Privacy Policy

Introduction

Welcome to CheerHit ("we", "our", or "us"). CheerHit is an operating system for cheerleading clubs. Clubs use our web dashboard to manage teams, rosters, schedules, competitions and attendance, and athletes use our mobile app to hold their own profile, join a club, follow their schedule and confirm whether they are coming to each session. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at https://www.cheerhit.com.

By using CheerHit, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the service.

Information We Collect

Account Information

When you create an account, we collect your name and email address, and a securely hashed version of your password. If you sign in with Google or Apple, we receive your name and email address from that provider, along with a stable identifier that lets us recognise you when you return.

Athlete Profile

An athlete may add a profile photo, a city, the positions they play, the highest level they have reached, their date of birth, their time zone and their preferred language. The date of birth is used to put birthdays on the club calendar and to help clubs manage age divisions.

Club and Roster Data

A club's owners, administrators and coaches enter and manage information about their club: teams, rosters, schedules, competitions, venues, attendance records and the reasons given for missing a session. Some of the athletes concerned are minors. Where an athlete holds their own account, that athlete provides part of this information themselves. Clubs are responsible for obtaining any consents required (including parental or guardian consent for minors) before entering an individual's information into CheerHit.

Device and Usage Data

When you use our mobile app, we collect data about how the app is used and how it performs: screens visited and actions taken, app version, device model and operating system, crash reports and performance measurements, and a device identifier generated by our analytics tools. If you enable notifications, we store a push token so we can deliver reminders about your sessions. An approximate location (typically country or region) may be derived from your IP address by our analytics tools. We do not collect precise location, and the app does not request access to your device's location.

This data is linked to your account, so that we can tell which account a crash or a session belongs to. It is not used to track you across other companies' apps or websites, and we do not use it for advertising.

You can turn off crash reporting at any time in the app's settings.

How We Use Your Information

We use the information we collect for the following purposes:

• To create and secure your account, and to verify your email address
• To provide and operate the service, including profiles, rosters, schedules, competitions and attendance
• To send notifications and emails about your club's activity, such as event reminders, schedule changes and invitations
• To process club subscriptions and manage billing
• To communicate with you and respond to your enquiries
• To diagnose crashes, measure performance and improve the service
• To comply with legal obligations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We do not share your personal information with third parties for their own promotional purposes.

We share information with a limited number of trusted service providers strictly to operate the service:

• Stripe, to process subscription payments made on our website
• RevenueCat, to manage subscriptions purchased inside our mobile app
• Google Firebase, for analytics, crash reporting, performance monitoring and push notification delivery
• Resend, to send account and service emails
• MongoDB, to host our database
• Vercel, to host our application and store uploaded files

Some of these providers are located outside your country, including in the United States. Where personal data is transferred out of the European Economic Area, that transfer is made under the safeguards required by applicable data protection law.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Within the service, your information is visible to the people you would expect: your club's owners, administrators and coaches can see the members and athletes of their club, including profile details and attendance records.

Data Security

We implement appropriate technical and organisational security measures designed to protect your personal information from unauthorised access, alteration, disclosure, or destruction. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. If you delete your account, your data is retained for 30 days and then permanently deleted. When your data is no longer required, we will securely delete or anonymise it.

Your Rights

Under applicable data protection laws (such as the GDPR in Europe and the UK, CCPA in California, and similar regulations worldwide), you may have the following rights regarding your personal data:

• The right to access the personal information we hold about you
• The right to rectification of inaccurate personal data
• The right to erasure of your personal data (the "right to be forgotten")
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing of your personal data

The specific rights available to you may vary depending on your location. To exercise any of these rights, please contact us at contact@cheerhit.com. We will respond to your request within a reasonable timeframe as required by applicable law. If your request concerns data that a club entered about an athlete, we may direct you to the relevant club, which controls that information.

Children's Privacy

Cheerleading is a sport with many young athletes, so CheerHit is built for the reality that some athletes are minors.

Every athlete on CheerHit has their own account, held in the athlete's own name, because that is who is on the team. Where the athlete is under 18, that account must be created and operated by a parent or legal guardian, who provides the email address, holds the credentials and accepts our Terms on the athlete's behalf. We do not knowingly allow a child to create an account for themselves without a parent or guardian.

A club's staff may also enter information about a minor athlete in order to run the club. Clubs are responsible for obtaining the consents required to do so.

If you are a parent or guardian and you believe a child's information has been provided to us without the appropriate consent, or you want that information deleted, please contact us at contact@cheerhit.com and we will act on it and work with the relevant club.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will notify you by email prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically for any updates.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: contact@cheerhit.com
• Website: https://www.cheerhit.com