privacy.

Cadence is a service of Pulsar Studio, a design and code studio in Madrid, Spain. For the data described here, the controller is:

Controller

Pulsar Studio

Contact

hello@bypulsar.studio

Cadence is used by the staff of the clubs that work with us: the adults who run a club's site and messages. Their accounts are created by Cadence; there is no sign-up.

The people who sign up to a club's events are covered by that club's own privacy policy, not by this one.

Only what Cadence needs to work:

• Account. Your email and name. Your password is handled by Firebase Authentication, from Google: Cadence never sees it.
• Access. Which clubs you can open, and your role in each.
• Conversations. Your messages, the drafts Cadence writes and the plans you approve.
• Photos and videos you attach. Stored in your club's own database and storage, on Google Cloud in the Madrid region (europe-southwest1).
• Preferences. Your language, the AI model you choose and your custom instructions.
• Your own AI key, if you add one. Encrypted with AES-256-GCM and never shown in full again.
• Usage. Monthly counts of requests and tokens per AI provider, so we know what the service costs.
• Change history. Who changed what, so any change can be undone.
• Problems and ideas you send us. Your message, up to 5 photos and, if you leave the box ticked, diagnostics: device, app version and recent errors, with keys and tokens removed.
• Crash reports. Technical details of the error and of the device when the app fails. Never your name or your messages.
• AI consent. The version you accepted and when.

To run Cadence, keep it secure, help you when you ask for support and know what the service costs.

• Contract. Running the service is part of our agreement with your club and with you (article 6.1.b GDPR).
• Legitimate interest. Security, diagnostics and crash reports keep Cadence working and safe (article 6.1.f GDPR).

To work, Cadence sends your messages, photos and videos to an AI model:

• Google (Gemini API), by default.
• Anthropic or OpenAI, only if you add your own key. The terms of your account with them then apply.

The app asks for your permission before your first message. You can withdraw it at any time in Preferences.

Cadence pays for Google's Gemini API. Under its terms for paid use, Google processes what it receives only to give the answer: it does not use it to improve its products, and it may keep it for a limited time to detect abuse.

• Google Cloud and Firebase. Hosting, database, storage, sign-in and crash reports.
• Shopify. Only for clubs with a store, for their product data.

No advertising, no tracking, no selling of data, no profiling.

When the Cadence app closes unexpectedly or hits an error, it sends a crash report to Google (Firebase Crashlytics). Only the released app sends them; Cadence on the web does not.

• What it contains. The device model and its technical details (operating system version, memory and storage), the app version and build, when it happened, the technical trace of the error, random identifiers that Crashlytics generates for this installation of the app, and the club you had open.
• What it never contains. Your name, email, phone number or messages. Cadence does not link the report to your account.
• Why. To find and fix errors and crashes. The legal basis is our legitimate interest in keeping the app working and secure (article 6.1.f GDPR).
• Who. Google, as our processor, through Firebase Crashlytics, on its servers around the world. Firebase says it keeps them for 90 days and then starts deleting them.

Crash reports are not used for advertising or tracking.

Google, Anthropic and OpenAI are US companies. When your data reaches them, the transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses.

• While your club uses Cadence, or until you ask us to delete it.
• Conversations can be archived, but there is no delete button today: to delete them, ask us by email.
• Your own AI key is removed at once when you remove it.
• Crash reports: Google keeps them for 90 days, then starts deleting them.

You can ask us to access, correct or erase your data, to restrict or object to how we use it, and to receive it in a portable format. You can also withdraw your AI consent at any time in Preferences.

Accounts are not created in the app, so they are not deleted there either: to delete yours, ask us by email.

If you think we have not handled your data properly, you can complain to the Spanish data protection authority (AEPD, aepd.es).

• Every connection uses HTTPS.
• Your own AI keys are encrypted at rest.
• Each club's data lives in its own database and storage.
• Every change to a club's content is logged.

The version and date at the top of this page say which version you are reading. If the AI providers change, the app asks for your permission again.