Legal

Privacy Policy

Last updated: 24 September 2026

This policy explains what information Cherryy (https://cherryy.app) collects, how we use it, who we share it with, and the choices you have. Cherryy is operated by Cherryy, based in the Czech Republic, which is the controller of your personal data. You can reach us at cherryysupport@gmail.com.

1. Information we collect

Information from Google Sign-In

You sign in to Cherryy with your Google account. When you do, Google shares the following with us, and nothing else:

• your name,
• your email address,
• your profile picture.

We do not request access to your Gmail, Google Drive, Calendar, contacts, or any other Google service, and we never receive your Google password.

Information you create in Cherryy

• Posts, captions, comments, and other content you write.
• Images, videos, and documents you upload to posts.
• Workspace details: its name, its members and their roles, board columns, and settings.
• Integration keys you choose to connect, such as a Zernio API key. These are stored on our servers and are never shown back in full in the app.

Technical information

We use cookies that are strictly necessary to keep you signed in. Your browser also stores a few preferences locally, such as your theme and board layout. We do not use advertising cookies or third-party tracking or analytics scripts. Our hosting and database providers keep standard server logs (such as IP address and request time) for security and troubleshooting.

2. How we use your information

• To create your account and sign you in.
• To show your name and profile picture to members of the workspaces you belong to.
• To provide the service: storing your posts, showing them on your board, calendar, and library, and scheduling them when you ask us to.
• To contact you about your account, security, or important changes to the service.
• To keep Cherryy secure and to fix problems.

3. How we use Google user data

Cherryy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use your Google name, email address, and profile picture only to create and identify your Cherryy account.
• We do not sell Google user data, and we do not use it for advertising.
• We do not use Google user data to train artificial intelligence or machine learning models.
• We do not transfer Google user data to others, except as needed to run the service (see section 4), to comply with the law, or as part of a merger or acquisition with notice to you.
• People do not read your Google user data unless you ask us for help, it is needed for security, or the law requires it.

4. Who we share information with

We do not sell your personal information. We share it only with service providers that help us run Cherryy:

• Supabase: database, sign-in, and file storage, hosted in the European Union (Frankfurt, Germany).
• Vercel: hosting of the Cherryy website and app.
• Google: the Google Sign-In service.
• Zernio: only if your workspace connects a Zernio API key. When you schedule a post, its text and media are sent to Zernio so it can be published to the social accounts you linked there. Zernio's own terms and privacy policy apply to that processing, as do the terms of the social networks you publish to.

Content you post in a workspace is visible to the other members of that workspace, according to their roles. We may also disclose information if required by law or to protect the rights and safety of our users.

Some providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Legal bases (GDPR)

We process your data to provide the service you signed up for (performance of a contract), to keep it secure and improve it (our legitimate interests), and to meet legal obligations. Where we rely on consent, you can withdraw it at any time.

6. How long we keep information

We keep your information for as long as your account is active. If you ask us to delete your account, we delete your personal information and the content you own within 30 days, except where we must keep something to meet a legal obligation. Backups are overwritten on a rolling basis.

7. Your rights and choices

You can ask us to:

• give you a copy of your personal information,
• correct information that is wrong,
• delete your account and personal information,
• restrict or object to certain processing,
• export your data in a portable format.

To do any of this, email cherryysupport@gmail.com. You can also remove Cherryy's access to your Google account at any time from your Google Account permissions. If you are unhappy with how we handle your data, you have the right to complain to your local data protection authority. In the Czech Republic, this is the Úřad pro ochranu osobních údajů (www.uoou.cz).

8. Security

Data is encrypted in transit (HTTPS) and stored with providers that encrypt it at rest. Access within the app is limited by workspace membership and role, so members of one workspace cannot see another workspace's data. No system is perfectly secure, but we work to protect your information and will notify you of any breach where the law requires it.

9. Children

Cherryy is not intended for anyone under 16, and we do not knowingly collect their personal information.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change is significant, we will also let you know in the app or by email.

11. Contact

Questions about privacy? Email cherryysupport@gmail.com. See also our Terms of Service.