Privacy Policy

Short version: CherryPick keeps your delivery data on your phone. We never see your offers, your pay, your customers or where you drive. We never ask for a delivery platform login. The app goes online only to check whether you have Pro, and to restore Pro when you ask it to.

What the app does NOT collect

• Your DoorDash, Uber, Grubhub or any other platform credentials. The app cannot sign in and never asks.
• Offer contents, pay amounts, tips, restaurant names, customer names, addresses or phone numbers.
• Your GPS coordinates or location history. Location logging, if you enable it, is stored only on your device.
• Your store blacklist. The stores you mark, their locations and your notes stay on your device (and in your own Android backup, see below).
• Screenshots. Fun Orders images stay in the app's private storage until you choose to share one or save it to your gallery, and customer details are always masked first.
• Audio. The app does not use your microphone.
• Advertising IDs or device identifiers.

What the app sends, and why

Checking your subscription. When the app starts or comes back to the screen (never while you are receiving offers), it sends one thing to cherrypick.best: a random ID that the app created on your phone (it starts with "cp_" and is not derived from your device, your Google account or anything about you). Our server asks RevenueCat, our subscription service, whether that ID has an active Pro subscription, and sends back only yes or no, the end date and a link to manage it. We do not store these requests (our hosting provider keeps short-lived technical logs, see below).

Restoring a purchase. If you bought Pro, we keep the link between your random ID and an irreversible hash of the email address you paid with (calculated with a secret key; we never store the email itself). It is used only so you can get your subscription back after reinstalling or on a new phone. When you use "Restore purchase", the email you type is sent to us to look up that hash and to email you a 6-digit code through Resend, our email provider. We do not store the email or the code in readable form, and codes expire after 10 minutes.

Cancelling in the app. When you cancel or resume your subscription in the app, the app sends your random ID so our server can make the change with Paddle. If you pick a reason for cancelling, we store only the reason, the date and whether it was a test purchase — never your ID — and use it only to count why people leave.

Nothing else leaves your phone: no offers, earnings, locations, store marks or usage statistics.

Android backup

If you use Android's built-in backup, your CherryPick settings, your store blacklist, your plan status (free, trial or paid) and the app's random ID are included in your own Google backup, so they come back when you reinstall or move to a new phone. Your order history, pay amounts, addresses and Fun Orders images are never included. This backup is stored by Google under your Google account; we cannot see it.

Payments

When you buy Pro, checkout opens in your browser on a page provided by RevenueCat and the payment is processed by Paddle.com, our reseller and Merchant of Record. Paddle collects your name, email address, billing country and payment details to complete the order, calculate tax and send your receipt, under Paddle's own privacy policy. We never see or store your full card number.

RevenueCat keeps your subscription status under your random ID and receives your purchase details from Paddle, including the email address you paid with. It does not receive any of your delivery data.

What this website collects

When you visit a page or start a download we record the time, the page, your approximate country (derived from your IP address and then discarded), your browser's operating system family, the referring site and any campaign tags in the link. Your IP address is never stored — only a salted, irreversible hash used to avoid counting the same click twice.

We also use Vercel Web Analytics to see which pages are visited. It uses no cookies and reports only aggregated numbers: the page, the referring site, campaign tags, approximate location, and the type of device, operating system and browser. Visitors are told apart by a hash of the request that Vercel discards after 24 hours; it is not linked to you or to your IP address. We remove every other part of the address before it is sent.

Like any website, our hosting provider Vercel keeps short-lived technical request logs (for security and troubleshooting) under its own privacy policy. We do not use advertising cookies or advertising trackers.

If you give us your email to hear about a Google Play version, we use it only for that.

The accessibility service

CherryPick uses Android's Accessibility Service for two things: reading the delivery offer shown on your screen so it can score it, and drawing the score overlay above it. It does not read other apps' content for any other purpose, and nothing it reads leaves your device.

Service providers and sharing

We do not sell personal data. The only companies involved are the ones named above: Paddle (payments), RevenueCat (subscription status), Resend (restore codes), and our hosting, analytics and database providers Vercel and Supabase, which store the website's records described here. Anonymous aggregate counts may be published (for example, "CherryPick has been downloaded N times").

Your rights

We hold very little personal data about you. If you bought a subscription, we can see the name, email address and order details Paddle shares with us to manage it. Email us and we will help with any request to access or delete your data, including the restore link between your payment email and your app ID (after which "Restore purchase" will no longer find your subscription). You can also email us to remove your address from the Google Play notification list.

Contact

support@cherrypick.best