{
  "slug": "security",
  "url": "https://www.cheeky-fit.com/security",
  "path": "/security",
  "json": "https://www.cheeky-fit.com/security.json",
  "title": "Operations & Data | Security at Cheeky-Fit",
  "headline": "Built, shipped, run.",
  "description": "How Cheeky-Fit builds, ships, and runs software: named controls, an auditable deploy pipeline, data ownership, and what we do not claim.",
  "language": "en-US",
  "dateModified": "2026-09-08",
  "image": "https://www.cheeky-fit.com/images/marketing/b2b-operate.webp",
  "publisher": {
    "@type": "Organization",
    "name": "Cheeky-Fit Inc.",
    "legalName": "Cheeky-Fit Inc.",
    "brand": "Cheeky",
    "url": "https://www.cheeky-fit.com/",
    "foundingDate": "2024",
    "location": "Manassas, Virginia, United States",
    "email": "jpande-cfo@cheeky-fit.com",
    "sameAs": [
      "https://www.instagram.com/_cheeky.fit",
      "https://x.com/cheekyfit_",
      "https://www.youtube.com/@CheekyFitInc",
      "https://www.linkedin.com/company/cheeky-fit/",
      "https://www.pinterest.com/cheekyfit/",
      "https://mastodon.social/@cheekyfit",
      "https://open.spotify.com/show/4kIbMKoypVmPAHKrxvvvPb",
      "https://www.crunchbase.com/organization/cheekyfit",
      "https://medium.com/@CheekyFit"
    ]
  },
  "app": {
    "name": "Cheeky",
    "tagline": "The AI fashion network",
    "categories": [
      "lifestyle",
      "shopping",
      "social"
    ],
    "platforms": [
      "iOS",
      "Android",
      "Web"
    ],
    "ios": {
      "url": "https://apps.apple.com/us/app/cheeky-fit-fashion/id6791432717",
      "appId": "6791432717",
      "bundleName": "Cheeky-Fit Fashion"
    },
    "android": {
      "url": "https://play.google.com/store/apps/details?id=com.cheekyfit.app",
      "packageName": "com.cheekyfit.app"
    },
    "price": "Free to download",
    "sellerCommission": "0%",
    "marketplaceReach": "22+ countries",
    "features": [
      "Closet: AI wardrobe digitization and searchable clothing organization",
      "Styling: AI outfit recommendations and wardrobe gap analysis",
      "Social: real-outfit discovery through a fashion feed",
      "Marketplace: global fashion brands selling at 0% seller commission"
    ]
  },
  "sections": [
    {
      "heading": null,
      "text": "Verifiable against this site right now."
    },
    {
      "heading": "Three commitments that hold on every build.",
      "level": 2,
      "text": ""
    },
    {
      "heading": "Working software, not a proof of concept",
      "level": 3,
      "text": "From scoping call to a running app on production infrastructure, with CI/CD, monitoring, and a maintenance owner from day one. No second budget to make it real."
    },
    {
      "heading": "Built on the stack you already run",
      "level": 3,
      "text": "Android, iOS, Vertex AI, Gemini, and Google Cloud already run in our production systems. What we build for you lives where your teams already work."
    },
    {
      "heading": "One senior team, start to finish",
      "level": 3,
      "text": "The engineers who scope the work are the ones who build it and keep it running. No account layer, no handoff loss, no offshore ticket queue."
    },
    {
      "heading": "Nothing reaches production by hand.",
      "level": 2,
      "text": "Reviewed preview, identical artifact, immutable releases. The pipeline is the same one this site ships through."
    },
    {
      "heading": "Pull request",
      "level": 3,
      "text": "Build, then a preview URL on its own host, reviewed in a browser before anything merges."
    },
    {
      "heading": "Merge to main",
      "level": 3,
      "text": "Build, then production. The same artifact that was previewed; no hand-copied files."
    },
    {
      "heading": "Rollback",
      "level": 3,
      "text": "The previous release, in one action, with no rebuild."
    },
    {
      "heading": "Whose it is, how it leaves.",
      "level": 2,
      "text": "Yours, in accounts you control. Never touches us. Stripe handles payments end to end. Never shared. No models are trained on your data. Least privilege. Secrets never in source. Self-serve for app users at /delete-my-account. In client systems, built in. /privacy, and privacy@cheeky-fit.com for a request."
    },
    {
      "heading": "No badges we have not earned.",
      "level": 2,
      "text": "No SOC 2, ISO 27001, or HIPAA attestation today. You hear that in the first call. Instead: named controls and an auditable pipeline. Answered by engineers, not sales. You hear from us first. Answered by the people who wrote the code. A mutual NDA, if you want one. Scroll to turn the page"
    },
    {
      "heading": "Built, shipped, run.",
      "level": 1,
      "text": "Named controls, an auditable deploy pipeline, data you own."
    }
  ],
  "faqs": [
    {
      "question": "Does Cheeky-Fit hold SOC 2 or ISO 27001?",
      "answer": "No. Cheeky-Fit Inc. holds no SOC 2, ISO 27001, or HIPAA attestation today and does not imply otherwise. If procurement requires a certified vendor, you will hear that in the first call."
    },
    {
      "question": "What security controls are in place?",
      "answer": "HTTPS with a one-year HSTS lifetime, a deny-by-default content security policy, nosniff, SAMEORIGIN framing, a strict referrer policy, and a locked-down permissions policy. They are verifiable in your own browser console."
    },
    {
      "question": "How does code reach production?",
      "answer": "Through CI only. A pull request builds a preview on its own URL for review, and a merge deploys the identical artifact to production. Releases are immutable, so a rollback is selecting the previous one."
    },
    {
      "question": "Where does my data live?",
      "answer": "Where you want it. Systems are delivered into infrastructure accounts your business controls, so ending an engagement never means negotiating for access to your own records."
    },
    {
      "question": "Is card data handled by Cheeky-Fit?",
      "answer": "No. Payments run through Stripe and card numbers go from the customer's browser to Stripe directly, never touching Cheeky-Fit infrastructure. Cheeky-Fit is a participant in the Stripe Accelerate program."
    },
    {
      "question": "Do you train models on client data?",
      "answer": "No. Retrieval runs against your records to answer your questions. Cheeky-Fit does not train shared or third-party models on one client's data, and model providers are swappable per workload."
    },
    {
      "question": "How is access managed?",
      "answer": "Least privilege, granted per person and removed when an engagement ends. Credentials live in managed secret storage and are never committed to source."
    },
    {
      "question": "Can you complete our security questionnaire?",
      "answer": "Yes, answered by the engineers who built the system rather than by sales. Send it before the scoping call if it is a gate, so a mismatch surfaces early."
    },
    {
      "question": "What happens if there is an incident?",
      "answer": "You hear it from Cheeky-Fit first: what happened, what was exposed, and what changed. Not a status page euphemism."
    },
    {
      "question": "How do I delete my data?",
      "answer": "Cheeky app users have a self-serve route at cheeky-fit.com/delete-my-account. For client systems, deletion behaviour is built in rather than bolted on. Privacy questions go to privacy@cheeky-fit.com."
    }
  ],
  "plainText": "Verifiable against this site right now.\n\nThree commitments that hold on every build.\n\n\nWorking software, not a proof of concept\nFrom scoping call to a running app on production infrastructure, with CI/CD, monitoring, and a maintenance owner from day one. No second budget to make it real.\n\nBuilt on the stack you already run\nAndroid, iOS, Vertex AI, Gemini, and Google Cloud already run in our production systems. What we build for you lives where your teams already work.\n\nOne senior team, start to finish\nThe engineers who scope the work are the ones who build it and keep it running. No account layer, no handoff loss, no offshore ticket queue.\n\nNothing reaches production by hand.\nReviewed preview, identical artifact, immutable releases. The pipeline is the same one this site ships through.\n\nPull request\nBuild, then a preview URL on its own host, reviewed in a browser before anything merges.\n\nMerge to main\nBuild, then production. The same artifact that was previewed; no hand-copied files.\n\nRollback\nThe previous release, in one action, with no rebuild.\n\nWhose it is, how it leaves.\nYours, in accounts you control. Never touches us. Stripe handles payments end to end. Never shared. No models are trained on your data. Least privilege. Secrets never in source. Self-serve for app users at /delete-my-account. In client systems, built in. /privacy, and privacy@cheeky-fit.com for a request.\n\nNo badges we have not earned.\nNo SOC 2, ISO 27001, or HIPAA attestation today. You hear that in the first call. Instead: named controls and an auditable pipeline. Answered by engineers, not sales. You hear from us first. Answered by the people who wrote the code. A mutual NDA, if you want one. Scroll to turn the page\n\nBuilt, shipped, run.\nNamed controls, an auditable deploy pipeline, data you own.",
  "structuredData": [
    {
      "@context": "https://schema.org",
      "@graph": [
        {
          "@type": "Organization",
          "@id": "https://www.cheeky-fit.com/#organization",
          "name": "Cheeky-Fit Inc.",
          "alternateName": "Cheeky",
          "url": "https://www.cheeky-fit.com/",
          "logo": {
            "@type": "ImageObject",
            "url": "https://www.cheeky-fit.com/icon-1024x1024.png",
            "width": 1024,
            "height": 1024
          },
          "image": "https://www.cheeky-fit.com/images/marketing/social-share.png",
          "description": "Cheeky-Fit Inc. builds AI-native software and AI infrastructure for small and medium businesses, and publishes Cheeky, an AI fashion network for iPhone and Android.",
          "foundingDate": "2024",
          "foundingLocation": {
            "@type": "Place",
            "name": "Manassas, Virginia, United States"
          },
          "address": {
            "@type": "PostalAddress",
            "addressLocality": "Manassas",
            "addressRegion": "VA",
            "addressCountry": "US"
          },
          "contactPoint": [
            {
              "@type": "ContactPoint",
              "contactType": "customer support",
              "email": "jpande-cfo@cheeky-fit.com",
              "url": "https://www.cheeky-fit.com/support",
              "availableLanguage": [
                "English"
              ]
            },
            {
              "@type": "ContactPoint",
              "contactType": "privacy inquiries",
              "email": "privacy@cheeky-fit.com",
              "url": "https://www.cheeky-fit.com/privacy",
              "availableLanguage": [
                "English"
              ]
            },
            {
              "@type": "ContactPoint",
              "contactType": "legal inquiries",
              "email": "legal@cheeky-fit.com",
              "url": "https://www.cheeky-fit.com/legal",
              "availableLanguage": [
                "English"
              ]
            }
          ],
          "sameAs": [
            "https://apps.apple.com/us/app/cheeky-fit-fashion/id6791432717",
            "https://play.google.com/store/apps/details?id=com.cheekyfit.app",
            "https://www.instagram.com/_cheeky.fit",
            "https://x.com/cheekyfit_",
            "https://www.youtube.com/@CheekyFitInc",
            "https://www.linkedin.com/company/cheeky-fit/",
            "https://www.pinterest.com/cheekyfit/",
            "https://mastodon.social/@cheekyfit",
            "https://open.spotify.com/show/4kIbMKoypVmPAHKrxvvvPb",
            "https://www.crunchbase.com/organization/cheekyfit",
            "https://medium.com/@CheekyFit"
          ],
          "knowsAbout": [
            "Custom software development",
            "AI infrastructure",
            "Retrieval-augmented generation",
            "API design",
            "Mobile application development",
            "Managed technical operations"
          ],
          "employee": [
            {
              "@id": "https://www.cheeky-fit.com/#mia-baden"
            },
            {
              "@id": "https://www.cheeky-fit.com/#jaideep-pande"
            },
            {
              "@id": "https://www.cheeky-fit.com/#hallan-maxwel"
            }
          ],
          "makesOffer": {
            "@id": "https://www.cheeky-fit.com/#services"
          }
        },
        {
          "@type": "WebSite",
          "@id": "https://www.cheeky-fit.com/#website",
          "url": "https://www.cheeky-fit.com/",
          "name": "Cheeky",
          "alternateName": "Cheeky-Fit",
          "description": "Cheeky-Fit builds and runs custom AI-native software for small and medium businesses — apps, websites, AI infrastructure, and API endpoints, built for one business and maintained after launch.",
          "inLanguage": "en-US",
          "publisher": {
            "@id": "https://www.cheeky-fit.com/#organization"
          }
        },
        {
          "@type": "WebPage",
          "@id": "https://www.cheeky-fit.com/security#webpage",
          "url": "https://www.cheeky-fit.com/security",
          "name": "Operations & Data | Security at Cheeky-Fit",
          "description": "How Cheeky-Fit builds, ships, and runs software: transport and browser controls, an auditable deploy pipeline, data ownership, and the certifications we do not claim.",
          "isPartOf": {
            "@id": "https://www.cheeky-fit.com/#website"
          },
          "about": {
            "@id": "https://www.cheeky-fit.com/#organization"
          },
          "primaryImageOfPage": "https://www.cheeky-fit.com/images/marketing/social-share.png",
          "inLanguage": "en-US",
          "speakable": {
            "@type": "SpeakableSpecification",
            "cssSelector": [
              ".editorial-title",
              ".editorial-lead"
            ]
          },
          "mainEntity": {
            "@id": "https://www.cheeky-fit.com/#organization"
          },
          "dateModified": "2026-07-11",
          "author": {
            "@id": "https://www.cheeky-fit.com/#mia-baden"
          },
          "publisher": {
            "@id": "https://www.cheeky-fit.com/#organization"
          }
        },
        {
          "@type": "ProfessionalService",
          "@id": "https://www.cheeky-fit.com/#services",
          "name": "Cheeky-Fit — AI-native software and infrastructure",
          "description": "Cheeky-Fit Inc. builds and runs custom AI-native software for small and medium businesses: apps, websites, internal tools, AI infrastructure, and API endpoints, built for one business and maintained after launch.",
          "url": "https://www.cheeky-fit.com/platform",
          "provider": {
            "@id": "https://www.cheeky-fit.com/#organization"
          },
          "areaServed": {
            "@type": "Country",
            "name": "Worldwide"
          },
          "serviceType": [
            "Custom software development",
            "AI infrastructure",
            "API design and development",
            "Mobile application development",
            "Managed technical operations"
          ],
          "hasOfferCatalog": {
            "@type": "OfferCatalog",
            "name": "Engagement models",
            "url": "https://www.cheeky-fit.com/engagements",
            "itemListElement": [
              {
                "@type": "Offer",
                "itemOffered": {
                  "@type": "Service",
                  "name": "Map",
                  "description": "A short scoping engagement ending in a written architecture and build sequence the client owns outright."
                }
              },
              {
                "@type": "Offer",
                "itemOffered": {
                  "@type": "Service",
                  "name": "Build & Run",
                  "description": "The full stack designed, built, launched, and then maintained by the team that wrote it."
                }
              },
              {
                "@type": "Offer",
                "itemOffered": {
                  "@type": "Service",
                  "name": "Fractional team",
                  "description": "Taking over an existing stack month to month, adding the AI layer, and covering maintenance and on-call."
                }
              }
            ]
          }
        },
        {
          "@type": "Person",
          "@id": "https://www.cheeky-fit.com/#mia-baden",
          "name": "Mia Baden",
          "jobTitle": "Founder and Software Engineer",
          "worksFor": {
            "@id": "https://www.cheeky-fit.com/#organization"
          }
        },
        {
          "@type": "Person",
          "@id": "https://www.cheeky-fit.com/#jaideep-pande",
          "name": "Jaideep Pande",
          "jobTitle": "Co-Founder and Head of Business",
          "worksFor": {
            "@id": "https://www.cheeky-fit.com/#organization"
          }
        },
        {
          "@type": "Person",
          "@id": "https://www.cheeky-fit.com/#hallan-maxwel",
          "name": "Hallan Maxwel",
          "jobTitle": "Computer Vision Engineer",
          "worksFor": {
            "@id": "https://www.cheeky-fit.com/#organization"
          }
        },
        {
          "@type": "BreadcrumbList",
          "@id": "https://www.cheeky-fit.com/security#breadcrumb",
          "itemListElement": [
            {
              "@type": "ListItem",
              "position": 1,
              "name": "Home",
              "item": "https://www.cheeky-fit.com/"
            },
            {
              "@type": "ListItem",
              "position": 2,
              "name": "Operations & data",
              "item": "https://www.cheeky-fit.com/security"
            }
          ]
        }
      ]
    }
  ],
  "licence": "Content may be quoted with attribution to Cheeky-Fit Inc. and a link to the source URL."
}