Privacy Policy – Cherish

Cherish ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how we use it when you use our web application at cherish-seven.vercel.app (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Who we are

Cherish is operated by [YOUR COMPANY NAME], registered in [YOUR COUNTRY]. If you have any questions about this policy, contact us at privacy@cherish.com.

2. What data we collect

Account data

Your email address and password (encrypted). We use this to create and secure your account.

Contact data

Names, phone numbers, email addresses, and job titles of the contacts you add to Cherish. This data is yours — we store it solely to provide the Service to you.

Notes and interactions

Voice notes you record and text notes you write. These are processed by our AI (Anthropic Claude) to extract useful context. Notes are stored securely and are only accessible by you.

Payment data

If you subscribe to Pro, payments are handled by Stripe. We do not store your card number — Stripe processes and stores all payment data under their own privacy policy.

Usage data

Basic analytics such as pages visited and features used, to help us improve the product. We do not sell this data.

3. How we use your data

To provide and operate the Service
To send AI-generated relationship insights and message drafts
To send you important account or billing notifications
To improve the product based on usage patterns
To comply with legal obligations

We will never sell your personal data to third parties.

4. AI processing

When you add a note, its content is sent to Anthropic (the makers of Claude) for processing. Anthropic's API does not use your data to train their models by default. You can review Anthropic's data usage policy at anthropic.com/privacy.

5. Data storage and security

Your data is stored on Supabase infrastructure, hosted on secure cloud servers. All data is encrypted at rest and in transit (HTTPS/TLS). Access to your data is restricted by Row Level Security — no other user can see your contacts or notes.

6. Your rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your account and all associated data
Portability — receive your data in a machine-readable format
Objection — object to certain types of processing

To exercise any of these rights, email us at privacy@cherish.com. We will respond within 30 days.

7. Cookies

We use minimal, essential cookies only — specifically a session cookie to keep you logged in. We do not use advertising cookies or third-party tracking pixels.

8. Data retention

We keep your data for as long as your account is active. If you delete your account, all your data is permanently deleted within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.

9. Changes to this policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or by displaying a notice in the app. Continued use after changes constitutes acceptance.

10. Contact

Questions? Email us at privacy@cherish.com.