Privacy
2026-11-03
Operator and scope
This policy covers the cheret app and website, operated by mayu (Kazuki Matsumaru). Contact: cheret@mayu.party.
Data and purposes
We process photos, logos, text, shop details, instructions, generated works and edit history to create, edit, store and sync your work. Account IDs, Google profile names and email addresses, and passkey public keys and identifiers support authentication. Transaction IDs, tickets, usage and referral records support purchases and entitlements. Request identifiers, timing, errors, AI usage and abuse-prevention records support operations. We do not receive payment card numbers, passkey private keys or Face ID/Touch ID biometric data.
Providers and AI consent
Firebase Authentication (Google) provides sign-in. Cloudflare stores and processes data and images. OpenAI APIs receive the photos, text, shop details and instructions needed to read images and generate or revise work. We ask for consent before sending this content. These providers may process data outside your country. Apple and Google process their respective in-app payments. Stripe processes web payments. We send your account identifier and product details to Stripe; payment details are entered on Stripe’s checkout page.
OpenAI retention
OpenAI API data is not used for model training by default. We disable Responses API response storage. OpenAI may retain abuse-monitoring data for up to 30 days, or longer when required for legal or safety reasons. See the linked provider data controls.
Retention and deletion
Works, photos and shop information are retained until you delete them. After accepting deletion, we disable access, stop related processing and remove the content from Cloudflare, retrying failed cleanup. Unfinished uploads are normally removed after one day. Purchase, refund, free-allowance, referral, deletion-job and usage records may remain to the extent needed for fraud prevention, accounting and operations. Provider monitoring and backups follow their own retention policies.
Your choices
Withdraw consent for future transfers in Account; already-submitted work continues. Delete individual works or your account in the app. Account deletion also removes your photos, works and shop information. Contact support for access, correction or deletion requests; we may request minimal identity verification.
Advertising and website
We do not sell personal data or use advertising or cross-service tracking. This static website has no input forms or analytics. Cloudflare processes connection information, including IP addresses, to deliver and secure it. Support emails are used to handle your request.
Security and changes
We use encrypted connections and access controls. Do not submit others’ personal or confidential information without authority. Material policy changes will be announced on the website or app, with renewed consent where appropriate.
OpenAI API data controls · Cloudflare Privacy Policy · Firebase privacy · Stripe Privacy Policy