Privacy Policy
Effective October 9, 2026
This policy explains what Cadant collects, why we collect it, who helps us run the service, and the choices you have. We do not sell your data, we do not track you across other companies’ apps or websites, and we do not train AI models on your content.
Who we are
Cadant is operated by Chief Labs LLC, 201 17th Street South, St Petersburg, FL 33712, United States (“Cadant,” “we,” “us”). Chief Labs LLC decides how your personal data is used, so under European and UK law it is the “controller” of that data.
For any privacy question or request, email privacy@cadant.app.
What this policy covers
This policy covers:
- the Cadant app for iPhone;
- the Cadant web app; and
- this website, cadant.app.
This website (our marketing, support and legal pages) sets no cookies and runs no analytics. It does not ask who you are, and it collects nothing about you beyond the basic request logs any web host keeps to deliver a page.
When you add your clients to Cadant, such as a brand contact’s name and email, you decide what to add and we process it on your behalf to run the service for you.
The data we collect
The table below lists every type of data Cadant collects. It matches our App Store privacy label item for item, using Apple’s names for each type. The web app collects the same types, plus the browser analytics described under Analytics and session recording.
| Data type | Examples | Purpose | Linked to you |
|---|---|---|---|
| Name | The name you sign up with. | App functionality | Yes |
| Email Address | The email you sign in with. | App functionality, analytics | Yes |
| Other Financial Info | Invoices, payments, expenses and income. Payout setup through Stripe if you take card payments. | App functionality | Yes |
| Photos or Videos | Receipts, attachments, a profile photo and images you send to Help chat. | App functionality | Yes |
| Other User Content | Deals, packages, notes, clients, calendar items and optional profile details such as your niche and birthday. | App functionality | Yes |
| Customer Support | The messages you send our team in Help chat. | App functionality | Yes |
| Purchase History | Your App Store subscription purchases, which our server checks with Apple. | App functionality | Yes |
| Coarse Location | The country and time zone you work from, used to show your currency and dates. | App functionality | Yes |
| User ID | The account ID we assign when you sign up. | App functionality, analytics | Yes |
| Product Interaction | Actions you take, such as creating a deal or an invoice, and its amount. | Analytics | Yes |
| Other Diagnostic Data | Error reports from our servers, with personal data removed. | App functionality | No |
None of these data types is used to track you. “Linked to you” means the data is tied to your account. Product interaction is linked: our servers log the actions you take, such as creating a deal or an invoice, against your account ID. The iPhone app itself contains no analytics, advertising or crash-reporting SDK. On the web app, if you accept analytics, PostHog may also record how you use pages in your browser.
What we do not see. We never see or store your full card number. Apple handles purchases in the iOS app and Stripe handles card payments on the web.
Technical data. Like any online service, our servers and providers receive your device’s IP address when it connects. We use it to deliver the service and to block abuse. We do not use it to track you.
What we never do
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- We do not track you across other companies’ apps or websites. The app does not use an advertising ID and shows no tracking prompt because it does no tracking.
- We do not train AI models on your content. Your deals, invoices, clients and notes are yours.
How we use your data
We use your data only for the purposes below. If you are in the European Economic Area or the UK, the law requires a “lawful basis” for each one. We list ours beside it.
| Purpose | Lawful basis |
|---|---|
| Running the service: your account, deals, invoices, calendar, clients and notes. | Contract |
| Billing: subscriptions, trials, card payments and payouts. | Contract |
| Support: answering you in Help chat and by email. | Contract, legitimate interests |
| Security and fraud prevention: keeping accounts safe and stopping abuse and bots. | Legitimate interests |
| Fixing bugs from crash and error reports. | Legitimate interests |
| Improving the product from the feature usage our servers log. | Legitimate interests |
| Browser analytics and session recording on the web app. | Consent |
| Product news and tips by email. You can unsubscribe at any time. | Consent or legitimate interests |
| Keeping tax and payment records, and answering lawful requests. | Legal obligation |
Our legitimate interests are running a secure, working service and fixing what breaks. Where we rely on consent, you can withdraw it at any time; see Your choices.
Service providers
We use the companies below to run Cadant. Each one receives only the data it needs for its job, under a contract that limits what it may do with that data.
| Provider | What it does for us |
|---|---|
| Supabase | Database, sign-in and file storage. |
| Vercel | Hosting for the web app, our servers and this website. |
| Stripe | Subscription payments on the web. Stripe Connect onboarding and payouts if you take card payments from clients. |
| Apple | In-app purchases and subscriptions on iPhone, and push notifications you turn on. |
| Resend | Delivers the emails the service sends. |
| PostHog | Product analytics: the feature usage our servers log, and browser analytics and session recording on the web app, which are based on consent. |
| Sentry | Error monitoring. Personal data is scrubbed before a report is sent. |
| OpenRouter and the AI model providers it routes to, such as Google | Runs AI features when you ask for them, such as reading the rows from a screenshot or receipt you upload. They receive only the content of that request. |
| Telegram | Relays your Help chat messages to our team. |
| Google Workspace | Our email, including the support and privacy inboxes. |
| EasyPost | Carrier tracking for products a brand ships you, from the tracking number you enter. |
| Brandfetch | Finds a brand’s logo from its name or website, so it shows on your deals. |
| Cloudflare Turnstile | Bot protection at sign-up. Receives a challenge token and your IP address. |
We may also disclose data if the law requires it, to protect our users or our rights, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.
Analytics and session recording
We use PostHog to understand which features people use and where they get stuck. Our servers send PostHog an event when you take certain actions, such as creating a deal or an invoice, tied to your account ID. These events carry details such as an amount or a type, not the text of your notes, messages or files. In the iPhone app this is the only analytics: the app has no analytics SDK and records no sessions.
On the web app, browser analytics are based on your consent: nothing is captured in your browser until you accept in the cookie banner.
Session recording. With your consent, PostHog may record how you move through the Cadant web app, such as the pages you open, the clicks you make and the errors you hit, so we can fix bugs and improve the product. Everything you type into a field is masked, so it is never recorded, and we mask other sensitive parts of the screen too. The iPhone app does not record sessions.
To turn analytics and session recording off, see Your choices.
Cookies and similar technologies
The web app uses cookies and storage on your device to keep you signed in and, if you allow it, for analytics. The iPhone app uses no cookies and keeps your sign-in in your device’s Keychain. Our Cookie Policy lists what we use and how to change your choice. This website sets no cookies.
How long we keep data
| Data | How long we keep it |
|---|---|
| Account details, content, uploads and Help chat messages | While your account is open. Deleted when you delete your account. |
| Invoice and payment records | As long as tax and accounting law requires. After you delete your account we keep only a copy of your invoice records with your name, address, email and other identifying details removed. Stripe and Apple keep their own payment records under their own policies. |
| Analytics and session recordings | A limited period, then deleted. Recordings expire sooner than usage events. |
| Crash and error reports | Up to 90 days. |
| Backups | Backups age out on a rolling schedule, so deleted data leaves them within 30 days. |
| Support emails | As long as we need them to help you, then deleted. |
Deleting your account
You can delete your account at any time, without contacting us:
- In the iPhone app: Settings → Account → Delete account. If your trial has ended, Delete account is also on the subscription screen.
- On the web: the same path, Settings → Account → Delete account.
- By email: write to privacy@cadant.app from the email on your account.
Deletion starts right away and cannot be undone. We delete your account, your content and your uploaded files, and cancel a web subscription. We keep only what the retention table above says we must, such as de-identified invoice records for tax law. Deleting your account does not cancel a subscription you bought through Apple; cancel that in your Apple account settings.
For the full steps and timeline, see Data deletion.
Your rights
Wherever you live, you can ask to see, correct, export or delete your data. Some laws give you more specific rights, listed below.
California (CCPA and CPRA)
- Right to know what personal information we collect, use and disclose.
- Right to delete personal information we hold, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We still treat a Global Privacy Control signal as an opt-out request.
- Right to non-discrimination. We will not treat you differently for using any of these rights.
- Authorized agents. Someone you authorize may make a request for you. We will ask for your signed permission and may ask you to confirm your identity with us directly.
European Economic Area and UK (GDPR and UK GDPR)
- Access a copy of your personal data.
- Rectification of data that is wrong or incomplete.
- Erasure of your data.
- Portability: receive your data in a machine-readable format.
- Restriction of how we use your data in some cases.
- Objection to use based on our legitimate interests.
- Withdraw consent at any time, without affecting earlier use.
- Complain to your local data protection authority. We would like the chance to help first, so please contact us.
How to use your rights
The fastest way to get your data is in the app: Settings → Account → Download your data, on iPhone or the web. For anything else, email privacy@cadant.app from the email on your account. We verify requests against that email. We answer within one month, or 45 days where California law applies, and will tell you if we need more time as the law allows.
International transfers
Chief Labs LLC is based in the United States, and we and our providers process data in the United States and other countries. When we transfer personal data out of the European Economic Area, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum, or another transfer mechanism the law allows.
Your choices
- Analytics. On the web app, browser analytics stay off until you accept them in the cookie banner, and you can change your choice in Cookie settings at any time. The iPhone app has no analytics setting because it runs no analytics on your device. To object to the feature usage our servers log, email privacy@cadant.app.
- Session recording. Recording is part of analytics. Turn analytics off and recording stops with it.
- Push notifications. On iPhone, turn them off in the iOS Settings app under Notifications → Cadant. On the web, turn them off in your browser’s site settings.
- Marketing email. Every product or tips email has an unsubscribe link. We will still send emails you need, such as receipts and security notices.
- Export. Settings → Account → Download your data.
- Delete. Settings → Account → Delete account. See Deleting your account.
Children
Cadant is not directed at anyone under 16, and we do not knowingly collect data from them. If we learn that someone under 16 has an account, we delete it. If you think a child has given us data, email privacy@cadant.app.
Security
We protect your data with encryption in transit and at rest, hashed passwords, row-level access rules in our database so each account can reach only its own data, and least-privilege access for our team. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Changes to this policy
When we change this policy, we post the new version here and update the effective date at the top. If a change is significant, we will also tell you by email or in the app before it takes effect.
Contact us
Email: privacy@cadant.app
Post: Chief Labs LLC, 201 17th Street South, St Petersburg, FL 33712, United States