Your training data stays on your phone.

Cadexa has no accounts, no analytics, no advertising and no server that stores your data. This page explains what the app records, where it goes and what choices you have.

What Cadexa records

• Profile: name (optional), weight, FTP, estimated maximum heart rate, observed peak heart rate, heart-rate response setting (for example medication that lowers heart rate), heart-rate alert, training goal.
• Sessions: time, power, cadence, speed, heart rate, targets, your effort rating, the pre-ride check-in answer in Heart Mode, and, for runs and walks with GPS enabled, location, altitude and distance.
• Devices: the Bluetooth identifiers of the trainer and heart-rate sensor you paired, so they reconnect automatically.

All of this is stored in the app's private storage on your phone. Deleting the app deletes it. Individual sessions can be deleted from the result screen.

Health data

Heart rate, weight, medication-related settings and check-in answers are health-related. Cadexa uses them only to coach you and to produce the report you can choose to share. They are never uploaded by Cadexa, never analysed on a server, and never sold or shared with third parties. The heart report and the share card leave your phone only when you tap Share and choose where to send them.

Location

With “GPS on runs and walks” enabled (Profile → Devices), Cadexa uses your location during a run or walk to record distance, pace, climbing and the track. It is not used indoors and not used when the app is idle. Location data is part of the session on your phone and is included in a session you choose to upload to Strava. Turn the setting off and Cadexa never asks for location.

Strava

If you connect Strava, you authorise Cadexa on Strava's site; Cadexa never sees your Strava password. The access token is stored in the phone's secure storage. Sessions are uploaded only when you tap “Sync to Strava” or turn on auto-upload. To let the app work without embedding a secret, the sign-in exchange passes through a small service run by us; it forwards the exchange to Strava and stores nothing, not your tokens and not your activities. Disconnecting Strava in Profile revokes the authorisation and deletes the token from the phone.

This website

cadexa.org sets no cookies and runs no analytics or scripts. The web server keeps standard access logs (IP address, page, time) for up to 14 days for security and troubleshooting. Fonts are loaded from Google Fonts, which sees your IP address when the page loads.

What we do not do

• No user accounts, no sign-up, no email collection.
• No analytics, crash reporting or advertising SDKs.
• No selling, renting or sharing of data.
• No AI service receives your data; coaching runs from fixed rules on the phone.

Permissions the app asks for

• Bluetooth: to connect to the trainer and heart-rate sensor.
• Location (while using the app): only for runs and walks, only when you have enabled it.
• Background audio and Bluetooth: so the coach keeps talking and the trainer stays connected while the screen is locked.

Children

Cadexa is not directed at children under 13 and does not knowingly collect data from them.

Changes and contact

If this policy changes, the date at the top changes and the new version is published here. Questions: ojbirke@gmail.com.

Kort på norsk

Cadexa lagrer alt på telefonen din. Ingen konto, ingen analyse, ingen annonser. Puls, vekt og medisinrelaterte innstillinger brukes bare til å trene deg og deles bare når du selv trykker Del. Posisjon brukes kun på løpe- og gåturer når du har slått det på. Strava-innlogging går via en liten tjeneste vi driver som ikke lagrer noe. Sletter du appen, er dataene borte.