Privacy Policy

Information we collect

We collect only what we need to run the service:

• Account information - name, email address, phone number, password (stored hashed by our authentication provider), and your role (client, family member, companion, or staff). If you choose to sign in with Google, we receive your name and email address from Google; we do not receive your Google password.
• Booking and visit information - visit dates and times, the services requested, companion assignments, visit notes and instructions, check-in and check-out times, and messages you send us.
• Address and location - the service address for visits, which we use to confirm the address is in our service area, calculate travel, and plan companion routes. When a companion checks in or out of a visit, we record the location of their device at that moment (with its accuracy) to confirm the visit took place at the right address. For companion transportation, we record trip details needed to calculate mileage.
• Care information - preferences, interests, routines, mobility or communication needs, home safety intake answers, and emergency contacts that you choose to share so a companion can support the client well. CheerStride does not provide medical care, but some of this information may relate to health, and we treat it as sensitive.
• Payment information - you add a card on our payment processor Stripe's secure page, and Stripe stores the full card details. We keep only the card brand, last four digits, and expiration date so you can see which card is on file, plus a record of each charge, refund, and receipt. We never see or store full card numbers.
• Agreement records - when you accept our Terms of Service or acknowledge a policy, we record which version you accepted, the date and time, and the IP address and browser used.
• Companion applicant and employee information - application and screening answers, interview details, availability, driver's license images (which we read automatically to fill in license details), vehicle and insurance information, background check results, training records, and employment and payroll details.
• Waitlist sign-ups - the email address and interest you submit before launch.
• Usage information - basic, aggregated page-view data (such as pages visited, referrer, country, and device type) collected without cookies, as described below.

How we use information

• Create and secure your account.
• Schedule, deliver, and bill for companion visits. One-time visits are charged to your card on file when you book; weekly visits are charged 48 hours before each visit.
• Send booking confirmations, visit reminders (about 24 hours before a visit), receipts, payment and refund notices, and account notices by email.
• Confirm visits happen as booked, and alert our staff if a companion has not checked in on time so we can make sure the client is safe.
• Match clients with companions and confirm service-area eligibility.
• Screen, hire, train, schedule, pay, and support companions.
• Respond to support requests and improve the safety and quality of the service.
• Keep records of the agreements you accept.
• Comply with legal obligations, including employment, tax, and accounting requirements.

We do not use care information for advertising, and we do not use personal information to build advertising profiles.

Service providers we use

We share information with vendors that process it on our behalf, under contracts that limit their use of it to providing services to us:

• Supabase - database, file storage, and authentication. Account, booking, address, and care information is stored here with access controls that limit each user to the records they are permitted to see.
• Vercel - website hosting and Vercel Web Analytics. Vercel Analytics is cookieless: it does not set cookies, does not track you across other websites, and reports only aggregated traffic statistics.
• Stripe - saving your card, charging visits and other approved charges, and issuing refunds.
• Resend and SendGrid - delivery of transactional email such as confirmations, reminders, receipts, and account notices.
• Google - sign-in with Google (if you choose it); Google Maps services to look up addresses and calculate travel distances; Google Cloud Vision to read driver's license images during companion onboarding; and Google's Gemini AI to help our staff draft replies to support messages. Staff review every AI-drafted reply before it is sent, and we do not use these tools for advertising.
• Twilio - we plan to offer text-message (SMS) notifications through Twilio. Until then, we contact you by email. If you later receive texts from us, message and data rates may apply, and you can reply STOP to opt out.

We may also disclose information when required by law, to protect the safety of clients, companions, or the public, or in connection with a merger or sale of our business.

Cookies and similar technologies

We use only strictly necessary cookies - for example, to keep you signed in, to protect your session, and to remember your privacy choice (the cs_consent cookie, kept for one year). We do not use advertising cookies, third-party tracking pixels, or cross-site tracking. Our analytics do not use cookies.

When you first visit, a banner explains these practices. Choose "Essential only" to turn off our cookieless analytics, or "Accept analytics" to allow them. You can change your choice at any time with the "Your Privacy Choices" link in the site footer. If your browser sends a Global Privacy Control signal, analytics are turned off automatically.

We do not sell or share personal information

CheerStride does not sell personal information and does not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past 12 months. We do not knowingly collect personal information from children under 16.

Global Privacy Control and Do Not Track

Global Privacy Control (GPC): we treat a GPC signal from your browser as a valid request to opt out of the sale or sharing of your personal information. Because we do not sell or share personal information, no further action is needed on your part, and we will continue to honor GPC if our practices change.

Do Not Track (DNT): there is no industry standard for responding to DNT signals. Because we do not track visitors across third-party websites or over time for advertising, our site behaves the same whether or not DNT is enabled.

Your California privacy rights

If you are a California resident, you may have the right to:

• Know what personal information we collect, use, and disclose, and request a copy.
• Request that we delete your personal information, subject to legal exceptions (for example, records we must keep for employment, tax, accounting, or safety reasons).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information, and limit the use of sensitive personal information (we do neither beyond what is needed to provide the service).
• Not be discriminated against for exercising these rights.

You can correct most account details yourself on your profile page. For other requests, email us at the address below. We will verify your identity before fulfilling a request, usually by confirming details associated with your account. You may use an authorized agent, who must provide proof of authorization. We respond within 45 days.

Deleting your account

You can delete your account yourself at any time from the "Delete my account" section of your profile page (or your companion application page). Clients need to cancel upcoming visits first, and companions need any upcoming visits reassigned. When you delete your account:

• Your login is closed immediately and your email address is removed from it.
• For a client household, we remove names, contact details, emergency contacts, notes, street addresses, and the saved card, and family members lose access to the household.
• For a family member, we remove your access to the household; the household account itself stays open.
• For companions and applicants, we remove you from scheduling.

We keep records we are legally required to keep, even after deletion: past visit and payment records (for accounting and tax purposes), records of agreements you accepted, and, for companions and applicants, employment, application, and payroll records (which California law requires employers to keep for at least four years). You can also ask us to delete your information by email.

Data retention and security

We keep personal information only as long as needed to provide the service, meet legal and accounting obligations, and resolve disputes. Waitlist emails are deleted on request or when no longer needed. We use encryption in transit, role-based access controls, and database row-level security to protect your information. No system is perfectly secure, so please contact us right away if you believe your account has been compromised.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above and, for significant changes, notify account holders by email.

Contact us

Questions or privacy requests: info@cheerstride.com

CheerStride, Clayton, California