Nothing is collected. There is no exception to find.

1. The short version

CadenceOne is a macOS app for managers who prepare, run and follow up on one-to-one meetings. It was built on one rule: the publisher never sees your data, because the publisher has no way to. There is no server, no online database, no login, and no support channel through which your notes could reach us.

This is not a promise about how we behave. It is a property of the app, and one you can check: CadenceOne runs in the macOS App Sandbox and does not request the network entitlement. macOS itself blocks it from opening an outbound connection. An app with no network permission cannot exfiltrate anything, whatever its code intends.

2. What we collect

Nothing. In concrete terms:

• We never ask for your name, e-mail address or phone number to use the app.
• The app creates no user account and has no authentication system of its own.
• There is no analytics, no telemetry, no crash reporter, no advertising identifier and no cookie.
• No third-party SDK of any kind is embedded. The app has no third-party dependency at all.
• We do not know how many one-to-ones you hold, who you hold them with, or whether you opened the app today.

3. What you write, and where it lives

You write into CadenceOne the things a manager writes: team members, meeting agendas, private notes, shared notes, decisions, promises, wins, and the templates you build. All of it is stored locally on your Mac, in the app's own sandbox container, at ~/Library/Containers/com.alexlombry.cadenceone/.

There is no iCloud sync. Unlike many apps that keep data “on device but synced”, CadenceOne writes to a local store and nowhere else. Your notes exist on the Mac you wrote them on, and stay there until you export or delete them.

Uninstalling the app removes that container, and with it your data. Nothing survives elsewhere, because nothing was ever anywhere else.

4. What your team sees

This is the part most tools get wrong, so it is worth stating plainly: the people you manage are never told anything by this app. They receive no invitation, no notification, no account request, and no way to see what you wrote. Your own manager gets no dashboard either - the app has no notion of an organisation.

Private notes and shareable notes are separate objects in the data model, not a checkbox that can be missed. The follow-up e-mail is assembled from the shareable half only, and it opens in your mail app as a draft, for you to read before you send it. You are always the one who decides that something leaves.

5. Permissions the app may ask for

Two, both optional, both requested only at the moment you ask for the feature. Refusing either leaves the rest of the app working exactly as before.

Calendar (write only)

If you ask CadenceOne to put a one-to-one in your calendar, macOS asks for write-only calendar access. Write-only means the app can add an event and cannot read your existing calendar. It never reads what is already there, and it never sends an invitation to anyone.

Notifications

CadenceOne can post a local reminder shortly before a scheduled one-to-one. It is produced on your Mac by macOS itself; no push server is involved, and no push token exists. By default the reminder names nobody: it says a one-to-one starts at a given time, so that a notification landing on a shared screen reveals nothing. You can choose to have the person's first name included, under Settings → Privacy.

6. On-device AI (optional)

On Macs that support Apple Intelligence, CadenceOne can offer to rewrite a follow-up e-mail more smoothly. That runs entirely through Apple's on-device foundation model: the text is processed on your Mac and is not sent to Apple, to us, or to any AI provider. No OpenAI, no Anthropic, no cloud model of any kind is involved.

The model is only ever handed content that is already marked shareable. A private note is never passed to it. Where the feature is unavailable, the button simply does not appear and nothing else changes.

7. Payment

CadenceOne is free for a trial period, then a single one-time purchase unlocks it permanently. There is no subscription. The purchase is handled entirely by Apple through StoreKit and the App Store: your card, your Apple Account and your billing details are Apple's business and never reach us. The app checks locally, with Apple, whether the purchase was made. We operate no licence server, because we operate no server.

8. Export, backup and sharing

Follow-up e-mails, Markdown and JSON exports, PDF summaries and full backups are all produced on your Mac. When you save one, macOS shows you a save panel and the file is written where you point it - the app can write nowhere else, which is what the sandbox guarantees. When you send a follow-up, it opens as a draft in your own mail app. At every one of those points, the destination is chosen by you.

9. Your rights (GDPR)

The GDPR grants you rights of access, rectification, erasure and portability over your personal data. Because the publisher holds none of your data, these rights are exercised directly in the app:

• Access and portability: the full JSON export returns everything you have written, in an open format the app can read back.
• Rectification: every record - person, meeting, note, promise - stays editable.
• Erasure: deleting a record, erasing everything from Settings, or uninstalling the app removes your data for good. We hold no copy to erase on our side.

One reminder that runs the other way: if you write notes about the people you manage, you are the one processing their personal data, and your employer's own policies apply to it. CadenceOne keeps that data on your machine and out of everyone else's hands, but it does not make you exempt.

10. Security

Your notes are protected by macOS: FileVault disk encryption, your account password, and the sandbox that keeps other apps out of CadenceOne's container. The app adds an optional lock, disabled by default, that asks for Touch ID or your Mac password after a period of inactivity - useful if you present from that Mac.

Because nothing transits through our servers, and we have none, there is no central store of one-to-one notes anywhere for anyone to breach. That is a structural property of the product, not a security measure we maintain.

11. Children

CadenceOne is a professional tool for people who manage a team. It does not target minors and knowingly collects no data about them - as it collects no data about anyone.

12. Changes to this policy

This policy may be updated to reflect changes in the app or in the law. The date at the top always says when. Any change that affects what leaves your Mac - and today, nothing does - will be called out in the App Store release notes, not quietly edited in here.

13. Contact

For any question about this policy or about your data:

• E-mail: contact@nativlab.app
• Publisher: NativLab - Alex Lombry, 173 rue de Courcelles, 75017 Paris, France