Last updated: October 28, 2026
This policy explains how Cadara ("Cadara," "we," "us") handles your information. It's written in plain language on purpose. Cadara is operated by Brightelm Studios Ltd. (formerly 2823683 Alberta Ltd.; the "Company"), a corporation based in Alberta, Canada. Our designated Privacy Officer is responsible for the Company's privacy compliance and can be reached at info@cadara.ca.
This policy covers the Cadara mobile app and this website. It is written to meet the openness and transparency expectations of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA), and to be honest and useful to people who use Cadara anywhere in the world.
Cadara does not require user accounts, passwords, or profile creation. We do not own, lease, or operate a centralized proprietary backend database designed to harvest, aggregate, or store your medication schedules, dosages, or personal health metrics. All such health data — your medicines, strengths, doses, schedules, reminder times, history, notes, photos, and supply counts — is processed and stored locally, strictly within the isolated storage environment of your private mobile device.
The Company operates standard cloud server infrastructure exclusively to host our public marketing website, process customer support emails, and validate anonymous transaction tokens with the Apple App Store. Because we do not operate a database that collects your medication records, we cannot read those records, store them, lose them in a breach of our systems, sell them, or hand them to advertisers. This is a deliberate design choice, not a setting you have to find. The limited exceptions — an optional medicine-name lookup, anything you choose to share, and support communications you send us — are described in sections 5, 7, and 15.
Medicine-name lookup and label scan. Two optional, on-by-default features can reach outside the app. When the lookup is on, Cadara can send medicine names only — never your name, and never your doses, schedules, or history — to OpenFDA, a public U.S. drug database, to retrieve name suggestions. Only the names you type when adding a medicine are sent. The same setting also controls the optional "Search drugs.com" link on a medicine's page, which opens that third-party site in your web browser with the medicine's name (your browser then connects to drugs.com directly, under drugs.com's own privacy practices). This is reference information only, not medical advice, and may be incomplete; you can turn the whole lookup feature off in Settings. The label scanner reads a photo of your medicine label entirely on your device and uploads nothing.
The information you keep in Cadara — your medications and how you take them — is sensitive health information, and we treat it that way. It never leaves your device except in the specific, you-initiated ways described below.
The Company is not a healthcare provider, medical clinic, or pharmacy. The Company is not a "custodian" or "health information custodian" of records under Canadian provincial health-information privacy legislation. Furthermore, the Company does not operate as a "covered entity" or "business associate" under the United States Health Insurance Portability and Accountability Act (HIPAA). Because your data is retained locally on your own hardware, your interactions with the application are not governed by institutional healthcare privacy regimes, and you remain in control of your own information at all times.
Cadara Pro is sold through the Apple App Store. Apple processes the payment. We receive only an anonymous confirmation token from Apple that a valid purchase or subscription exists, so the app can unlock Pro features — not your name, payment card, billing address, or Apple ID. Apple's handling of your purchase is governed by Apple's Privacy Policy.
To recognize your purchase across reinstalls and devices, Cadara uses RevenueCat, Inc. (USA) as a purchase-infrastructure provider. At app launch the app sends RevenueCat an anonymous app-generated identifier, your device model and OS version, the app version, your locale, and your App Store purchase receipt. RevenueCat never receives your name, contact details, or any medication data. See RevenueCat's privacy policy.
The Cadara app contains no advertising, no third-party trackers, and no third-party analytics SDKs. Its one third-party component, RevenueCat, only confirms purchases (see section 4). We do not build a profile of you and we do not follow you across other apps or the web. Your medicines, doses, and history are never used for analytics of any kind.
This website (cadara.ca) uses Cloudflare Web Analytics, a privacy-friendly, cookieless analytics tool, to understand aggregate traffic — such as which pages are viewed and where visitors arrive from. It sets no cookies, does not store your IP address, and does not track or profile individual visitors or follow you across other sites — it cannot identify you. We use no Google Analytics, no advertising, and no third-party tracking cookies. Separately, like virtually every website, our hosting provider automatically records standard server-log information — including your IP address, the pages you request, and basic browser and device details — which we use only to deliver the site reliably and keep it secure (see the lawful-basis note for EEA/UK residents in section 13). We do not use any of this to build a profile of you, and we do not sell or share it. This is entirely separate from the Cadara app and has no connection to, and no access to, anything you enter in the app.
If you have chosen, in your iPhone's own settings, to share app diagnostics with developers, Apple may provide us with aggregated, non-identifying crash and performance data. This is controlled entirely by you in iOS Settings and never includes your medication information.
You can create a backup of your data or export it to share. These actions are always started by you, the backup file can be protected with a passphrase only you know, and you choose where it goes (for example, your device, your own iCloud, or a file you save). We never receive a copy of your backups.
Some features let you send information out of the app — for example, emailing or texting a refill request to your pharmacy, or sharing a medication summary with your doctor. When you do this, the information travels from your device to the recipient you chose, using your own Mail or Messages. Once it leaves Cadara that way, it's handled by you and that recipient, not by us.
Reminders are scheduled and delivered locally by your device. They do not require an internet connection and are not routed through any server we operate.
Caregiver Mode runs entirely on a single device — there's no remote access, and caregiver data does not leave the device. When you turn Caregiver Mode on to help manage another adult's medicines, the app asks you to actively confirm that you have that person's documented consent to manage their medication information. If we introduce an optional remote sync feature in the future, it will be strictly opt-in, and we will update this policy and ask for your clear consent before any such feature collects or transmits your information.
Cadara is not directed at children and we do not knowingly collect information from children. An adult may use Cadara to help manage another adult's medicines; that information, like all data in Cadara, stays on the device.
Your data lives in the app's protected storage on your device. You can add an extra lock with Face ID, Touch ID, or a passcode, and protect backups with a passphrase. Because the information stays on your phone, keeping your device secure — a screen lock, up-to-date iOS, and not sharing your passcode — is the most important safeguard, and that part is in your hands.
Everything is on your device, so you have direct control at all times. You can view, edit, correct, export, or delete any of your information inside the app, and deleting the app removes its data from your phone — though copies may remain in anything you've exported or sent, and in your device's own iCloud or computer backups until those refresh. You manage those separately in iOS Settings.
Under PIPEDA and Alberta's PIPA, you have the right to ask an organization what personal information it holds about you, to correct it, and to withdraw consent. Because Cadara does not store your in-app medication data on our systems, we cannot retrieve, correct, or delete that app data for you. If you contact us, we may hold limited contact or support information, which you can ask us about as described in section 15.
Cadara is available worldwide through the App Store. The app's on-device design means we don't gather your health information, and the limited data described above is handled as follows:
For residents of the European Economic Area (EEA) and the United Kingdom, Brightelm Studios Ltd. acts as the Data Controller for limited technical metadata. We process technical internet server-log records (such as your IP address) based on our Legitimate Interests (GDPR Article 6(1)(f)) to maintain network security and infrastructure stability. We process customer support inquiries and anonymous App Store purchase tokens based on Contractual Necessity (GDPR Article 6(1)(b)) to fulfil requested services. When utilizing the drug-lookup feature, the application establishes a direct client-side connection from your device to the public, U.S. government-hosted OpenFDA registry (for typed names only). Your IP address is transmitted directly to the OpenFDA system to fulfil the search query; Cadara does not intermediate, intercept, or record this transaction. The optional "Search drugs.com" link opens that third-party website in your own browser, which connects to drugs.com directly under its own privacy terms. You possess the right to access, rectify, or request the erasure of any technical support data held by Cadara by contacting info@cadara.ca.
We do not sell your personal data or technical metadata, nor do we share your personal data with third parties for cross-context behavioral advertising or marketing purposes. California residents may submit requests to inspect, correct, or delete their technical interaction logs by emailing info@cadara.ca.
The Cadara app doesn't send your health data to us; it stays on your device.
If we update this policy, we'll post the new version here with a new "last updated" date. If we ever add a feature that changes how information is handled (such as an optional remote sync feature), we'll make that clear and ask for your consent before it takes effect.
For any privacy question or request, email our Privacy Officer at info@cadara.ca. If you email us — or use the contact form on this website — we receive your email address and whatever you choose to include, and we use it only to answer you and provide support. We keep these support communications — and any files you send us — only as long as we need them to handle your request, and in any case no longer than 90 days after it is resolved, after which we delete them.
If our support team asks for a backup file to diagnose a problem, you choose how to send it — encryption is your call, and the app gives you the option. Export it encrypted with a passphrase and we can't read it unless you also decide to share that passphrase with us; export it as a plain file and it's readable by anyone who opens it. We recommend the encrypted option.
If you're in Canada and aren't satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.