Privacy Policy | Cheesebase

Last Updated: 3/23/2025

Introduction

Welcome to Cheesebase! Cheesebase is a global social media and trainer booking platform owned and operated by OTUSK LLC (USA). We are committed to protecting your privacy. This Privacy Policy explains in plain language what information we collect from you, how we use and share it, and how we keep it safe. It also describes your rights regarding your information (including rights under GDPR and CCPA) and how you can exercise them. By using Cheesebase, you agree to the practices described in this Privacy Policy, which is part of our Terms of Service. If you do not agree with these practices, please do not use the platform.

Information We Collect

We collect information to provide and improve Cheesebase's services. Here's what we collect and how we get it:

Personal Information:

When you create an account, we ask for basic details like your name and email address. This helps us identify you and communicate with you. (We will also collect any other information you choose to provide in your account settings, such as a profile picture or bio.)

User-Generated Content:

We collect the content you create and share on Cheesebase. This includes your profile information (like your username, biography, profile photo), posts, photos, videos, comments, and any other material you upload or submit on the platform. Keep in mind that content you post may be visible to other users on the platform.

Location Data:

If you choose to share your location or enable location features, we may collect location information. For example, you might tag a post with a location or allow Cheesebase to access your location to show nearby trainers or relevant content. Providing location data is optional – we only collect it if you have enabled it on your device or within the app. You can disable location access at any time in your device settings.

Usage and Device Information:

Like most apps and websites, we gather some data automatically about how you use Cheesebase. This includes things like your device or browser type, IP address, and usage logs (for instance, pages or features you use, timestamps, and crashes or error reports). We collect this to help diagnose technical issues and understand overall usage trends. This information is typically collected via our analytics tools (explained below) and helps us improve Cheesebase's functionality and user experience.

Communications with Us:

If you contact Cheesebase support or communicate with us (for example, by emailing support@cheesebase.com or through an in-app help feature), we will collect the information you provide in those interactions. This may include your contact information and a record of the correspondence, which we use to assist you and improve our services.

How We Use Your Information

We use the collected information to operate, maintain, and improve Cheesebase. The main ways we use your data include:

Providing and Personalizing the Service:

We use your information to create and manage your account, allow you to connect with trainers and other users, and display your profile and content to others as you intend. For example, we use your name and profile info to identify you to other users, and your posts and photos are used to populate your feed and those of your followers. We also may use your information to customize your experience – such as suggesting trainers or content you might like.

Facilitating Bookings and Transactions:

Cheesebase is also a trainer booking platform, so we use data to enable sessions and payments. If you book a session with a trainer or earn money as a trainer, we will use your relevant information to process payments (via our payment processor, Stripe) and keep records of transactions. This includes using personal info to confirm your identity, process your credit card or other payment details through Stripe, and send you receipts or booking confirmations.

Communicating with You:

We use your email (and any other contact info you provide) to send important notices and updates. This includes confirmations of account actions (like signing up or password resets), notifications about bookings or messages, updates about new features or changes to our terms/policies, and responses when you contact support. We may also send you marketing communications about new features, content, or promotions on Cheesebase that we think you'd be interested in. If you prefer not to receive promotional emails, you can opt out at any time by clicking the unsubscribe link in those emails or contacting us. (Transactional and account-related messages, however, will still be sent as needed for the service.)

Analytics and Product Improvement:

We want to make Cheesebase better. To do that, we analyze how users interact with the platform. We use analytics tools (like PostHog) to collect usage data (e.g. which features are popular, how often certain buttons are clicked, or where users encounter errors). This helps us understand what is working and what needs improvement. Wherever possible, we use this data in an aggregated or anonymized form, so it doesn't directly identify individuals. By monitoring usage patterns and fixing bugs, we can improve Cheesebase's performance, safety, and user experience. (See more about PostHog in the "Third-Party Services" section below.)

Safety, Security, and Legal Compliance:

We are committed to keeping Cheesebase a safe community. We may use your information to monitor for fraud, security threats, or violations of our Terms of Service. For example, we might review reports of inappropriate content or misuse, and use data (like user content and account info) to investigate and take action. We also use data as needed to comply with legal obligations – for instance, retaining transaction records for financial regulations or responding to valid legal requests. If necessary, we may use or disclose information to protect the rights, property, or safety of our users, OTUSK LLC, or others (for example, to report suspected illegal activity).

How We Share Your Information

We do not sell your personal information to third parties. However, we do share certain information with others in the following circumstances to run Cheesebase effectively and in compliance with the law:

With Other Cheesebase Users:

Since Cheesebase is a social platform, some of your information is shared with other users by design. For example, other users can see the profile information you provide (like your name, username, bio, profile picture), as well as any content you post publicly (such as your photos, posts, and comments). If you book a session with a trainer, the trainer will see your relevant information (e.g. your name and any details necessary for the booking). Likewise, if you are a trainer, the users who book with you will see information you share about your services. Remember: any information you choose to share publicly on your profile or in posts will be visible to others, so only share content you are comfortable being public.

With Service Providers (Third-Party Partners):

We use a few trusted third-party companies to help us provide the Cheesebase service. We only share information with these service providers as needed for them to perform their tasks, and they are contractually required to protect it and use it only for that purpose. The key third-party services we use are:

Stripe Connect (Payments):

We use Stripe to handle all payments and payouts on Cheesebase. When you make or receive payments through the platform, your payment information (such as credit card number, billing info, or bank account for payouts) is collected directly by Stripe. Stripe may also receive identifying information about you (like your name, email, and possibly your address or tax ID if you are a trainer receiving payouts) to process transactions and comply with law. Cheesebase itself does not store your sensitive payment details — that information is securely transmitted to and stored by Stripe. Stripe is a globally trusted payment processor, and it will only use your data for payment processing, fraud prevention, and regulatory compliance. (Please refer to Stripe's privacy policy for details on how they protect your data.)

Privacy Policy: Stripe Privacy Policy

AWS (Backend & Hosting):

Our application is built on Amazon Web Services (AWS), which provides our backend infrastructure. This means that the data you provide to Cheesebase (your profile information, posts, messages, etc.) is stored in AWS cloud servers. AWS maintains stringent security and privacy practices, with numerous compliance certifications and security controls. We use AWS EC2 for hosting and running our application servers, and AWS S3 for secure storage of user data and content. AWS processes this data on our behalf for things like data storage, authentication (logging you in securely), and managing your content. We rely on AWS's enterprise-grade infrastructure to keep your data safe and available through features like automatic backups, encryption in transit and at rest, and robust access controls. AWS's privacy policy governs how data is handled within their systems.

Privacy Policy: AWS Privacy Policy

PostHog (Analytics):

We use PostHog to collect analytics data about how users engage with Cheesebase. PostHog operates within our product to track events (like button clicks, page views, or feature usage) so we can analyze user behavior. This helps us find out which features are useful, detect problems, and make improvements. The data PostHog collects may include identifiers like your device or browser type and user actions within the app, but we have configured it to avoid collecting personally identifying details wherever possible. The analytics data is mainly in aggregate form (e.g., total number of users using a feature) and is used internally. By using Cheesebase, you consent to this type of data collection for analytics purposes. If you do not want to be included in analytics tracking, you may be able to opt out by adjusting your device or browser settings to send a "Do Not Track" signal, or by contacting us at support@cheesebase.com – we will do our best to accommodate. PostHog, like our other providers, is bound to protect the data it collects on our behalf.

Privacy Policy: PostHog Privacy Policy

Aside from the above, we may also use other third-party services for features like email delivery, customer support, or content moderation. If we do, we will ensure they are similarly bound to protect your data, and we'll update this policy if needed.

For Legal Reasons or Safety:

We may disclose your information if we are required to do so by law or legal process (for example, in response to a court order or a valid subpoena), or when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request. In such cases, we will only share the information that is necessary to comply with the law or ensure safety.

Business Transfers:

If Cheesebase or OTUSK LLC is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred to another entity as part of that transaction. If that happens, we will ensure that the new owner respects your privacy rights in the same way and notify you (for example, via email or a notice on the platform) of any change in data handling.

With Your Consent:

Apart from the situations above, we will only share your personal information if you direct us to or give us your consent. For instance, if in the future we introduce a feature that lets you share information with a third-party app, we would do so only if you opt in to that sharing.

Again, we do NOT sell your personal data to advertisers or any other third parties. We also do not share your information with third parties for their own marketing purposes. Any sharing we do is solely to run and improve Cheesebase or to comply with the law, as described above.

Cookies and Tracking Technologies

As of now, Cheesebase does not use cookies or tracking pixels on our website or app. Many websites use cookies (small text files stored on your device) or similar technologies to remember user preferences or track behavior. Currently, we do not deploy any of these tracking technologies for advertising or analytics on Cheesebase. The only form of "tracking" in our platform is the usage data collected via PostHog analytics as described above, which does not involve traditional advertising cookies. If in the future we decide to use cookies or similar technologies, we will update this Privacy Policy and (if required by law) ask for your consent.

Please note that our third-party partners (Stripe, Firebase, PostHog, etc.) may use their own cookies or tracking mechanisms when providing their services (for example, Stripe might use cookies to remember your session during checkout, or Firebase might use certain identifiers for push notifications or analytics). These would be governed by those services' own policies. Cheesebase itself, however, does not set any advertising cookies or trackers on your device at this time.

Data Security

We take the security of your personal information seriously. Cheesebase implements industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. This includes using encryption for data in transit (e.g., HTTPS secure connections in the app and website) and, where applicable, encryption at rest. Our third-party providers like AWS and Stripe also employ strong security practices (for example, AWS secures our databases and Stripe is PCI-DSS compliant for payment security). We also limit access to personal data only to employees and contractors who need it to operate or improve the platform, and they are subject to strict confidentiality obligations.

Despite all these safeguards, no method of transmission over the internet or electronic storage is 100% secure. Therefore, while we strive to protect your information, we cannot guarantee absolute security. It's important that you also play a role in keeping your account secure – for example, choose a strong password, keep it confidential, and notify us immediately at support@cheesebase.com if you suspect any unauthorized access to your account.

Data Retention

We will retain your personal information for as long as necessary to provide you with the Cheesebase services and fulfill the purposes described in this policy. This generally means we keep your data while you have an active account. If you choose to delete your account or request deletion of your data, we will delete or anonymize your personal information, unless we are required to keep it longer for legal reasons. For example, we might retain certain transaction records to comply with tax or accounting laws, or keep information if we reasonably anticipate a legal dispute regarding your account. When we no longer have a legitimate need to keep your personal data, we will securely dispose of it.

Age Requirements and Children's Privacy (18+ Only)

Cheesebase is intended for adults only. You must be at least 18 years old to use Cheesebase. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, please do not use our platform or provide any information about yourself. In the event that we discover we have collected personal data from a minor under 18, we will take immediate steps to delete that information.

If you are a parent or guardian and believe that a minor under 18 may have provided personal information to us, please contact us at support@cheesebase.com so we can investigate and remove the data if necessary. We take children's privacy seriously, and part of our commitment is enforcing our 18+ age restriction as outlined in our Terms of Service.

Your Privacy Rights (GDPR & CCPA)

Depending on where you live, you may have specific legal rights regarding your personal information. Cheesebase is a global platform, so we strive to honor the privacy rights of our users under laws like the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as other applicable laws. We provide all users with the ability to access, control, or delete their personal information as described below.

• Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this in a common electronic format. For EU users (under GDPR), this is known as the right of access and data portability.

• Correction (Rectification)

If any of your information is incorrect or outdated, you have the right to ask us to correct or update it. You can also update much of your basic information directly in your Cheesebase profile settings.

• Deletion (Right to be Forgotten)

You can request that we delete your personal data. For example, you can delete your Cheesebase account, or ask us to remove specific information. We will honor deletion requests to the extent we are not legally required to keep the data. Once your data is deleted, it may take some time to fully remove it from all backups and systems, but we will proceed as quickly as practical.

• Withdrawal of Consent

If we are processing any of your information based on your consent (for instance, if you explicitly consented to a new feature or optional data collection), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we did before your withdrawal.

• Objection and Restriction

You have the right to object to certain processing or ask us to limit processing in some cases. For example, you can ask us not to use your data for direct marketing purposes. We will respect such requests as required by applicable law.

• California Privacy Rights

If you are a California resident, the CCPA gives you the right to request details about what personal information we collect, how we use it, and what we share/disclose. You also have the right to request deletion of your data (as noted above) and the right to opt out of the sale of your personal information. As stated, Cheesebase does not sell your personal information, so there is no need for an opt-out in that regard. California users also have the right not to receive discriminatory treatment for exercising their CCPA rights – we treat all users equally, whether or not they exercise their privacy rights. Additionally, California's "Shine the Light" law permits users to request certain information about our disclosure of personal information to third parties for their direct marketing purposes; however, we do not share personal data with third parties for independent direct marketing.

• Authorized Agent (California)

If you are a California resident, you can designate an authorized agent to make requests on your behalf regarding your rights under CCPA. We will take steps to verify the identity of the person making the request and their authority to act on your behalf to prevent unauthorized access to your data.

• Exercising Your Rights

We want to make it easy for you to exercise any of these rights. To make a request, simply email us at support@cheesebase.com. Please state clearly what you are requesting (for example, "I would like a copy of my data," or "Please delete my account and all associated data"). We may need to verify your identity before fulfilling certain requests (for instance, by confirming you have access to the email associated with your account) to ensure we protect your data from unauthorized access. We will respond to your request as soon as possible, and in any case within the timeframe required by law (if applicable, e.g. within 30 days for GDPR requests). There is no charge for making these requests, though repetitive or excessive requests may incur a reasonable fee as permitted by law.

If you have concerns about how we handle your data, you also have the right to lodge a complaint with a data protection authority (for EU users) or with the relevant authorities in your jurisdiction. We would appreciate the chance to address your concerns first, so please feel free to reach out to us directly so we can help resolve any issues.

Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by (for example) posting a prominent notice in the Cheesebase app or on our website, or sending an email to the address associated with your account. The "Last Updated" date at the top of this policy will always indicate when the latest changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Cheesebase after any changes to this policy means you accept those changes. If you do not agree with a revised policy, you should disable your account or stop using Cheesebase.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us. We're here to help. You can reach us at:

Email: support@cheesebase.com

Address: OTUSK LLC (Cheesebase Support), 85-91 150th St., Jamaica, NY 11435, USA

We will gladly answer your questions and address any issues to the best of our ability. Your privacy is important to us, and we're committed to protecting it and being transparent about our practices. Thank you for trusting Cheesebase with your information and for being part of our community!