Privacy Policy

• Account and subscription data: name, email, password hash, profile settings, consent records, subscription status, and Stripe customer and subscription identifiers. Stripe processes your card or other payment method; CheekyAI does not receive or store full card numbers.
• Training and progress data: goals, experience, equipment, programs, exercise logs, weights, repetitions, personal bests, measurements, check-ins, and progress assessments.
• Nutrition data: calorie and macro targets, food searches, saved foods and meals, diary entries, and text or images submitted for meal estimates.
• Coaching and AI data: chat messages, uploaded chat attachments, conversation summaries, saved coaching memory, onboarding responses, and the text of voice transcriptions you approve.
• Photos, video, and movement data: progress photos, form-check videos, extracted video frames, pose landmarks, alignment data, movement analysis, and feedback. These tools are for coaching and framing—not identity or face recognition.
• Technical and usage data: IP-derived request information, browser and device details, authentication cookies, route and feature activity, error and performance diagnostics, referrers, campaign tags, and attribution identifiers.

Camera and microphone permissions are requested only when you choose a feature that needs them. Guided progress-camera pose detection runs locally in your browser while you line up a shot; live preview frames are not streamed to CheekyAI. After you capture and approve a photo, the photo and its pose-alignment data are uploaded and stored so you can compare check-ins.

Form-check videos are uploaded for movement analysis and may be processed by the Railway-hosted pose analysis service and, when needed for a requested AI feature, OpenAI. Voice recordings submitted for chat or onboarding are sent to OpenAI for transcription. CheekyAI stores the resulting text when needed for the feature, but does not intentionally save the source audio in your profile. Your browser or a processor may hold a temporary copy while the request completes.

We use this information to:

• create and secure accounts, confirm access, and manage subscriptions;
• personalize programs, coaching, nutrition tools, and progress comparisons;
• respond to requests, deliver transactional email, and provide support;
• operate, debug, protect, measure, and improve the Service;
• detect abuse, enforce usage limits, and maintain reliable records; and
• comply with law and establish, exercise, or defend legal claims when necessary.

AI output supports coaching features but is not used to make legal, employment, credit, insurance, or similarly high-impact decisions about you.

We disclose information only as needed to operate the Service, complete a transaction you request, protect the Service or others, comply with law, or as part of a business transaction subject to appropriate safeguards. Current infrastructure and feature providers include:

• Vercel for web hosting and server execution;
• Neon for the application database;
• Stripe for checkout, payments, and billing management;
• Cloudinary for private photo and video storage and delivery;
• OpenAI for requested coaching, image understanding, and transcription features;
• Railway for hosting the form-check pose analysis service;
• Resend for transactional email;
• Sentry for error and performance monitoring; and
• Inngest, when enabled, for reliable background processing.

These providers process information under their own terms and privacy commitments. They may process data in countries other than yours. We do not sell personal information, and the current Service does not use personal information for third-party targeted advertising.

We use cookies and browser storage for sign-in, security, onboarding recovery, preferences, and other essential product behavior. We also record first-party product events and campaign attribution such as page path, referrer, UTM parameters, and feature milestones so we can understand activation and improve the Service. Blocking essential storage can prevent parts of the Service from working.

We generally keep account and coaching data while your account is active and for as long as needed to operate the feature or meet the purposes above. Settings lets you export supported data and request deletion. A deletion request revokes account access and queues deletion of database records and private media from relevant providers. Provider cleanup is retried when a service is temporarily unavailable.

Limited records may remain temporarily in logs, security records, deletion tombstones, or backups until they age out through normal operations. Stripe and other providers may retain transaction or fraud records under their own legal obligations. We may retain information longer when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or enforcing agreements. Because these periods depend on the record and provider, we do not promise that every backup copy disappears instantly.

You can update profile and coaching settings, turn saved coach memory off, reset supported memory, export account data, or request account deletion from Settings. You can also contact us to ask for access, correction, or deletion. Rights vary by location, and we may need to verify your identity before fulfilling a request. We will honor applicable privacy rights and mandatory appeal or complaint procedures where they apply.

We use technical and organizational safeguards intended to protect information, including hashed passwords, access checks, private media delivery, request limits, and monitored service infrastructure. No internet transmission or storage system can be guaranteed completely secure, so please use a unique password and contact us if you suspect unauthorized access.

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from a minor. If you believe a minor has created an account, contact us so we can investigate and delete the information where appropriate.

We may update this Policy as the Service or its data practices change. We will post the new effective date and provide additional notice when a change is material and notice is reasonably appropriate.

Questions, privacy requests, and deletion support can be sent to support@cheekyfitness.app.