Privacy Policy
This policy explains what personal information Cherry collects, how we use it, who we share it with and the choices you have. Cherry (cherryshows.com, the Cherry Telegram bot and any other channel that links here) is run by the operator of Cherry (cherryshows.com) (“we”, “us”), which is responsible for your personal information under this policy. You can reach us about privacy at support@cherryshows.com.
Conversations on Cherry can be intimate, so please read how we store them, and when our team can see them.
1. Adults only
Cherry is only for people aged 18 or older. Before we show you any content, we ask you to confirm that you are 18 or older: on the website you tap a button, and in a messaging app you reply YES or NO. We keep only your answer: whether you confirmed you are 18 or older, how you confirmed it, when, and which version of our terms you accepted. If you tell us you are under 18, we record that so you can’t immediately try again. If we learn that someone under 18 is using Cherry, we will close their access and delete their information, except anything we must keep by law.
2. Information we collect
Conversations
- The messages you send and the replies the character sends you, with timestamps and the channel you used (web, Telegram or another linked messaging app).
- A recent conversation history (currently your last 100 messages per character) that we use to keep the conversation going.
- A turn-by-turn record of each exchange: your message, the reply, any photos, the model used, and which memories were used to write the reply. We use this to run, debug and safeguard the service.
Memory
To make the character remember you, we build a memory from your conversations. It can include excerpts of what you said, facts and preferences you shared (for example your name, interests or boundaries), short summaries and inferences the service makes about your preferences, and numeric representations of that text (“embeddings”) used to search the memory. If you link accounts or channels, they share one conversation and one memory with each character. Memories are kept separately for each character.
Photos and photo requests
- When you ask for a photo, or the character decides to send one, we turn the conversation into a written scene description and generate an image of the fictional character. We store the generated original, a blurred preview, the scene description and which conversation it belongs to.
- Requests from the “Ask for a custom” form go into your conversation like any other message.
- We record which photos you unlock, and count photo requests against a daily allowance. For that count we keep a fingerprint (hash) of the request, not its text.
- You can’t upload your own photos to Cherry.
Posts, comments and reactions
If you react to or comment on a post, we store the reaction or comment, the member identifier it belongs to, and a display name. If you are signed in, the display name comes from your account name. We never show your phone number or email address as your name.
Accounts (optional)
You can use Cherry in your browser without an account. If you sign in, our authentication provider (Clerk) handles sign-in. We receive and store your account identifier and, if you verify one, your phone number. We also receive your first and last name or username for display. Clerk processes the contact details you sign in with under its own privacy notice.
Messaging channels
- Telegram: your Telegram user ID, your chat ID with our bot and the text of your messages. We don’t use your Telegram name or username.
- iMessage and WhatsApp (when offered): your phone number, the number assigned to your conversation and your messages. These channels run through our messaging provider.
- Account linking: if you link a channel to your account, we keep a record of the link with a hashed and masked version of the channel identifier.
Technical information
- Your IP address, used briefly to limit request rates and prevent abuse. To limit how many anonymous sessions one network can start, we store a hash of it.
- Cookies that keep you signed in and remember your age confirmation (see section 6).
- Service logs: error events, timings and request identifiers. We don’t intentionally log your messages. Messages may pass briefly through our task queue while a reply is being prepared.
Payments
Cherry is currently free and we don’t collect payment details. When paid plans launch, card payments will be handled by Segpay or CCBill, our payment processor and the merchant of record. You enter your card details on the processor’s secure payment page, not on Cherry, and we never receive or store your full card number. The processor tells us what we need to give you access and handle support: a transaction or subscription reference, the plan, the amount, the payment and renewal status, the email address you gave at checkout, your country, and any refund or chargeback. The processor uses your payment information under its own privacy policy, including to prevent fraud and meet its legal duties.
3. How we use your information
- To provide Cherry: generating replies and photos, remembering context, and delivering messages on the channel you chose.
- To confirm you are an adult, and to enforce our Terms and the daily photo allowance.
- To keep Cherry safe and working: preventing abuse, investigating reports, debugging and securing our systems.
- To improve how the characters behave. Authorised members of our team can review conversations, memories and generated photos for this, and for safety and support (see section 4).
- To handle complaints and content-removal requests, and to report illegal content to the authorities and, where its rules require, to our payment processor.
- When paid plans launch: to give you the plan you bought, handle renewals, cancellations, refunds and billing support, and prevent payment fraud.
- To comply with the law, and to respond to lawful requests.
We don’t sell your personal information, use it for advertising, or share it with advertisers. We don’t use your conversations to train AI models.
4. Human access to conversations
Cherry is run by a small team. Authorised staff can view conversation transcripts, memories and generated photos in our admin tools to operate the service, keep characters consistent, investigate safety reports and help you when you contact us. Access is limited to people who need it for those purposes.
5. Who we share information with
We use these service providers to run Cherry. They process information on our behalf and under our instructions:
| Provider | What they do | Information involved |
|---|---|---|
| Google Cloud (Cloud Run, Cloud Storage, Cloud Tasks, Cloud Logging) | Hosting, storage, background jobs and logs | Everything described in section 2 |
| Google Vertex AI (Gemini models) | Writing the character’s replies, building memories and embeddings, and describing generated photos | Your messages, recent history, relevant memories and generated images |
| Our image-generation service on Google Cloud | Generating photos of the fictional character | Scene descriptions written from your conversation |
| Clerk (and Cloudflare Turnstile for bot protection during sign-in) | Account sign-in | Account and sign-in details, and device signals used for bot checks |
| Telegram | Delivering messages if you use our Telegram bot | Your Telegram messages and identifiers |
| Photon, and Apple or Meta as the messaging networks (when offered) | Delivering iMessage or WhatsApp conversations | Your phone number and messages |
| Segpay or CCBill (when paid plans launch) | Processing payments as merchant of record, billing support, cancellations and fraud checks | Your payment details (held only by the processor), purchase and subscription records, email and country |
Segpay or CCBill also acts as an independent controller of the payment information it collects from you, under its own privacy policy.
We may also disclose information if the law requires it, to protect people’s safety, to report child sexual exploitation to the authorities, or as part of a merger or sale of our business (in which case this policy will continue to apply).
6. Cookies and similar technologies
We only use cookies that are needed for Cherry to work. We don’t use advertising or analytics cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
| cherry_age | Remembers that you confirmed you are 18+ and accepted our terms | 1 year (30 days after an under-18 answer) |
| cherry_guest, cherry_member | Keep your browser conversation, photos and unlocks together without an account | 90 days |
| Clerk cookies (for example __session, __client_uat) | Keep you signed in, if you use an account | Set by Clerk |
| cherry_ml_* | Remember a messaging-app route you started (when offered) | 30 days |
| cherry_session | Signs in our own staff to the admin tools | 30 days |
Your browser also keeps an unsent photo request in session storage until you send it or close the tab. When paid plans launch, the processor’s payment page may set its own cookies, which its privacy policy describes. Because we only use strictly necessary cookies, we don’t ask for cookie consent. If that changes, we will ask first.
7. Where your information is processed
We store and process information on Google Cloud in the United States. Photos are generated in Singapore. Our sign-in provider and payment processors process information in the United States and the European Union, and our other providers may process it in other countries. These countries may not have the same data-protection laws as where you live. When we transfer personal information across borders, we rely on appropriate safeguards, such as the EU–US Data Privacy Framework where the recipient is certified, or standard contractual clauses (and the UK addendum). You can ask us for a copy of the safeguards.
8. How long we keep information
Our Data Policy sets out what we keep, for how long and how we protect it. In summary:
- Conversations, transcripts, memories and generated photos: for as long as we provide Cherry to you. We don’t currently delete them automatically when an account or browser goes quiet. If you ask us to delete them, we will, unless the law requires us to keep something.
- Age-confirmation records: as long as the related account or cookie exists.
- Service logs: for our cloud provider’s standard log retention period, unless we need them longer to investigate a problem.
- Information we must keep for legal reasons, such as records of safety reports and complaints and, when paid plans launch, purchase and tax records, for as long as the law requires.
9. Your choices and rights
Depending on where you live, the law may give you the right to ask for a copy of your personal information, or to have it corrected or deleted. To make a request, email support@cherryshows.com. We will need to confirm the request comes from you. For a browser conversation without an account, that may mean making the request from the same browser. We handle requests by hand, as the law where you live requires.
Depending on where you live, you may have more rights. For example, in the EU, UK and similar places you can object to processing, ask us to restrict it, and complain to your data-protection authority. In Australia you can complain to the Office of the Australian Information Commissioner. In California you have the right to know, delete and correct, and the right not to be discriminated against for using those rights. We don’t sell or share personal information for cross-context advertising.
Your right to object. Where we rely on our legitimate interests, you can object to that processing at any time, and we will stop unless we have compelling grounds or need it for legal claims.
If you are not happy with how we handled your information, contact us first at support@cherryshows.com and we will acknowledge your complaint within 30 days. You can also complain to your data-protection authority at any time: for example the Information Commissioner’s Office in the UK, your local supervisory authority in the EU, or the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
10. Legal bases
Where the law requires a legal basis for processing, we rely on:
- Our contract with you: providing conversations, memory, photos, accounts, linked channels and, when paid plans launch, your membership.
- Your explicit consent: for sensitive information you choose to share, such as details of your sex life or sexual orientation. You can withdraw it by deleting your conversations or asking us to, and we then stop using that information.
- Legal obligations: the age check, tax and payment records, and responding to lawful requests and reports.
- Our legitimate interests: safety, preventing abuse and fraud, security, handling complaints and improving the service.
You don’t have to give us any information, but we can’t provide Cherry without your messages, or let you in without your age confirmation.
11. Automated decisions
Some decisions are made automatically. If you tell us you are under 18, our systems refuse access without human review, using your age answer. Our systems may also refuse a request that appears to break our Acceptable Use Policy. If you think a decision is wrong, contact support@cherryshows.com and a person will review it. We don’t use automated decisions to profile you for advertising or pricing.
12. Information about you from others
We receive some information from other sources: sign-in details from Clerk, identifiers from Telegram or our messaging provider when you message us there, and, when paid plans launch, payment status from Segpay or CCBill.
13. Notices for specific places
California
In the last 12 months we collected these categories of personal information: identifiers (account, member, Telegram and channel IDs, email or phone number, IP address); internet activity (requests, cookies and service logs); your messages, comments and memories, which may include sensitive personal information about your sex life or sexual orientation; and inferences in your memory. We collect them from you, your device and the providers listed in section 5, for the purposes in section 3, and disclose them to those providers for those purposes. We don’t sell or share personal information, including that of anyone under 16, and we only use sensitive personal information to provide the service you asked for. We keep each category as described in our Data Policy. You can make a request to know, delete or correct by emailing support@cherryshows.com, yourself or through an authorised agent. We will verify your request before acting on it, and won’t treat you differently for making it.
Australia
We handle personal information under the Australian Privacy Principles. Personal information is likely to be disclosed to recipients in the United States, Singapore and the European Union, as described in section 7. You can ask to access or correct your information, or make a complaint, by emailing support@cherryshows.com. We will respond within 30 days, and if you are not satisfied you can complain to the OAIC.
14. Security
We keep data in private storage with access restricted to our service and authorised staff. We use signed, HTTP-only cookies, and encrypt connections in transit. We never store card details. No system is perfectly secure, so please keep your devices and accounts secure, and tell us if you think something is wrong. More detail is in our Data Policy.
15. Changes to this policy
We review this policy at least once a year. If we make a material change, we will update this page and its effective date, and ask you to review it before you continue using Cherry.
16. Contact us
Privacy questions, requests and general support: support@cherryshows.com.