← Cyrus Cheer

Privacy

Privacy Policy

Last updated: October 27, 2026

Cyrus Cheer LLC, a Utah limited liability company ("Cyrus Cheer," "we," "us"), operates the website cyruscheer.com and the Cyrus Cheer mobile app (together, the "Service"). This policy explains what we collect, why, and your choices.

Age. The Service is for people 13 and older, and in some countries the minimum is higher: 14 in Austria, Bulgaria, Cyprus, Italy, Lithuania, Spain, South Korea and Québec; 15 in Czechia, France and Greece; 16 in Croatia, Germany, Hungary, Iceland, Ireland, Liechtenstein, Luxembourg, the Netherlands, Norway, Poland, Romania, Slovakia and Slovenia. Everywhere else it’s 13. When you start, we ask the year you were born. We ask where you live, and whether you’ve had your birthday yet this year, only if the answer could change whether you can join. We don’t keep your birth year, your birthday answer or where you live. If you can join, we keep only a record that you passed the age check, when, and the language it was asked in. If you’re under the minimum age where you live, we don’t create an account and we don’t keep your answers. We don’t ask a parent for consent because we don’t sign anyone up below that age. We don’t knowingly collect personal information from children under 13. If you believe a child has given us information, email privacy@cyruscheer.com and we’ll delete it.


1. What we collect

You give us:

Collected automatically:

2. Sensitive information (injuries and body data)

Some of what you tell us is health-adjacent: the body areas you asked us to train around, your optional height and weight ranges, how flexible you say you already are, how hard a session felt, how hard a practice was, swapping an exercise because of pain, and the session check-ins — sleep, soreness, current pain and how much you had left in a set. We use this only to build and adjust your training program, and only with your explicit consent, which you give with a separate checkbox on the “Before you start” screen in the app or on our website (section 11.3 explains how to take it back). We do not sell it, we do not use it for advertising, and we do not show your height or weight back to you anywhere in the app.

If you live in Washington State, this information is also covered by a separate, more detailed policy required by Washington law: Consumer Health Data Privacy Policy.

3. How we use information

3a. If we ever want to feature you

We sometimes ask athletes whether they would like to give a testimonial or film a short video for us, and we sometimes pay for that. It is always optional, and saying no changes nothing about your account, your program, or your price.

We do not use your training activity to decide who to ask. If that ever changes, we will ask your permission in the app first, and it will be off unless you turn it on.

If you are under 18, we will also ask a parent or guardian to say yes before anything you write or film is used in our marketing.

Anything we pay for is labelled as an ad when we post it. We will never ask you to leave a review on the App Store, and we will never pay for one.

3b. The forum

The forum at cyruscheer.com/forum is a public message board where athletes request skills, report problems and give feedback. Anyone can read it without an account. To post, reply, vote or report you sign in with your Cyrus Cheer account, and you need an @handle and a training program. The forum’s rules are in our Forum Guidelines.

How long forum content is kept. Your posts stay up until you delete them, delete your account, or we hide them. When you delete a post it disappears from the forum straight away; the text stays in our database, where only our staff can reach it, until your account is deleted, so that we can still act on a report about it. Posts we hide, and reports, are kept the same way. Deleting your account (Member → Delete account in the app) permanently deletes every thread and reply you wrote, every vote you cast and every report you filed. It also deletes any thread you started together with the replies other athletes left on it.

If you are under 18: your posts are public in the same way. A parent or guardian can ask us to take down a post or delete the account by emailing hello@cyruscheer.com or privacy@cyruscheer.com.

4. The AI that builds your program

Your program is written by an AI. To do that we send information to our AI provider, Anthropic (the Claude API), acting as our processor under contract. Here is exactly what goes, and when.

Under our API terms Anthropic processes this to return a program and does not use it to train their models. We do not send them your name, your email, your @handle, your payment information, who your friends are, anything from blocking and reporting, or anything you write on the forum. Anthropic is bound by contract to protect this information with at least the same level of protection described in this policy.

5. Who we share with

We share data only with providers that help us run the Service, under contract: Supabase (accounts, database and file storage — this is where your account and training data live), Netlify (website hosting and the waitlist form), Zapier and Google Sheets (routing and storing signups), Resend and MailerLite (email), Google Analytics 4 and Meta (website analytics and advertising), Anthropic (AI program generation), Apple and Google (purchases and subscriptions; Apple also provides Sign in with Apple), and RevenueCat (managing your subscription status, and running the checkout page when you buy on our website). Expo delivers app updates and Vercel runs our welcome-email endpoint. Every provider listed here is bound by contract to protect your information with at least the same level of protection described in this policy, and to use it only to provide its service to us.

Stripe processes card payments made on our website. Stripe is bound by contract to protect your payment information, but it also uses that information for its own purposes as an independent company — to prevent fraud across its network, to improve its services, and to meet its own legal duties as a payment provider — under its own privacy policy at stripe.com/privacy.

Blocks, reports and forum posts are stored in our own database (Supabase, in the United States). Blocks and reports are read only by us; forum posts are public, as described in section 3b. We do not send blocks or reports to our AI provider or to anyone else, except where the law requires it or where it is needed to protect someone's safety.

We do not sell your personal information. We may disclose information if required by law or to protect rights and safety.

6. Tracking & your choices

7. Your rights

You can ask us to: see the data we hold about you and get a copy; correct it; delete it; limit how we use it; receive it in a file you can take elsewhere; and object to our using it for a purpose based on our legitimate interests (section 11.2). Where we rely on your consent, you can withdraw it at any time. That doesn’t undo what we did before you withdrew. How to withdraw each consent is in section 11.3.

How: email privacy@cyruscheer.com from the address on your account, or delete your account in the app (Member → Delete account). We may ask you to confirm the request comes from you. We reply within one month. If a request is complicated we may need up to two more months, and if so we’ll tell you within the first month. We never charge you or treat you worse for using these rights.

Deleting your account doesn’t delete the free-build record in section 8. To object to it or have it deleted, email privacy@cyruscheer.com.

If you’re under 18, a parent or guardian can make these requests for you by emailing the same address.

Complaints. If you’re unhappy with how we’ve handled your data, tell us first at privacy@cyruscheer.com. We confirm we’ve received a complaint within 30 days, look into it, keep you updated, and tell you what we decided. You can also complain to a data protection authority (section 11.6).

Washington State: you have extra rights over health-related data, including the right to withdraw your consent and to have that data deleted. Those rights, and how to use them, are set out in our Consumer Health Data Privacy Policy.

8. How long we keep data, and security

We use reasonable safeguards, including encryption in transit, access controls, and two-factor authentication on staff accounts. No system is perfectly secure. If a breach puts your rights at risk, we’ll tell you and the authorities the law requires us to tell.

8a. What the app keeps on your phone

Most of what is described above lives on our servers. Some of it is also written to your own device, so the app opens instantly, survives a dropped signal, and does not lose your work if you swipe out mid-set. None of this is a separate collection — it is a copy of data this policy already describes — but you should know it is there.

This stays on your device. We cannot read it, it is not sent anywhere except as already described in this policy, and it is not shared with any other app.

Deleting your account deletes it. Every item above is removed from your phone as part of Member → Delete account, not just from our servers — including your settings, so the next person to open the app gets a first run rather than yours. Uninstalling the app also removes all of it. If you only sign out, the copy is left in place so signing back in is instant; sign out and uninstall if you want it gone without deleting your account.

9. Changes

We'll post changes here and update the "Last updated" date; significant changes will be notified in-app or by email.

10. Who we are

Cyrus Cheer LLC is the company responsible for your data. Our contact details are in section 12.

11. If you live outside the United States

11.1 Who is responsible for your data. Cyrus Cheer LLC (address in section 12) is the “controller” of your personal data. That means we decide how it’s used, and we’re responsible for it.

Once appointed, you can contact a representative instead of us, or as well as us, about anything to do with your data.

Person in charge of protecting personal information (including for Québec): Cyrus Mojallal, Manager, Cyrus Cheer LLC, privacy@cyruscheer.com. We haven’t appointed a data protection officer.

11.2 Why we’re allowed to use your data (legal bases).

What happens if you don’t give us information: the questionnaire answers are needed to build a program. Without them we can’t provide one. The health-related consent is needed for a program (section 11.3). Height, weight, each individual check-in, and usage data are optional: skipping them doesn’t affect your price or access.

11.3 Your consents, and how to take them back.

11.4 Sending your data outside your country. We’re based in the United States, and so are the providers who store and process your data. Supabase (database) and Anthropic (AI), for example, process it in the United States. If you live in the European Economic Area, the United Kingdom, Switzerland or another country with transfer rules, your data is therefore transferred to the United States.

Our database provider (Supabase), our AI provider (Anthropic) and our subscription provider (RevenueCat) protect those transfers with the European Commission’s Standard Contractual Clauses and the UK’s international data transfer addendum, built into our contracts with them. We’re confirming the equivalent safeguards (the Standard Contractual Clauses, or certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions) with our other providers listed in section 5. MailerLite stores email lists in the European Union. To get a copy of the safeguards that apply, email privacy@cyruscheer.com.

11.5 Automated decisions. An AI writes and adjusts your training program from your answers and your training history (section 4). It decides which exercises, sets, reps and loads you’re given. It doesn’t make decisions with legal or similarly significant effects on you: it doesn’t decide your price, your access, or anything outside your training. You can always swap an exercise, skip a session, or ask us to review something by emailing privacy@cyruscheer.com.

11.6 Complaints to a data protection authority. You can complain to the data protection authority where you live or work, or where you think the problem happened. For example: in the EEA, your national authority (list at edpb.europa.eu); in the UK, the Information Commissioner’s Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in Canada, the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information; in Australia, the OAIC; in Japan, the Personal Information Protection Commission; in South Korea, the Personal Information Protection Commission. We’d appreciate the chance to fix it first (section 7), but you don’t have to come to us first.

11.7 Japan. We give personal data to providers in the United States (listed in section 5). The United States has no general federal privacy law equivalent to Japan’s Act on the Protection of Personal Information. Some states have their own privacy laws, and the Federal Trade Commission enforces against unfair and deceptive privacy practices. Each of our providers is bound by contract to protect your information to at least the standard in this policy and to use it only to provide its service to us, except where section 5 says a provider also uses it for its own purposes.

11.8 Canada and Québec. Your information is stored and processed outside Canada, in the United States, and may be accessible to courts and authorities there. Before communicating information from Québec outside Québec, we assessed the protection it gets, and our contracts with providers set out how they must protect it. Québec residents can ask the person in charge (section 11.1) how long their information is kept and who in the company can see it. We don’t use technology that locates you. The Service builds a profile of your training (section 4). That profile is how the program works, and it’s on whenever you use the Service.

11.9 Where the app isn’t offered. The app isn’t offered in China mainland, India, Brazil, Russia, Belarus, Türkiye, Indonesia, Vietnam, South Africa or Kenya.

11.10 Language. This policy is written in English, and the English version governs. The app is available in other languages, but we haven’t translated this policy by machine. A legal document translated by software can say something we didn’t mean.

12. Contact

Cyrus Cheer LLC
7533 S Center View Ct, Ste N
West Jordan, UT 84084
United States
privacy@cyruscheer.com