CherryFare

Privacy Policy

Effective date: 1 November 2026

1. About This Policy

1.1 This Privacy Policy explains how Cherry Labs j.d.o.o., Pavlinska ulica 5, 42000 Varaždin, Croatia (“we,” “us,” or “our”), processes personal data in connection with the CherryFare Android application (“App”) and cherryfare.com (“Website”). We are the data controller for the processing described in this Policy.

1.2 CherryFare helps ride-hailing drivers analyze ride offers, estimate profitability, and display results in an on-screen overlay. It does not automatically accept or reject rides or control other applications on your behalf.

1.3 For privacy questions or to exercise your rights, contact support@cherryfare.com.

2. Information We Process

2.1 Screen capture and ride information. When you enable screen capture through Android, CherryFare analyzes screen images on your device to recognize ride offers and calculate results. This can include fares, distances, times, addresses, and other people’s information visible on your screen.

Screen images, recognized text, and calculated results are processed only in temporary device memory. CherryFare does not save them to your device’s storage or send them to us, Google, or anyone else. The App keeps no screenshot or ride-offer history.

Screen capture is required for live analysis. You can stop it through the App or its ongoing notification; stopping capture stops the analysis.

2.2 Settings and profiles. Profiles, preferences, calculation settings, and location-warning entries are stored on your device and are not synchronized with our servers.

2.3 Subscriptions and verification. Google Play processes subscription purchases. The App exchanges purchase tokens, subscription details, installation-related identifiers, and app-integrity information with our backend and Google services to verify paid access and prevent misuse. Verification is required to enable paid features. We do not receive your payment-card details.

2.4 Technical information. Our service infrastructure may process IP addresses, request details, and error logs. Separately from on-device text recognition, Google’s ML Kit SDK may send Google technical metrics, including device and App information, identifiers, and usage and performance data. Google states that it uses these metrics to measure performance, debug, maintain and improve its APIs, and detect misuse or abuse, as described in its Privacy Policy.

2.5 Support communications. If you contact us, we process your email address, message, and information you provide. The App’s Report a problem feature lets you review a report before opening it in your email application. You may optionally include technical details such as App and Android versions, device information, permission status, and limited error information. Screenshots, recognized text, and saved profiles are not automatically included.

2.6 Website information. Cloudflare processes IP addresses and technical request information to deliver and protect the Website and provide server-side traffic statistics, including visitor estimates and approximate country information. We do not use browser-based analytics or analytics cookies. Cloudflare may use strictly necessary security cookies to protect the Website and remember completed security checks.

3. How We Use Information

3.1 Providing the service. We process screen content to analyze ride offers and subscription data to verify paid access. For information about you necessary for these functions, we rely on our contract with you. For incidental on-device processing of other people’s information, we rely on our legitimate interest in providing the live analysis you request.

3.2 Security and reliability. We process technical and verification data to prevent misuse, investigate errors, and maintain our services. We rely on our legitimate interests in their security and reliable operation.

3.3 Support and inquiries. We process communications to answer questions and resolve problems. We rely on contractual necessity for support required to provide your subscribed service, and on our legitimate interest in responding to other inquiries.

3.4 Legal obligations. We process personal data where necessary to comply with applicable law, including handling statutory complaints and data protection requests.

3.5 Website operation. We rely on our legitimate interests in delivering and protecting the Website and understanding its traffic.

Whenever we rely on legitimate interests, we consider whether your rights and freedoms override those interests.

4. Sharing and International Transfers

4.1 Service providers. We use Google services for subscriptions, app-integrity checks, cloud hosting, support email, and on-device text recognition. We use Cloudflare for Website hosting, security, and traffic statistics. These providers process information as described in Section 2, either on our behalf or for their own purposes, depending on the service and processing. See Google’s Privacy Policy and Cloudflare’s Privacy Policy.

4.2 Services you choose. Your chosen email application or storage provider processes information under its own privacy practices when you send a support email or save a document.

4.3 Legal disclosures. We may disclose personal data where required by law or where necessary and lawful to establish, exercise, or defend legal claims or prevent fraud and misuse.

4.4 International transfers. Google and Cloudflare may process personal data outside the European Economic Area (EEA), including in the United States. Depending on the service and transfer, applicable safeguards include European Commission adequacy decisions, the EU–US Data Privacy Framework for covered transfers, or European Commission-approved Standard Contractual Clauses.

Further information is available in Google’s data-transfer information, the Cloud Data Processing Addendum, and Cloudflare’s Data Processing Addendum. Contact us for further information or a copy of the applicable safeguards.

5. Data Retention and Deletion

5.1 On-device data. Profiles and settings remain on your device until changed or deleted. You can remove local App data by clearing the App’s storage or uninstalling it. Device backup and restore behavior may affect whether copies of stored data remain or are restored.

5.2 Subscription records. We retain subscription verification records while needed to provide and verify access. Records are scheduled for deletion 60 days after the confirmed subscription end. If Google Play can no longer provide subscription details and the end date is unknown, a limited verification record is scheduled for deletion 60 days after we first identify that condition. Actual deletion may take longer.

5.3 Support communications. We retain support communications for 12 months after the last message, or longer where necessary for an ongoing dispute or legal obligation.

5.4 Technical records.

  • Operational logs are retained for 30 days.
  • Required cloud audit logs are retained for 400 days.
  • Database backups are retained for seven days.
  • Verification challenges expire after five minutes and are scheduled for deletion after expiry.
  • Records used to limit repeated verification requests are scheduled for deletion 48 hours after their 10-minute or daily window ends; actual deletion may take longer.
  • Subscription change messages awaiting delivery may remain queued for up to seven days.

5.5 Deletion requests. You may request deletion under Section 7. We may retain information where necessary to comply with legal obligations or establish, exercise, or defend legal claims.

5.6 Provider records. Information held independently by Google Play or other providers is subject to their own retention policies. Uninstalling CherryFare does not cancel your subscription or delete those records.

5.7 Website records. Website records are retained for the periods needed to deliver and protect the Website and provide traffic statistics, subject to applicable Cloudflare service settings and legal obligations. Information Cloudflare processes for its own purposes is retained under its Privacy Policy. The backend retention periods in Section 5.4 do not apply to Website records.

6. Data Security

6.1 We use appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or loss, including encrypted backend connections and restricted system access.

6.2 No method of electronic transmission or storage is completely secure. This does not limit our obligations under applicable data protection law.

7. Your Rights

7.1 Subject to applicable law, you may request access to, correction, or deletion of your personal data, restriction of its processing, or a portable copy of data you have provided.

7.2 Your right to object. You may object to processing based on legitimate interests on grounds relating to your particular situation. To exercise this right, contact support@cherryfare.com.

7.3 Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

7.4 To exercise your rights, contact us using the address above. We may request information reasonably necessary to verify your identity and locate relevant records. We will respond without undue delay and within the legally required time limits. You may also contact us if you believe a child has provided personal data to us, so we can investigate and take appropriate action.

7.5 You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), at azop.hr, or another competent data protection authority.

8. Children’s Privacy

8.1 CherryFare is intended for adult professional drivers and is not directed at children. We do not knowingly collect personal data from children using the App.

9. Changes to This Policy

9.1 We may update this Policy when the App, our data-processing practices, or applicable law changes. The current version will be available in the App and on our Website.

9.2 We will notify you of material changes through the App or another appropriate method before they take effect, and obtain your consent where required by law.