Privacy

Who is responsible?

Cheeruniti is published by Pablo Berenguel — LeCrush, the data controller. For questions or requests about your data, contact [email protected].

Data and purposes

Your email, username, account identifier, protected password and declared age support your account and its security. Optional profile details, photos, sporting history, videos and captions, together with follows, participant tags, agreements, likes, comments and views, support social features. Reports and technical information support moderation and security.

Providing the account and the features you request is based on delivering the service. Protecting the service and handling abuse serve our legitimate interests. We also handle requests and obligations required by law. Push notifications are optional and can be disabled. Social emails have separate preferences; security messages remain necessary for your account.

Accounts are restricted to people declaring an age of at least 18. Registration does not request a date of birth or identity document. Declared age is not verified identity.

Possible future AI analysis of posts is described in the terms of use. This notice does not activate any such analysis. Before launch, we will specify its purposes, data, providers, legal bases, retention, any transfers and applicable rights. Sharing with a third-party AI provider will require prior explicit permission.

Private messages and conversations

Messages, senders, recipients, dates, reactions, delivery and read receipts support the messaging feature you choose to use. Message text is encrypted at rest on our server and sent over HTTPS; this service is not end-to-end encrypted.

Accepting an active membership opens club and team conversations and their history. Coaches and managers post announcements; athletes can react. The athletes-only group excludes team coaches. Authorized club managers share private conversations addressed to the club. Access ends when membership ends or the team is disabled.

You can mute, archive or block a private conversation. Reporting sends only the reported message and its author to moderation. Messages are retained to provide history; account deletion removes your sent messages and personal direct conversations. Optional push alerts contain no message text.

Clubs, progress and reviews

Roles, teams, seasons, affiliation dates, invitations and self-reported results support club organisation. Managers access the information needed for their responsibilities. A club manager invitation uses the recipient’s email and must be accepted by the account with that exact verified address; it expires after 14 days.

Eligible posts and their consent records support XP, levels, trophies, publication recaps and active weeks. These counters describe activity in Cheeruniti, not certified sporting ability.

Reviews are requested voluntarily. Assigned authorised coaches access the video needed for their opinion. Detailed feedback is available only to the author and authorised participants. The final verdict and shared tags are private by default; the requester may choose to make them public.

Approved clubs, their teams, introductions, results and accepted affiliations can be viewed in the app. Pending invitations and the management workspace stay private. Opening an external video or result link takes you to another service with its own rules.

The web app, including the club workspace, uses a session cookie needed to sign in and form protection. Language and theme choices may be remembered on this device. These elements are not used for advertising tracking.

Public and private

Profiles and active posts are public. Your email, declared age, credentials and drafts are not displayed publicly. Tagged participants must accept public sharing; withdrawing agreement suspends the affected video.

Other people may copy public content. We can stop its distribution within Cheeruniti, but cannot guarantee removal of copies outside the service.

Providers and notifications

OVHcloud hosts the API and database. Cloudflare handles Web access and stores media in private R2 storage. Brevo delivers email. If you enable push notifications, Firebase/Google processes installation and messaging identifiers; Laravel stores an encrypted token. Lock-screen messages are generic and contain no names or comments.

Some providers may process data outside the European Economic Area under their processing terms and transfer safeguards. Their policies are linked below; contact us for information relevant to your request. Google Analytics and Matomo are not enabled in this version.

Retention and deletion

Data is kept while needed for your account and requested features. After a verified deletion request, affected active-system data is removed within 30 days. Backups managed by Cheeruniti expire within 30 days; they are for recovery only and must not restore a deleted account to service.

Minimal data may be retained for a specific legal duty or dispute; we explain the reason and applicable duration in our response. A technical media block may remain to prevent re-upload after withdrawn agreement, without retaining the deleted profile.

Provider-specific times are separate. Deleting your Cheeruniti account removes the push tokens linked to your account, but does not yet request deletion of the Firebase installation identifier. Firebase states that removing this identifier from active and backup systems can take up to 180 days after the API call requesting its deletion. That period therefore does not start with your Cheeruniti account deletion request.

Your rights

You may request access, correction, deletion, restriction or portability under applicable conditions, object to certain processing and withdraw optional consent. Contact [email protected]. We verify requests proportionately without asking for your password.

You may contact the CNIL or your relevant data protection authority. The account deletion page lets you make a request without reinstalling the app.