Your data, in plain English.

We collect what we need to run Cheer Planner — your account info, your cheerleader's info, and the data you put in (schedules, payments, packing lists).

We don't sell your data. Ever. Not to advertisers, not to data brokers, not to other companies.

We share data only with the services we need to run the app — Auth0 for sign-in, Stripe for payments, SendGrid for emails, our hosting provider. That's it.

You can delete your data anytime. Email support@cheerplanner.com and we'll handle it within 30 days.

There are three buckets of information we hold:

What we do NOT collect or store:

• Credit card numbers (Stripe handles those — we only see the last 4 digits)
• Auth0 passwords (Auth0 stores those — we never see them)
• Photos, videos, or media files (we don't host these)
• Location data (we don't track where you are)
• Health or medical information
• Information about anyone other than the cheerleader(s) you've added and the co-parent you've invited

We only collect data we need to operate the app:

• To run your account — show you your dashboard, your schedule, your payments.
• To send the emails you need — receipts, password resets, co-parent invitations, the occasional account notice. Not marketing — see Section 8.
• To process payments — if you upgrade to Pro, we use Stripe to charge you.
• To make the app better — we look at aggregated, anonymized usage data (which features get used most, which pages crash) to figure out what to improve.
• To respond when you contact us — if you email support, we keep your message so we can reply and help.

We do not use your data to train AI models, build advertising profiles, or sell to third parties.

We use a small number of trusted service providers to run Cheer Planner. Each one only sees the data they need to do their job:

We require each provider to handle your data securely and use it only for the service they provide. We do not pay any of them to use your data for their own purposes.

We will also share your data if we are legally required to — for example, in response to a valid subpoena or court order. We will notify you if this happens unless we are prohibited from doing so by law.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, with two exceptions:

• Payment records. We're required by tax and financial regulations to keep records of transactions for up to seven years. These records contain the date, amount, and the last 4 digits of your card — not your full identity.
• Anonymized analytics. Once we've stripped your personal identifiers, the leftover usage statistics (e.g. "X users created an event this week") are kept indefinitely to help us improve the product.

If you have a pending co-parent invitation that hasn't been accepted yet and you delete your account, that invitation is invalidated immediately.

You have the right to:

• See what we have. Email us and we'll send you a copy of your data.
• Correct it. Edit anything that's wrong, either in the app or by emailing us.
• Delete it. Delete your account from the Profile page, or email us to delete it for you.
• Export it. We can give you a copy of your data in a portable format (JSON or CSV) on request.
• Opt out of marketing emails. Use the unsubscribe link in any marketing email. (Transactional emails — receipts, password resets — can't be opted out of while you have an account.)

If you live in California: the California Privacy Rights Act (CPRA) gives you the right to know what personal information we have about you, to ask us to delete it, to ask us to correct it, and to opt out of any "sale" or "sharing" of your personal information. Cheer Planner does not sell or share personal information for cross-context behavioral advertising — but you can exercise these rights anyway by emailing support@cheerplanner.com.

If you live in the European Union or United Kingdom: you have rights under GDPR including access, rectification, erasure, restriction of processing, and data portability. Email us to exercise any of these rights. Our legal basis for processing your data is the contract you have with us when you create an account (Article 6(1)(b) of GDPR).

To exercise any of these rights, email support@cheerplanner.com. We respond within 30 days.

Cheer Planner is designed for cheer parents (adults), not for children directly. We do not knowingly create accounts for users under the age of 13. Account creation requires you to be at least 18 years old (see our Terms of Service).

That said, you — as a parent — provide information about your cheerleader, who may be a minor. That information includes their name, birthday, and competition schedule. We treat this information with the same care as your own:

• We do not use it for advertising or marketing of any kind
• We do not share it with third parties for their own use
• We do not allow your cheerleader to log in directly
• We give you full control to delete it any time

If you believe your child has somehow created an account directly without your involvement, email support@cheerplanner.com and we will delete the account immediately.

We use a small number of cookies, and only for things directly related to running the app:

• Authentication cookies — keep you signed in so you don't have to log in on every page
• Session cookies — temporary, used during a single visit (e.g. PKCE state during Auth0 sign-in)
• Preference cookies — remember small things like which cheerleader you last looked at

We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web. No Google Analytics, no Facebook Pixel, no behavioral profiling. Our analytics are server-side and aggregate only.

You can clear cookies in your browser settings at any time. If you do, you'll be signed out and will need to log in again.

We take reasonable steps to protect your data:

• All connections between your device and our servers are encrypted with TLS (HTTPS).
• Your data is stored on encrypted disks at our hosting provider.
• Passwords are never seen by us — they're managed by Auth0, which hashes them with industry-standard algorithms.
• Payment card numbers are never seen or stored by us — they're handled entirely by Stripe.
• Access to production data is limited to the people who need it, and is logged.

That said, no service on the internet is 100% secure. If we ever discover a breach affecting your data, we will notify you in line with applicable law (typically within 72 hours of discovery).