Privacy Policy

Cheer Your Friend — Published by CYFAPP
Version 2.0 — Last updated: 10 May 2026
Data controller: Jeremy Pronnier, sole trader operating under the business name CYFAPP — SIREN 920 939 154
Contact: contact@cheeryourfriend.com

Translation provided for information only. This policy was originally drafted in French. In the event of any discrepancy, the French version prevails.

    The short version: Cheer Your Friend collects no location (GPS) data, sells no data to third parties, and lets you delete your account and all of your data at any time. This policy explains in detail what we collect, why, and how you stay in control.

1. Who we are

Cheer Your Friend is a social sports app that lets a runner receive voice messages of encouragement from friends during a run.

The app is published by Jeremy Pronnier, sole trader operating under the business name CYFAPP, registered in France under SIREN 920 939 154 (SIRET 920 939 154 00026), with a registered office at 62 rue des Rives, 81310 Lisle-sur-Tarn, France.

The data controller is Jeremy Pronnier, who can be reached at contact@cheeryourfriend.com.

2. What data do we collect?

2.1 Account data (required to use the app)

Email address: to create your account, sign you in, and verify that you own the account
First and last name: to personalise your experience and let your friends find you
Username (@username): to identify you publicly to your friends
Password: stored in encrypted form by Firebase Authentication. We never have access to it in plain text
Age confirmation (16+): in accordance with Article 8 of the GDPR
Date you accepted the Terms and this policy: as legal proof of consent

2.2 Optional data you can add

Profile picture: if you choose to add one
Your friend list: the other users you have agreed to connect with

2.3 Content you generate while using the app

Voice messages you send or receive (7 to 60 seconds depending on your status)
Running sessions: start time, expected duration, status (in progress / finished)
Statistics: number of boosts sent and received

2.4 Technical data

Push notification token (FCM): a unique identifier provided by Google that allows the app to receive notifications. This token reveals nothing about you personally
Device type and operating system: to adapt the app to your hardware

    🔒 What we do NOT collect:
    ❌ No GPS location data
❌ No health or fitness data (pace, distance, heart rate)
❌ No access to your phone contacts
❌ No access to your other apps
❌ No fingerprint, face recognition or biometric data

3. App permissions

3.1 Microphone

The app requests microphone access only at the moment you record a voice message for a friend. Recording stops immediately afterwards. Nothing is recorded in the background.

3.2 Notifications

The app displays a persistent "Live run" notification during your sessions. This notification is essential to how the app works: it is what allows the app to stay active in the background and receive your friends' voice messages even when the screen is locked. No GPS position is used.

3.3 Photo library / camera access

Requested only if you choose to set a profile picture. No photo is accessed without an explicit action from you.

4. Why do we collect this data?

Data	Purpose	Legal basis (GDPR)
Email + password	Authentication, security	Performance of the contract
First name, last name, username	Identify the user and let friends find them	Performance of the contract
Audio messages	Enable sending between friends (core of the app)	Performance of the contract
Notification token	Receive push notifications	Legitimate interest
Usage statistics	Improve the service, moderation	Legitimate interest

5. How long do we keep your data?

Audio messages: 24 hours maximum, after which they are automatically deleted from our servers
Account data: for as long as your account exists. If you delete your account, all your data is erased immediately
Anonymised technical data (Firebase logs): 30 days maximum
Moderation data (reported messages): up to 30 days to allow review, then deletion

6. Who do we share your data with?

⚠️ We do not sell any data. We do not share any data with advertisers or data brokers.

To provide the service, we use the following technical processors, all GDPR compliant:

6.1 Main processor: Google Firebase

All of your user data (account, profile, audio messages, notifications) is hosted on Google Firebase servers (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland).

Firebase Authentication: secure account authentication
Cloud Firestore: database of profiles, friends and running sessions
Firebase Storage: storage of audio files
Firebase Cloud Messaging (FCM): push notification delivery
Firebase Cloud Functions: server-side logic (closing expired sessions, etc.)

Data is stored in European regions (europe-west1 and europe-west9). Google Firebase is GDPR compliant through a data processing agreement (DPA).

6.2 Ad network: Google AdMob

For free users only, the app displays advertising provided by Google AdMob. AdMob may use an anonymous advertising identifier (Google Advertising ID or Apple ID). You can reset it at any time in your phone settings, or turn off ad personalisation.

6.3 Website hosting

The cheeryourfriend.com website (home page, Terms, Privacy Policy) is hosted by Netlify Inc. (San Francisco, USA, GDPR compliant through Standard Contractual Clauses). No app user data passes through or is stored on Netlify: the service only serves the public HTML pages of the website.

6.4 Domain name and business email

The cheeryourfriend.com domain name and the contact@cheeryourfriend.com email address are managed by Hostinger. If you write to that address, your message passes through Hostinger's email servers.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: find out what data we hold about you
Right to rectification: correct inaccurate data
Right to erasure: delete all your data (the "Delete my account" button in the app does this immediately)
Right to portability: receive your data in a reusable format
Right to object: refuse certain processing (e.g. targeted advertising, already off by default)
Right to restriction: freeze the processing of your data in certain cases
Right to complain: contact the French data protection authority, the CNIL, or your own national authority, if you believe your rights are not being respected

To exercise these rights, contact us at contact@cheeryourfriend.com. We respond within 30 days at the latest.

8. Security

All data is transmitted over encrypted HTTPS
Passwords are stored hashed and salted through Firebase Authentication
Audio messages are stored on Firebase Storage with strict access rules: only you and the recipient can read them
Server access is limited to strictly authorised people

9. Minors

The app is strictly reserved for people aged 16 or over, in accordance with Article 8 of the GDPR. On registration, users certify that they are at least 16. This confirmation is recorded and timestamped.

If we discover that an account was created by a user under 16, the account will be deleted immediately and all associated data erased.

10. Moderation and reporting

If you receive a voice message with inappropriate content, you can report it using the "Report" button in your history. We will review the content within 48 hours. If the report is confirmed, the user at fault may be warned, suspended or banned.

You can also block a user at any time from their profile, which makes them invisible to you (and you to them).

11. Changes to this policy

This policy may change to reflect legal or technical developments. In the event of a substantial change, we will notify you in the app and ask you to confirm your acceptance. The last updated date appears at the top of this document.

12. Cookies and trackers (website)

The cheeryourfriend.com website uses no advertising cookies and no third-party analytics. Only technical cookies necessary for the site to function may be set (for example by Netlify for secure page delivery), along with local browser storage used solely to remember the language you selected. No consent is required for these essential items.

13. Contact us

For any question about this policy or about how your data is used:
Email: contact@cheeryourfriend.com
Postal address: Jeremy Pronnier (CYFAPP), 62 rue des Rives, 81310 Lisle-sur-Tarn, France