Privacy Policy

Last updated: July 16, 2026

Who we are

CheddarCheck is a session scheduling and billing tool for personal trainers. This policy explains what data we collect, how we use it, and your rights.

What we collect from you

Your account details (the name and email address we receive from your Google account when you sign in, plus your business name, timezone, currency and payment instructions), and the business data you enter: clients you add, sessions you book, payment amounts, balances and ledger entries, packages, session templates, and notes you write. This is the data CheddarCheck needs to track your training schedule and billing — nothing more is collected.

Google Calendar (optional)

If you explicitly connect Google Calendar in Settings, we request the calendar events scope and use it solely to create, update and delete the calendar events that correspond to training sessions you book in CheddarCheck. We do not read events CheddarCheck did not create, and we do not access any other calendar data. Disconnecting in Settings immediately deletes the stored Google token.

How we use your data

Your data is used solely to provide CheddarCheck features: session tracking, client management, payment tracking and optional calendar synchronization. We do not sell your data, share it with advertisers, or use it to train any AI or machine learning model.

Google API Services User Data Policy

CheddarCheck’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide user-facing features that are prominent in CheddarCheck’s interface, and we do not use Google user data for advertising or any purpose unrelated to the features you have opted into.

Data storage and security

Your data is stored in a managed PostgreSQL database (Supabase). Every trainer’s rows are isolated with database-level row-level security, so your data is only ever readable by your own account. Authentication is handled by Supabase Auth using Google sign-in — we never see or store your Google password. All traffic is served over HTTPS.

Third-party services

We use Supabase for authentication and data hosting, Google for sign-in, and the Google Calendar API only if you connect it. We do not share your data with any other third-party service for analytics, advertising, or any other purpose.

Your rights (access, export, deletion)

You can exercise your GDPR rights directly inside the app, without asking us: Settings lets you download your complete data set (CSV exports and a full machine-readable JSON archive) and delete your account. Deleting your account permanently removes your profile and every client, session, payment, package and template you own, effective immediately. For anything else — correction requests, questions, complaints — email us at slavaai2025@gmail.com.

Data retention

We retain your data for as long as your CheddarCheck account is active. When you delete your account, all of it is removed immediately and permanently.

Contact

Questions about this policy or your data? Email us at slavaai2025@gmail.com.