Privacy

Privacy that respects the person, not just the platform.

This page explains how Cheeky collects, uses, shares, and protects personal information across the product, support, and commerce experience.

Last Updated: July 15, 2026
Global users, U.S.-based service
Collection Usage Disclosure User rights
What this covers

Product data, transactions, support, and legal rights.

The policy explains what we collect, why we collect it, where it may be disclosed, and how users can exercise control.

Operational view

Privacy is framed around how the platform actually works.

Account flows, payments, analytics, support, and state-specific rights all sit in one readable document instead of separate fragments.

User controls

Opt-outs, access, correction, deletion, portability.

Depending on location, users may be able to request access, correction, deletion, portability, and marketing or sharing opt-outs.

How to reach us

Privacy requests go to a monitored email inbox.

Submit access, deletion, correction, and opt-out requests to privacy@cheeky-fit.com. We respond according to applicable U.S. state privacy laws.

Collection

What enters the system.

Account information, profile data, support content, payment metadata, device data, identifiers, logs, and partner-sourced signals.

Use

Why Cheeky processes it.

To operate accounts, process transactions, support users, improve the product, prevent fraud, and comply with law.

Rights

How users stay in control.

State-specific privacy rights, appeal paths, authorized agents, opt-outs, and contact routes are all documented below.

Policy document

How Cheeky handles personal information across the product lifecycle.

Read the full policy below. The policy text remains the source of record for what is collected, how it is used, and how requests are handled.

Scope

This Privacy Policy explains how Cheeky-Fit Inc. ("we," "us," "our") collects, uses, discloses, and protects personal information when you use our websites, apps, and related services (the "Services").

This policy does not cover third-party websites, apps, or services that we do not control, even if they link to our Services.

What We Collect

We collect personal information in the following categories, some of which may be considered sensitive under certain state laws.

Information You Provide

  • Account information, for example name, email, username, and password.
  • Profile information you choose to add, for example photo and preferences.
  • Customer support content, for example messages and attachments you send us.
  • Payment and transaction information, processed via our payment processors; we typically receive limited payment details such as billing ZIP, last four digits, and transaction metadata.

Information Collected Automatically

  • Device and app data, for example device type, operating system, and app version.
  • Network data, for example IP address and approximate location inferred from IP.
  • Identifiers and usage data, for example cookie IDs, mobile advertising IDs, log data, pages or screens viewed, clicks, referring URLs, and crash logs.
  • Security-related data, for example authentication logs and fraud signals.

Information From Third Parties

  • Service providers that help us run the Services, for example hosting, analytics, customer support, and fraud prevention.
  • Advertising and marketing partners, if we use them.
  • Social login providers, if you choose to log in through them.

How We Use Personal Information

We use personal information for the following purposes:

  • Provide and operate the Services, including account creation, core features, and user settings.
  • Process transactions and prevent unauthorized transactions.
  • Customer support and communications, including service updates and responses to inquiries.
  • Security, fraud prevention, and abuse detection.
  • Analytics and product improvement, including understanding performance and usage.
  • Marketing and advertising, where permitted, and subject to opt-out and consent controls.
  • Legal compliance and to enforce our terms.

Where state law requires it, we will obtain your consent before processing sensitive personal information for certain purposes, and we provide opt-out rights for targeted advertising, sale or sharing, and certain profiling.

Cookies, SDKs, and Similar Technologies

We use cookies, pixels, SDKs, and similar technologies to remember your preferences, keep you signed in, measure performance and troubleshoot, understand usage, and, if applicable, support advertising and marketing.

Your Choices

  • You can manage most cookie and tracking preferences through your browser settings, including blocking or deleting cookies. Disabling certain cookies may affect how the Services function.
  • You may also email privacy@cheeky-fit.com to request opt-out of sale or sharing, targeted advertising, or similar processing where applicable under U.S. state privacy laws.
  • If your browser or device sends an opt-out preference signal recognized by applicable law, such as the Global Privacy Control (GPC), we will process it as required, for example as an opt-out of sale or sharing in California.
  • You can also limit ad personalization through your device settings where available, including Apple App Tracking Transparency controls on iOS.

How We Disclose Personal Information

We disclose personal information to:

  • Service providers or processors who perform services on our behalf, including hosting, analytics, customer support, payments, and security. They are contractually restricted from using personal information beyond providing services to us.
  • Affiliates, if applicable, for internal administration and to provide integrated services.
  • Advertising and marketing partners, if applicable. Depending on state law and the technical integration, this may be considered a sale, sharing, or targeted advertising. Where required, you can opt out.
  • Legal and safety disclosures when we believe disclosure is required by law, necessary to protect rights and safety, or in connection with legal claims.
  • Business transfers if we engage in a merger, acquisition, restructuring, bankruptcy, or sale of assets. We will provide notice if required by law.

Data Retention

We retain personal information only for as long as necessary for the purposes described above, unless a longer retention period is required or permitted by law, for example accounting, tax, security, or dispute resolution. We maintain and follow a retention schedule that specifies retention periods, or criteria, by category of personal information.

Retention schedule by category:

  • Account information: retained while your account is active, then deleted or anonymized within 30 days after account deletion, unless a longer period is required for legal, security, or dispute purposes.
  • Transaction and payment records: retained for 7 years for tax, accounting, chargeback, and fraud-prevention obligations under U.S. federal and state recordkeeping requirements.
  • Customer support tickets and related correspondence: retained for 3 years after the ticket is closed.
  • Security, authentication, and fraud logs: retained for 12 months, or longer if needed to investigate an active security incident or legal claim.
  • Analytics identifiers and website analytics data: retained for up to 14 months, consistent with common analytics retention defaults, unless a shorter period is configured.
  • Wardrobe photos and styling data associated with an account: retained while the account is active and deleted or anonymized with the account, subject to backup cycles of up to 90 days.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Privacy Rights and How to Exercise Them

Depending on where you live, you may have the right to:

  • access or confirm whether we process your personal information,
  • correct inaccuracies,
  • delete personal information,
  • obtain a portable copy,
  • opt out of targeted advertising,
  • opt out of sale or sharing, or similar concepts,
  • opt out of certain profiling or automated decisions with legal or similarly significant effects,
  • limit certain uses of sensitive personal information where applicable, and
  • appeal a denial of a request in many states.

How to Submit a Request

  • Email: privacy@cheeky-fit.com with the subject line "Privacy Rights Request"
  • Mail: Cheeky-Fit Inc., 8610 Liberty Trail, Manassas, VA 20110 US
  • In your request, tell us which right you want to exercise (access, correction, deletion, portability, opt-out of sale/sharing/targeted advertising, or appeal) and enough information for us to verify your identity.

We will acknowledge consumer privacy requests within the timeframes required by applicable law (generally within 10 business days under the California Consumer Privacy Act, as amended by the CPRA) and will respond substantively within 45 days, with one 45-day extension when reasonably necessary and permitted by law.

Authorized Agents

In certain states, you may use an authorized agent to submit requests on your behalf. We will verify the agent's authority and may require proof of signed permission and verification of your identity.

Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

State-Specific Disclosures

California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides additional rights and requires additional disclosures.

Notice at Collection. We collect the categories of personal information described in "What We Collect" above for the business and commercial purposes described in "How We Use Personal Information." We retain each category for the periods described in "Data Retention."

Sale and Sharing. Cheeky-Fit Inc. does not sell personal information for money. We may "share" personal information for cross-context behavioral advertising, or engage in targeted advertising, as those terms are defined under California and other state laws, when we use advertising or analytics partners. You may opt out by emailing privacy@cheeky-fit.com with the subject "Do Not Sell or Share My Personal Information," or by sending a recognized opt-out preference signal such as Global Privacy Control.

Sensitive personal information. Where we process sensitive personal information, we do so only for purposes permitted by the CCPA/CPRA, such as providing the Services you request, security, and compliance. You may request that we limit use and disclosure of sensitive personal information to those permitted purposes by emailing privacy@cheeky-fit.com.

Shine the Light. California Civil Code § 1798.83 permits California residents to request certain information about disclosure of personal information to third parties for their direct marketing purposes. To make such a request, email privacy@cheeky-fit.com.

We honor opt-out preference signals where required. You may use an authorized agent as described above.

Other State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and other states with comprehensive consumer privacy laws may have rights to access, correct, delete, obtain a portable copy of personal data, and opt out of targeted advertising, sale of personal data, or certain profiling. We provide a standardized request process through privacy@cheeky-fit.com and apply state-specific handling, including appeal rights, where required.

Virginia residents: Because Cheeky-Fit Inc. is based in Virginia, Virginia Consumer Data Protection Act rights and appeal procedures are available to Virginia consumers through the same email route. If we deny your request, you may appeal by replying to our decision email within a reasonable time; we will respond to appeals within 60 days as required by the VCDPA.

Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If we learn we collected personal information from a child under 13 without verifiable parental consent where required, we will take steps to delete it. If you believe a child has provided personal information, contact us at privacy@cheeky-fit.com.

Consistent with our Child Safety standards, Cheeky is not intended for unsupervised users under 18. Users under 18 should only use the Services with parental or guardian involvement where permitted by these Terms and applicable law.

If we offer a child-directed experience in the future, we will provide additional notices and obtain verifiable parental consent where required by COPPA and related laws.

International Users and Transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be processed and stored in the U.S. and other jurisdictions where we or our service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the Last Updated date and, if changes are material, we will provide additional notice as required by law.

Contact Us

Privacy inquiries: privacy@cheeky-fit.com
Mail: Cheeky-Fit Inc., 8610 Liberty Trail, Manassas, VA 20110 US
Phone: Privacy requests are handled by email. We do not operate a public privacy phone line.

Frequently asked questions

What personal data does Cheeky collect?

Cheeky-Fit Inc. collects account, wardrobe, usage, and commerce data needed to operate the app and website. See cheeky-fit.com/privacy for the full category list.

How does Cheeky use my wardrobe photos?

Wardrobe photos are used to digitize and tag your closet, power styling features, and operate the service. Details are in the Cheeky Privacy Policy.

Does Cheeky sell my personal data?

Read cheeky-fit.com/privacy for how Cheeky-Fit Inc. shares data with service providers and what is not sold. Contact privacy@cheeky-fit.com with questions.

How do I exercise privacy rights?

Email privacy@cheeky-fit.com with the subject "Privacy Rights Request" to request access, correction, deletion, portability, or opt-out of sale/sharing where applicable. Cheeky-Fit Inc. responds within the timelines required by U.S. state privacy laws.

Who is Cheeky's data controller?

Cheeky-Fit Inc., based in Manassas, Virginia, publishes the privacy policy at cheeky-fit.com/privacy and handles privacy inquiries at privacy@cheeky-fit.com.

Does Cheeky use cookies on the website?

The cheeky-fit.com website may use analytics and functional technologies described in the Privacy Policy. See the policy for cookie and tracking details.

How does Cheeky protect children's privacy?

Cheeky publishes child safety standards at cheeky-fit.com/child-safety. Report concerns to jpande-cfo@cheeky-fit.com immediately.

When was the Cheeky Privacy Policy last updated?

The Privacy Policy includes a last-updated date in the document and structured metadata. Review cheeky-fit.com/privacy for the current version.