Privacy Policy

For the cane app only

Last updated: 14 October 2026

cane is a performance app. It reads signals from your wearable and your calendar, and shows you how your capacity changes across the day. This policy explains what cane holds, why, and what you can ask for.

Who is responsible

Cane Solutions, Inc., a Delaware corporation.
Contact: perform@oncane.com

What cane holds

    
• Account: your email address and the name you enter.
    
• Body signals: heart rate, heart-rate variability, sleep, steps, and workouts, from your wearable or from Apple Health, with the times they were recorded.
    
• Calendar: the meetings in the calendars you connect — their times, titles, location, description, organiser and attendees.
    
• App and device: your time zone, the app version, and technical logs needed to run the service.
    

Why cane holds it

To produce your capacity score and the patterns cane shows you, and to keep the service working. The legal basis is the contract between you and cane (Art. 6(1)(b) GDPR), and our legitimate interest in operating and securing the service (Art. 6(1)(f)). Body signals are health data: cane processes them on your explicit consent (Art. 9(2)(a) GDPR), which you give when you connect a wearable or Apple Health, and which you can withdraw at any time.

Calendar access is read-only

cane reads your calendars to see which meetings drain or restore you. cane never creates, changes or deletes anything in your calendar. You choose which calendars are read, and you can disconnect any of them at any time. Meeting titles, descriptions and attendees stay in your own account.

Google user data

If you connect a Google account, cane reads your Google Calendar using Google's API with the read-only scope calendar.readonly, and reads your email address and account identifier so your calendar is attached to the right cane account. cane never creates, changes or deletes anything in your Google account.

That data is used only to show you how your own meetings relate to your capacity. It is never sold, never used for advertising, never used to train any general-purpose model, and never given to a human to read except where you ask us to help you with a problem or the law requires it. It is stored in the European Union and deleted when you delete your account or disconnect the calendar.

cane's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your data

    
• You. Your data is stored under your account and is readable only by you.
    
• Your employer, if your company provides cane: only team-level aggregates, and only for groups of at least five people. Never your meetings, their titles, their attendees, or your individual scores.
    
• Service providers who run cane for us, under contract and instruction only: hosting and database (Supabase, Fly.io), and the calendar and wearable services you connect. A current list is available on request.
    
• Nobody else. cane does not sell your data and does not use it for advertising.
    

Where your data is processed

In the European Union, and in the United States where a provider operates there. Transfers outside the EU rely on the European Commission's Standard Contractual Clauses.

How long cane keeps it

Your data is kept while your account exists. If you delete your account, it is deleted within 30 days, except where the law requires us to keep records longer. When you disconnect a calendar, past meetings already read stay with your account; future ones stop being read.

Your rights

You can ask for a copy of your data, its correction or deletion, a restriction on its use, or to object to it. You can withdraw your consent at any time, which does not affect what happened before. You can also complain to a data protection authority. Write to perform@oncane.com and we will answer within one month.

Security

Data is encrypted in transit and at rest. Access is restricted to your own account by database-level rules. Access by our staff is limited to what is needed to operate the service.

Changes

If this policy changes, the date above changes with it, and we will tell you in the app for anything significant.