Privacy

Last updated: 2026-09-19

CheersOida is a small, single-developer app. This page says exactly what the app does with your data — no boilerplate, no "we may share with partners" language, because there are no partners.

What we collect

Account

Email address and a username you pick at sign-up. Email is used for password recovery and the optional TestFlight/invite handoff. The username is what your friends see.

GPS trace

While a crawl session is active and only with your permission ("While using the app" on iOS, plus an Android foreground service), the app samples your location approximately once per second. The raw trace is stored only on your device until you end the crawl, then uploaded to the server.

Your friends never see the raw GPS trace. When a crawl ends, the server keeps a single simplified route (one point per ~50 m) associated with the finished session. Mid-session, the simplified route doesn't exist yet — friends see "out since 21:30, 3 drinks" and nothing more.

Check-ins

Each check-in stores the drink you logged, an optional venue ("where"), an optional photo, an optional note, and the timestamp. Photos are stored privately with row-level security — only you and your accepted friends can see them.

Friends

A list of usernames you've friended. The list is private to you.

Push notifications

An Expo push token, only if you grant notification permission. The token is used to send cheers, friend-request, and reply notifications. Revoke notifications in your phone's settings; the token is dropped from the server the next time you open the app.

Who can see what

  • Raw GPS trace: only you.
  • Simplified route of a finished crawl: your accepted friends.
  • Check-ins: your accepted friends.
  • Profile (username + stats): your accepted friends.
  • Account email: only CheersOida (not displayed anywhere in the app).

Where the data is stored

Hosted on Supabase (Frankfurt region, EU). Photos are stored in a Supabase Storage bucket named photos with row-level security tied to your account id. Backups are configured by Supabase; nothing leaves the EU region.

Analytics

There is no analytics SDK. No Google Analytics, no Plausible, no Sentry, no Facebook pixel. The only server logs are Supabase's own request logs (auth, RPC, storage), retained for ~7 days.

Deleting your data

In the app: Profile → Settings → Delete account. This removes your account, all check-ins, all photos, all friendships, your raw GPS trace, and the simplified routes of your past crawls. Deletion is final and runs immediately.

If you can't open the app, email cheer@saustall.cloud from the address on your account and ask for a manual delete. It will be done within seven days, usually same-day.

Children

The app is not directed at children under 16. If you believe a child has created an account, contact the address below and it will be deleted.

Changes to this policy

If anything here changes in a way that affects what is collected or who can see it, the app's next launch will surface the updated policy and require acknowledgement before you can use the affected feature.

Contact

Email: cheer@saustall.cloud. Source: github.com/checkelmann/CheersOida.