or voice, to turn it into text for your family. If you don’t, your recording is kept and plays as ever, without a transcript.
You can turn either one off in Settings, under AI and transcripts, and nothing more is sent there. If the Forge writes something offensive, in a reply or in a plan it built you, tap Report under it.
Notifications and reminders
The reminders you set, the words you lead them with, your quiet hours, and your morning word are yours alone. Your circle, your family, and your trustee never see them. To reach your phone, a notification’s words pass through Expo’s push service and then Apple or Google; to reach an open Cadence tab, through Pusher, on a channel only you can join.
Notices about your own account always come: trustee and release notices, your trial ending, and a gift someone gives you. Every other notification follows a switch in Settings, and a reminder you set on a step is turned off on that step. Once a phone is signed out, on the phone itself or from Sessions in Settings, it gets no more.
Recordings and files
Your recordings and photos are stored in private storage. They are never public. The app gets short-lived links (15 minutes) to play them, and there are no permanent links to your media.
Invites and contacts
Cadence never uploads your contacts. When you invite a man, his phone number or email is encrypted, used only to deliver that invite, shown to no one but you, and erased 30 days after the invite closes. Text invites are sent from your own phone.
Reports and blocks
When you report a man, a prayer request, a blessing, a shared plan, or something the Forge wrote you, we keep a copy of that one item as it was when you reported it, with the reason and any note you add, encrypted, so the Cadence team can review it. The team sees only what was reported, never anything else of his or yours. He is never told who reported him. When you block a man, we keep only that you blocked him, so each of you is hidden from the other.
Who helps us run Cadence
These companies process data only to provide their part of Cadence, under contract, and never for their own advertising.
- Amazon Web Services stores your recordings and photos in private storage, and Laravel Forge runs our servers.
- Vercel hosts this site and the web app.
- Mailgun sends our email (sign-in codes, invites you send by email, receipts).
- Expo delivers notifications to your phone, and Pusher carries live updates inside the app.
- Deepgram turns your recorded answers into text so your family can read them, if you allow it.
- Anthropic writes plans in the Forge, if you allow it, from what you type there, your first name, and your pillars, season and plans.
- Sentry receives crash reports so we can fix what breaks. They don’t include what you write.
- Stripe handles payments on the web. Apple and Google handle purchases in their app stores, and RevenueCat tells us whether your membership is active. We never see your card.
Deleting your account
When you delete your account, you have 30 days to change your mind. After that we permanently remove your account, everything you wrote, your recordings and photos, and any export files. Links to plans you shared stop working the moment you ask.
If you sign in with Apple, we keep the token Apple gives us for that sign-in, encrypted, only so that when your account is removed we can tell Apple to end Cadence’s access. It goes with your account.
What we never do
- No public feed, likes, or leaderboards.
- We don’t sell your data or use it for advertising.
- We don’t read or scan what you write to flag it. The team reads something only when someone reports it.
- No ad trackers or analytics scripts.
How we count where men come from
If you arrive through a link with a code in it (from a church, a podcast, or one of our own campaigns), this site remembers that code for 30 days in a cookie, and your account notes it when you sign up. A link you followed from a brother (an invite, a circle code, or a shared plan) is noted the same way. We only ever look at the totals, never at one man.
Questions
Cadence is operated by Surfstack LLC, a Texas limited liability company, 17350 State Hwy 249, Ste 220 #37135, Houston, TX 77064. Write to hello@cadenceofman.com with any privacy question. A person will answer.

