Privacy Policy
Cadevia Privacy Policy
This page is an English translation provided for convenience. The French version is the legally binding one; in case of discrepancy, the French text prevails.
Last updated: October 15, 2026
In brief
Cadevia is a sports and health app. It runs on your data: your sleep, your workouts, your meals. So let's be direct about what we do with it.
- Your health and training data stays on your iPhone and your watch. We do not store it on our servers. Ever.
- Our servers, and those of the providers working for us, hold only your email address, the first name you give us when you sign up, the status of your subscription, what is needed to manage your Strava connection if you link it (§3, §4.3), and app usage statistics that are linked to no account (§4.6) — you can turn these statistics off in your Profile.
- We sell nothing, we show no advertising, and there is no advertising tracker in the app.
- Four moments send data to our artificial intelligence provider: when you scan a meal, when you have a food estimated, when your training plan is composed, and when you talk to the Cadevia Coach. The app tells you before the first time, and nothing related to your health leaves without your consent. Nothing is kept there afterwards.
- Your blood test results never leave your phone.
The details are below. If anything is unclear, write to us: privacy@cadevia.app.
1. Who is responsible for your data
The data controller is Emeric SAUNIER, sole proprietor (entrepreneur individuel), 10 rue du Gers, 31170 Tournefeuille, France, registered under SIRET number 934 473 562 00023, publisher of the Cadevia app.
Contact for any question about your data: privacy@cadevia.app
We have not appointed a data protection officer (DPO): given the size of the business and the fact that we do not host health data, this appointment is not mandatory. We reassess this point regularly, and we will appoint one if the business changes scale.
2. What stays on your device — that is, almost everything
The following data is recorded only in the app, on your iPhone and your watch. It is not sent to our servers, nor backed up with us:
- your health measurements read from Apple Health (heart rate, variability, sleep, energy, weight, oxygen saturation, temperature);
- your workouts: GPS tracks, heart rate, power, cadence, pace, elevation, laps;
- your blood test results, which you enter yourself;
- your nutrition: meals, foods, photos of your dishes, water drunk;
- your athlete profile: weight, height, age, sex, goal, weak spots, injuries;
- your training plan and everything you check off in it;
- your Logbook (Carnet): life journal, habits, levers;
- your settings: watch screens, maps, alerts, sensors;
- the history of your conversations with the Cadevia Coach.
If you uninstall the app, this data disappears with it (unless you have backed it up yourself through your iPhone's iCloud backup, which is an Apple service to which we have no access).
Cadevia reads Apple Health and can write your workouts to it, with your permission, which you can withdraw at any time in the iOS settings. We do not use any data from Apple Health for advertising, marketing or commercial exploitation purposes, and we do not store it in iCloud.
2a. Your cycle, if you turn on “My cycle”
“My cycle” is an option: it stays off until you turn it on yourself, in your Profile. It serves one purpose only: letting your recovery take your cycle into account, because your temperature, your resting heart rate and your variability shift with it.
- What Cadevia reads, with a separate Apple Health permission (requested only when you turn the option on): your periods, your contraception, a pregnancy, breastfeeding, menopause, and the hot flashes and night sweats you log in Health.
- What Cadevia writes to Apple Health: the periods you log in Cadevia, and nothing else.
- What Cadevia keeps: what you declare in “My cycle” (your contraception, a pregnancy, breastfeeding, menopause, and their dates) and your Logbook answers. What it reads in Health, it does not copy: it reads it again.
- Where: on your iPhone (and in its backup, if you make one — see above). Your periods, your contraception and your situation never leave it: not to our servers, not to our usage statistics. The Cadevia Coach and its artificial intelligence only receive your scores, already adjusted — or “paused” during a pregnancy or breastfeeding and the three months after, without the reason. Your watch, your widgets and your lock screen only show those same scores, never your cycle.
- What the option does not do: it predicts nothing (no ovulation, no fertile window, no periods) and it is not a method of contraception.
- To stop: turn the option off in your Profile, or withdraw the permission in Settings › Health. With the option off, what you declared stays on your iPhone without being read, and the “My cycle” page shows it to you with a “Clear everything” button; your declarations can also be erased one by one, and all of them with your account.
This processing is based on your explicit consent (Article 9 GDPR), which you give by turning the option on and then accepting the Apple Health permission. If you refuse the permission, Cadevia reads nothing about your cycle (Apple doesn't tell us you refused: the option stays on, with nothing to read). Refusing it changes nothing in the rest of the app.
3. What is on our servers
If you sign up on our website before even creating an account (the beta waiting list), we keep your email address, your answer to "do you want the beta" and its date, your browser's language, and the social network that brought you here — Instagram, TikTok, YouTube, Facebook, or "direct" if you came without a tracked link — deduced from the link you clicked and read at the moment you sign up, never stored in a cookie nor kept from one page to the next, and without any data about you from a third party.
3.1 Your account
To sign you in and find your subscription on any device, we keep:
| Data | Why | Legal basis |
|---|---|---|
| Your email address | To identify you, to contact you about the service | Performance of the contract (Art. 6.1.b GDPR) |
| The first name you give us when you sign up (optional) | To know who we are dealing with when we run the service: a support question, the cost of artificial intelligence per account | Legitimate interest (Art. 6.1.f) — delete it from your profile in the app and it is deleted from your account too |
| Your password (in irreversibly encrypted form) or your "Sign in with Apple" identifier | To sign you in | Performance of the contract |
| Your subscription plan, the trial end date, the status of your subscription | To give you access to what you paid for | Performance of the contract |
| Your consent to receive our emails, and the date of that consent | To write to you only if you asked for it | Your consent (Art. 6.1.a) |
This hosting is provided by Supabase, on infrastructure located in the European Union. The status of your subscription is also held by RevenueCat, the provider that links the App Store to your account (§4.3). Your account emails (address confirmation, forgotten password) are sent to you by Resend (§4.3).
3.2 Running the service
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| A counter of calls to the artificial intelligence, linked to your account identifier | To prevent abuse and control our costs | Legitimate interest (Art. 6.1.f) | 48 hours, then automatically erased |
| The number of words consumed by your AI calls and their cost, with your account identifier | To manage the economic balance of the service | Legitimate interest | See §6 |
| The content of a problem report, if you send one from the app | To fix the problem you report to us | Legitimate interest | See §6 |
| Anonymous technical counters (crashes, performance, provided by iOS) | To fix what breaks | Legitimate interest | See §6 |
These elements are hosted by Cloudflare. No health data is stored there.
3.3 Your Strava connection, if you link it
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Your Strava athlete identifier | To find your connection, in particular when Strava tells us you have withdrawn access | Performance of the contract (Art. 6(1)(b) GDPR) | 30 days at most after you disconnect, including if access was withdrawn from you for abuse |
| The latest renewal key of your connection, encrypted | To be able to cut Cadevia's access to your Strava account immediately — at your request, or if we have to (end of beta, abuse) | Legitimate interest | Deleted as soon as you disconnect, and at the latest 30 days after you last used Strava in Cadevia; after that, we keep only a non-reversible fingerprint of it, which gives no access to your account and lets us recognize your connection if you come back — deleted when you disconnect |
| The permissions you granted, the dates of connection, last use and disconnection | To keep track of connections: Strava limits how many people can be connected to one app | Legitimate interest | 30 days after you disconnect |
None of your activities are stored on our servers: Cadevia does not read your Strava activities, and a workout you send to Strava goes directly from your iPhone to Strava. The encryption key is not stored with this data. Hosting: Supabase (European Union) and Cloudflare.
4. What goes to a third party, and when
4.1 Artificial intelligence (Google Gemini)
Some Cadevia features call an artificial intelligence model provided by Google (Gemini API). Here is exactly what is sent, and in which cases:
| When | What is sent | What you are asked first |
|---|---|---|
| You scan a meal or a label | The photo | Your explicit consent, the first time. You can decline and enter your meal by hand. |
| You have a food estimated by the AI | The text you typed (the food's name and quantity), nothing else | Your explicit consent, the first time. You can decline and enter the food by hand. |
| Your training plan is composed | Your level, your planned sessions, your training method and the scores of your last check-in (overall, legs, difficulty, motivation); with your consent, your weak spots, your injury note and what you wrote to your coach at the check-in | Your explicit consent, the first time, for anything related to your health. If you decline, your plan is composed without that information. |
| You talk to the Cadevia Coach | The summary of your day: sleep, recovery, heart rate, stress, energy, nutrition, planned workout and completed workouts (watch, iPhone, Apple Health) — and the photo you attach, if any | Your explicit consent, the first time. You can decline: the rest of the app works without it. |
Legal basis: your explicit consent within the meaning of Article 9.2.a of the GDPR, because this information is data concerning health. You can withdraw this consent at any time from your Profile; withdrawal does not affect what has already been processed.
What Google does with it: we use the Gemini API in its paid version. In this version, Google undertakes not to use the content we send it, nor the responses produced, to train or improve its models. Google processes this data on our behalf, as a processor, and retains it for a limited period for security and abuse-prevention purposes.
What we keep: nothing. Our server only relays — it keeps neither the photo, nor the text, nor the response. Only the number of words consumed and the cost are recorded (§3.2).
What NEVER goes to the AI:
- your blood test results — they stay on your phone, without exception;
- nothing that comes from Strava — this is an obligation under our agreement with Strava;
- the history of your conversations with the Coach beyond the current conversation.
4.2 Strava, if you connect your account
If you choose to link your Strava account, Cadevia uses it for one thing only: sending your workouts there, when you tap "Send to Strava". Cadevia does not read your Strava activities: the workouts you see in the app come from your watch, your iPhone and Apple Health.
- What goes to Strava: the workout you choose to send — its sport, date, duration, distance and what it measured (GPS track, heart rate, power, cadence, altitude). Nothing else, and never without your action. Once on Strava, it is governed by Strava's terms.
- What we keep from Strava: your athlete identifier (§3.3). When you connect, Strava also sends us some profile information, including your name: we do not keep it. After a workout is sent, we keep on your iPhone, for 7 days at most, the identifier of the activity created on Strava, to take you there ("View on Strava"); it is also deleted when you disconnect. That is all. This information is neither resold, nor shared, nor sent to any artificial intelligence.
- Authorization goes through Strava's official screen, and Cadevia only asks there for the right to upload workouts. You can withdraw it at any time from your Strava account (Settings → My Apps): Strava notifies us, we immediately delete your key, and the rest of your connection follows the retention periods in §3.3. On request to contact@cadevia.app, we confirm the deletion to you in writing. In Cadevia, "Disconnect" (Profile) does the same from the app: it withdraws Cadevia's access on Strava, deletes your keys from your iPhone, and the screen confirms the result. If it could not reach Strava (no network), it tells you so: then withdraw access from Strava, or write to us — failing that, the key kept by our server deletes itself at the latest 30 days after your last use.
- Your access keys are kept in your iPhone's secure keychain. Our server additionally keeps, encrypted, the latest renewal key of your connection: it is used only to cut Cadevia's access to your Strava account (§3.3).
- Strava may monitor and collect data about the use of its services through Cadevia ("Usage Data"), and may use it for any business purpose, internal or external, under its own terms.
- The processing of your data by Strava is governed by Strava's privacy policy, over which we have no control.
- Versions of Cadevia prior to the October 2026 update also imported your Strava activities to show them to you, keeping them on your iPhone only. These copies are deleted the first time the update is launched.
4.3 The other services called by the app
| Service | When | What is sent |
|---|---|---|
| Our map servers (Cloudflare) | Whenever a map is displayed | The requested map area and your IP address. The base map is our own; for France's detailed terrain, our server queries IGN itself, without passing on anything that identifies you. |
| RevenueCat | When the app opens (to know what your subscription gives you access to) and when you subscribe | Your Cadevia account identifier, your email address and your purchases (plan, dates, renewals), to link your App Store subscription to your account. And an Apple attribution token (AdServices), which only says whether an Apple Search Ads ad led to your install — no advertising identifier, no cross-app tracking. |
| Resend | To send you your account emails (address confirmation, forgotten password) and, if you signed up on the website, the waiting-list emails | Your email address and the content of the message. |
| Apple Weather (WeatherKit) | For the Home screen's weather and your hydration target, if you allowed location | Your location, without any Cadevia account identifier. |
| Open-Meteo | If Apple Weather does not respond; for a workout's weather and a route's weather | Coordinates rounded (to about 100 m for a workout, one kilometer otherwise), without any identifier. |
| Open-Meteo (elevation) | Only when you import a route that has no elevation | The points of that route, to find their elevation, without any identifier. |
| OpenFoodFacts | Barcode reading, food search | The barcode or the search term, and your IP address. |
| Thunderforest | Only if you yourself choose the "Outdoor" ("Plein air") base map | The requested map area and your IP address. |
| OpenFreeMap | Only if you yourself choose this base map | The requested map area and your IP address. |
| Amazon Web Services (public elevation dataset) | Only when you download an offline map area with its terrain | The requested area and your IP address. |
| Mapbox | To draw the map of an activity (a workout's thumbnail, the detail map, the end-of-workout summary), the terrain view of a route, and the "Satellite" base map if you choose it | The requested map area and your IP address. Mapbox's map kit also sends Mapbox usage data about its maps (approximate location while they are displayed, device model, a session identifier renewed every day), which Mapbox uses to improve its maps and produce aggregate statistics. You can opt out from the ⓘ button on these maps ("Mapbox Telemetry"). |
| Apple | Purchase, "Sign in with Apple", notifications | Apple is the seller of your subscription and processes the payment on its own behalf, under its own terms. |
| PostHog (audience measurement, servers in Frankfurt, Germany) | When you use the app, unless you object (§4.6) | Usage statistics linked to no account: which features are used, the tabs you open, crashes, technical information about the app and your iPhone, and an identifier drawn at random for this installation. Never your name, your email, your account, your location, nor anything about your health, your workouts or your meals. Details in §4.6. |
Our providers must protect your data as well as we do. Those that process data on our behalf (Supabase, Cloudflare, Google, RevenueCat, Resend, PostHog) are bound by a contract that requires protection at least equal to what this page describes, and forbids them from using it for any purpose other than providing the service to us. The other services listed here (Apple, Strava, Mapbox, OpenFoodFacts, Open-Meteo, Thunderforest, OpenFreeMap, Amazon Web Services) only receive what the table states, and process it under their own privacy policies.
4.4 Our internal publishing tool (YouTube, TikTok, Instagram)
Cadevia publishes its own videos on its own social media accounts from an internal dashboard (cockpit.cadevia.app), reserved for the publisher. This tool processes no data of the app's users: it only has access to Cadevia's own accounts, and nothing you do in the app enters it.
This tool uses the YouTube API Services. As such, and as YouTube requires:
- by using it, the publisher is bound by the YouTube Terms of Service;
- the data transmitted to Google is processed according to the Google Privacy Policy;
- the access granted to the tool can be revoked at any time from the Google account permissions page;
- what the tool reads and keeps is limited to our own channel: its identifier and name, the authorization tokens, the identifier of our videos and their figures — views, likes, comments and subscribers at the channel level (YouTube Analytics API, on our channel only), views and likes at the level of each video;
- the tool also displays the comments left under our own videos, with their author's public display name and their text, so that we can reply to them. These people are not our users: their comments serve only that purpose, are never cross-referenced with the app's data, and are erased after 30 days;
- everything that comes from the API is refreshed or deleted within 30 days, and all of it is erased as soon as the channel is unlinked or the authorization is revoked.
The same principles apply to our TikTok and Instagram accounts: only Cadevia's accounts are concerned, and no data of the app's users is sent there.
4.5 What we do not do
- We do not sell your data, to anyone, ever.
- We show no advertising and pass nothing on to an advertising network.
- We do not track your activity outside Cadevia, and the app contains no advertising tracker — which is why it never asks you for permission to "track" you. For our own account, we only measure the app's audience, with PostHog: which features are used, which ones crash — with no link to your account, nothing about your health, and you can object with one tap (§4.6). Two other limited elements, described in §4.3, relate to usage and we would rather name them: Mapbox's map kit, which measures the use of its own service, and Apple's attribution token, which only tells us whether an Apple ad led to your install, without any advertising identifier.
- We make no automated decision producing legal effects concerning you.
4.6 The app's audience measurement (PostHog)
To know which features are used, which ones nobody uses and which ones crash, the app sends usage statistics to PostHog, our audience measurement provider. Its servers are in Frankfurt, Germany.
What is sent:
- the use of a feature, never what it contains: for example "a workout was started", "a meal was added by photo", "the plans screen was viewed", "a purchase was cancelled". The list of these events is closed: the app cannot send anything else;
- the tab you open (Home, Screens, Activities, Coach, Profile);
- the installation, updates, opening and backgrounding of the app;
- crashes, so that we can fix them, and the spot on the screen where a button is tapped several times in a row without responding (without that button's text);
- technical information: the app version, the major iOS version (for example "26", never the details), the iPhone model, the language, the time zone, your plan (none, trial, Cadevia or Coach) and whether the watch app is installed;
- an identifier drawn at random for this installation, and a session identifier.
What is never sent: your name, your email address, your account identifier, your location — your IP address is not kept and is not used to locate you —, and no health data: no measurement, no score, no meal, no workout (sport, duration, distance), no weight, no questionnaire answer, nothing you write. Nothing that comes from Apple Health or Strava.
Why we don't ask for your consent: the law exempts from consent audience measurement that only serves to produce statistics for the publisher's own account, without tracking anyone elsewhere (Article 82 of the French Data Protection Act, loi Informatique et Libertés, as applied by the CNIL). These statistics rely on our legitimate interest in improving the app (Article 6.1.f of the GDPR). You can object at any time, with no consequence on the service.
How to object: in the app, Profile › Account & subscription › "Audience measurement". Turn it off: sending stops immediately, and your choice is remembered for your account on this iPhone. If you uninstall the app, this choice disappears with it: make it again after reinstalling.
If you were already using Cadevia before this update, the app tells you first, with a message when it opens and the option to turn the measurement off right away: nothing is sent before you have seen it (this is the promise of §11).
The identifier: it is linked to nothing that identifies you. The app renews it when you sign out or delete your account, and at the latest 13 months after it was created. PostHog deletes the statistics after 12 months. They are linked neither to your name, nor to your email, nor to your account: we therefore cannot find the ones that come from you (Article 11 of the GDPR), and we never try to.
What PostHog does with them: it processes them on our behalf, as a processor, under contract (§4.3). Its artificial intelligence assistant is disabled for our account, and we have refused to let our data be used to train an AI. PostHog is an American company: any transfers outside the European Union are governed (§7).
5. Cookies
The cadevia.app website is a static site that sets no cookies other than those strictly necessary for its display, and uses no audience measurement tool. No consent is therefore required. The mobile app does not use cookies.
The app does, however, keep on your iPhone the randomly drawn identifier of the audience measurement (§4.6). The law counts it among "trackers"; it is exempt from consent because it is only used to measure the app's audience. It is renewed at the latest every 13 months, and you can object at any time in your Profile (Account & subscription › "Audience measurement").
6. How long we keep your data
| Data | Retention |
|---|---|
| Your account (email, first name, subscription) | As long as your account exists, then 30 days after your deletion request (the time it takes for the deletion to propagate). The first name is also deleted as soon as you delete it from your profile in the app |
| Your purchase history at RevenueCat | As long as your account exists. On request (privacy@cadevia.app), we have it deleted at RevenueCat |
| Given accounting obligations, billing records | Held by Apple, not by us |
| AI call counter | 48 hours |
| Cost of AI calls (with account identifier) | 13 months, then aggregated without identifier |
| Problem report sent from the app | 24 months after resolution |
| Anonymous technical counters | 13 months |
| Consent to receive our emails | 3 years from your last contact with us |
| Your Strava connection: athlete identifier, granted permissions, dates | 30 days at most after you disconnect |
| The encrypted key of your Strava connection | Deleted as soon as you disconnect, and at the latest 30 days after you last used Strava in Cadevia |
| Its non-reversible fingerprint | Deleted as soon as you disconnect |
| App usage statistics (PostHog) | 12 months, then deleted by PostHog |
| Audience measurement identifier, on your iPhone | Renewed when you sign out or delete your account, and at the latest 13 months after it was created |
| Data on your device | As long as the app is installed — you stay in control |
7. Where your data is
Your account database (Supabase) is hosted in the European Union, our emails are sent from Ireland, and the app's usage statistics (PostHog) are hosted in Frankfurt, Germany.
Several services we use are established outside the European Union and may process there the data that §4 describes:
- in the United States: Google (Gemini), RevenueCat, Resend, Cloudflare (on whose network our servers run, as close to you as possible), Mapbox, Amazon Web Services and PostHog (whose servers are in Germany, but which may process these statistics in the United States to provide its service to us);
- in the United Kingdom: Thunderforest, and PostHog's British company.
These transfers are governed:
- to U.S. companies participating in the EU–U.S. Data Privacy Framework (Google, Cloudflare, Mapbox, Resend, PostHog), by the European Commission adequacy decision of July 10, 2023;
- to the others (RevenueCat), by the standard contractual clauses adopted by the European Commission (Decision 2021/914);
- to the United Kingdom, by the European Commission adequacy decision in force for that country.
We verified these grounds on October 1, 2026 (October 2, 2026 for PostHog), and we monitor how they evolve.
8. Your rights
You have the following rights over your personal data:
- Access — to know what data we hold and obtain a copy of it.
- Portability — to retrieve your data in a machine-readable format. An "Export my data" button is available in your Profile: it produces a file containing everything the app has recorded on your device.
- Rectification — to correct inaccurate data. Most of it can be edited directly in the app.
- Erasure — to delete your account and your data. A "Delete my account" button exists in your Profile: it really and permanently deletes your account from our servers. For the data on your device, simply uninstall the app. Deletion also withdraws Cadevia's access on Strava if the network allows it at that moment; otherwise your Strava connection — which is not linked to your Cadevia account — follows the retention periods in §3.3: to have it cut and deleted immediately, withdraw access from your Strava account, or write to us. The app's usage statistics, for their part, are linked to no account: deletion renews their identifier, and PostHog deletes them after 12 months (§4.6).
- Restriction and objection — to ask that a processing operation based on our legitimate interest be stopped. For audience measurement, no need to write to us: it is a switch in the app, Profile › Account & subscription › "Audience measurement", which stops sending immediately (§4.6).
- Withdrawal of consent — at any time, in particular for transmissions to the artificial intelligence and for our emails. Withdrawal does not call into question what was done before.
- Post-mortem directives — to define what happens to your data after your death (Article 85 of the French Data Protection Act, loi Informatique et Libertés).
How to exercise them: write to privacy@cadevia.app. We reply within one month, extendable by two months if the request is complex — in which case we tell you within the first month. We may ask you for proof of identity if we have reasonable doubt about the identity of the requester.
Complaint: if our reply does not satisfy you, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
9. How we protect your data
- Exchanges between the app and our servers are encrypted (HTTPS/TLS).
- The keys that give access to our data and to our artificial intelligence, payment and Strava providers are never present in the app: sensitive exchanges go through our intermediary server.
- Your Strava keys are stored in the iOS secure keychain. The only one our server keeps is encrypted, and the key that decrypts it is not stored with it.
- Each user can only read their own row in our account database (database-level isolation).
- Our administration accounts are protected by two-factor authentication.
- And above all: the best protection remains that your health data is not with us.
In the event of a data breach likely to result in a high risk to your rights, we will notify you as soon as possible, and we will notify the CNIL within 72 hours.
10. Minors
Cadevia is reserved for adults. The app processes health data and relies on a paid subscription: we do not intend it for minors and do not knowingly collect their data. If you notice that a minor has created an account, write to us at privacy@cadevia.app: we will delete it.
11. Changes to this policy
We may update this page if the service changes. In the event of a significant change — a new recipient, new data transmitted, a new purpose — we will notify you in the app before it takes effect, and we will ask for your consent again if the law requires it. The date of the last update appears at the top of this page.
12. Contact us
Emeric SAUNIER — 10 rue du Gers, 31170 Tournefeuille, France Questions about your data: privacy@cadevia.app Other questions: contact@cadevia.app