Version 1.1 · Last updated: 30 September 2026
How we handle your personal information, and what you can do about it.
Cherie Social, Inc. (trading as Chérie), a corporation incorporated in the State of Delaware, United States, with its principal place of business at 353 Lexington Avenue, 4th Floor, 534, New York, NY 10016, United States, is the controller of your personal data. That means we decide what is collected and why, and we are responsible for it.
Contact: hello@cherie.social
We have not yet appointed a representative in the United Kingdom under Article 27 of the UK GDPR.
Data protection lead: a founder of Chérie, reachable at hello@cherie.social. We are not required to appoint a statutory Data Protection Officer, and we have not. If that changes we will say so here.
1.1This policy applies to everything we do with personal data through cherie.social, the Chérie app, the Experiences we arrange, and our casting calls. It applies whether or not you hold a paid Membership.
1.2It sits alongside our Terms of Service. Unlike the Terms, this policy is not a contract and you are not agreeing to it — it is us telling you what we do, which is a legal obligation on us under the UK GDPR.
1.3Where we say “UK GDPR” we mean the UK General Data Protection Regulation and the Data Protection Act 2018.
| What | Examples | When |
|---|---|---|
| Account details | First name, email address, date of birth and a password — or, if you sign in with Apple or Google, the name, email address and profile picture they give us, which may include your surname. Optionally, your phone number and gender. | When you sign up, and in Profile Settings. |
| Profile | Profile photos, a short introduction, and anything else you choose to add — your vibe, personality, interests, and links to your social accounts. | Any time you edit your profile. |
| Optional profile answers | Your relationship status, and what you are looking for on Chérie — friendship, activity partners, networking. Both are shown on your profile. See section 3. | Only if you choose to add them. |
| Questionnaire answers | Your season of life, age range, city and neighbourhoods, industry, what brings you to Chérie, energy and group preferences, the kind of activities you like, availability, budget, and — if you choose to answer — the country you are from. | During the questionnaire, in the app or on cherie.social. |
| Payment information | The last four digits and expiry of your card, and what you paid and when. Your full card number goes to our payment provider, never to us. | When you subscribe or pay for an Experience. |
| Messages | What you write in an Experience's group chat or in a private message to another member, and any photos or GIFs you send. | Whenever you use Messaging. |
| Feedback after an Experience | How you rated the Experience, your private ratings of the women you met, and whether you told us someone did not arrive. See clause 7.4. | After an Experience, if you choose to. |
| Reports, blocks and complaints | What you tell us when you report a member or complain, and who you have blocked. | When you report or block someone in the app, or contact us. |
| Filming consent | Whether you agreed to appear, and any signed consent form. | At an Experience we film. |
| Correspondence | Emails and support messages between us. | Whenever you contact us. |
3.1Two profile answers are entirely optional: your relationship status, and what you are looking for on Chérie — friendship, activity partners, networking. If you give them, they are shown on your profile, so any member who opens it can see them. Leave them blank if you would rather not share them. You can change or clear them whenever you edit your profile.
3.2The questionnaire asks which country you are from. That is optional too. We use it to suggest Experiences you might like, and it is not shown on your profile.
3.3We do not ask about your health, access needs, diet or beliefs, and the app has nowhere to record them. If you choose to tell us something like that — by email, say — we use it only for the reason you told us.
3.4We do not use your questionnaire answers or your optional profile answers for marketing. See section 13.
We must have a lawful basis for everything we do with your data. Here is all of it.
| What we do | Data used | Legal basis | How long we keep it |
|---|---|---|---|
| Create and run your account | Account details, profile | Performance of our contract with you | While your account is open |
| Show you Experiences that fit you | Questionnaire answers, city, availability | Contract | While your account is open |
| Book your place at an Experience | Account details, booking records | Contract | While your account is open. We delete our booking records when you delete your account |
| Take payment and prevent fraud | Payment information, transaction history | Contract; legal obligation; our legitimate interest in preventing fraud | Stripe, our payment provider, keeps payment records for as long as the law requires. We delete ours when you delete your account |
| Provide Messaging | Messages, photos and GIFs, in group chats and private messages | Contract | While your account is open. The messages you sent are deleted when you delete your account |
| Ask how an Experience went, and connect members who want to meet again | Your ratings, ratings about you, reports that someone did not attend | Contract; our legitimate interest in keeping Experiences reliable and safe | While your account is open. A review opened because someone did not attend is kept with our safety records |
| Keep members safe and moderate content | Reports, messages, profile, usage, attendance | Our legitimate interest in protecting members; legal obligation under the Online Safety Act 2023 | Reports and their outcomes: 3 years. The record of a removal, and the reports behind it: kept even after the account is deleted (see section 10) |
| Handle complaints and appeals | Correspondence, account record | Legal obligation; our legitimate interest in running the service properly | 3 years from resolution |
| Improve the service and fix bugs | Usage and technical data and crash reports, aggregated wherever possible | Our legitimate interest in improving what we build | 2 years |
| Send you service messages and notifications | Account details, notification token | Contract | While your account is open |
| Send you marketing | Account details, city | Your consent | Until you unsubscribe, then a suppression record indefinitely so we do not email you again |
| Use your image in marketing | Photographs, film, first name, voice | Your consent (separate, optional, revocable) | Membership plus 24 months, or until you withdraw |
| Consider a casting application | What you send with your application (see section 17) | Steps you asked us to take before a possible contract with you; our legitimate interest in casting our series | If you are not cast, 12 months after the casting closes |
| Meet our legal obligations | Whatever is required | Legal obligation | As required by the relevant law |
| Establish or defend a legal claim | Whatever is relevant | Our legitimate interest in defending ourselves | 6 years from the end of the relationship |
Where we rely on legitimate interests, we have weighed our interest against your rights and recorded the result. You can ask us for that assessment and we will send it to you.
5.1We curate Experiences and show you the ones that fit your answers. You choose one and book a place. Your Group is the Members who booked the same Experience.
5.2Our team can aim an Experience at members whose answers fit it — an age range, a budget, a neighbourhood, when they are free. Those members may be shown it or sent a notification about it. You always choose what to book.
5.3Using your answers this way is a simple form of profiling under the UK GDPR, so we should be straight about it. It decides which Experiences are put in front of you, nothing more. It does not decide who you meet — that is whoever books the same Experience — and it has no legal or similarly significant effect on you.
5.4You can ask us why you were shown a particular Experience by emailing hello@cherie.social. If there is someone you would rather not meet, block her — see clause 7.3.
5.5Decisions about suspending or removing an account are made by a person. We do not use automated systems to flag messages or profiles: a person always makes the decision.
We share only what is needed, only with the organisations below, and only under a contract that requires them to protect it.
| Who | What they get | Why | Where |
|---|---|---|---|
| Stripe | Card details, transaction data | To take payment and prevent fraud | Stripe Payments Europe, Limited — Ireland |
| Google Firebase — authentication, the Firestore database, file storage, our Cloud Functions and push notifications | All platform data | To run the app and store data | United States — the database in Google Cloud's United States multi-region (nam5), file storage in the United States multi-region, and Cloud Functions in us-central1 |
| Firebase Crashlytics (Google) | Crash reports — what the app was doing, device and app version, and your account ID | To find and fix crashes | Google LLC — United States |
| Google Analytics for Firebase | Usage and technical data, pseudonymised | To understand how the app is used | Google LLC — United States |
| Supabase — the database behind Messaging, and storage for photos sent in a chat | Messages from group chats and private messages, photos, and the account identifiers they belong to | To run Messaging | European Union (France) |
| Tenor (Google) — GIF search | The words you search for when you look for a GIF, and your device's IP address. Not your name or your account | To find GIFs to send in a chat | Google LLC — United States |
| Apple Maps (on iPhone) and Google Maps (on Android) | The area of the map you are looking at, and your device's IP address | To show where an Experience is on a map | Apple Inc. and Google LLC — United States |
| Sign in with Apple and Google Sign-In | The fact that you are signing in to Chérie, if you choose to sign in with them | To let you sign in without a separate password | Apple Inc. and Google LLC — United States |
| MapTiler | A place name or address typed into the app, sent from our servers so that MapTiler does not see your IP address | To turn place names and addresses into map coordinates | MapTiler AG — Switzerland |
| Amazon Web Services — Amazon Simple Email Service (Amazon SES), which delivers our email. Our own email service prepares each message on Google Cloud, or on Vercel for a casting application made on this website | Name, email, message content | To send transactional and marketing email | Delivered from the European Union — Amazon Web Services, Ireland (eu-west-1). Prepared in the United States — Google Cloud (us-central1) or Vercel |
| Vercel — hosts cherie.social | Your IP address and the pages you request, and what you send through the website — the questionnaire, sign-up, payment and casting applications | To run the website | Vercel Inc. — United States |
| Google Workspace — our email inbox. There is no separate support tool; support runs on email only | Correspondence, account record | To answer you | Google LLC — United States |
| Google Sheets (Google Workspace) — casting only | Casting applications (see section 17) | So our casting team can review applications | Google LLC — United States |
| Venues | The booking name, the number of people and the time | To make and honour the booking | Where the Experience takes place — the United Kingdom, France or the United States |
| Professional advisers | Only what is relevant | Legal, accounting and insurance advice | UK and US |
| Police and authorities | Only what is lawfully required or necessary to prevent harm | Legal obligation, or protecting someone | As applicable |
| A buyer of the business | Account and usage data | If Chérie is sold or merged. We would tell you first. | As applicable |
We do not sell your personal data, and we do not share it with advertisers or data brokers. We do not run behavioural advertising and we do not allow third parties to track you across other apps or websites through Chérie.
For a service built on meeting strangers, this is probably the section you care about most.
| Members who open your profile see | They never see |
|---|---|
| Your first name | Your surname |
| Your profile photos | Your email address or phone number |
| Your age range, not your date of birth | Your exact address, your location point, or your neighbourhood answers |
| Your city | Your payment details or what you paid |
| Your introduction, and what you choose to add — your vibe, personality, interests, relationship status, what you are looking for, and links to your social accounts | Your questionnaire answers, including your budget and the country you are from |
| How many members follow you, and how many you follow | How you rated them, or how anyone rated you |
| What you write in the group chat of an Experience you are both booked on, and any private message you send her | Whether you have reported anyone, or been reported |
| That you have booked the same Experience | Who you have blocked |
7.1You choose what goes on your profile. Your introduction, your social links and the optional answers in section 3 can all be seen by any member who opens it, so leave out anything you would rather members did not have — your surname, your employer, your street.
7.2An Experience's group chat opens a few hours before the Experience and becomes read-only the evening after; the thread stays readable. Anything you say in it can be read by everyone in that Group, and could be screenshotted. Private messages go to the member you write to, and she could screenshot them too. Our Community Guidelines forbid sharing either outside Chérie, but we cannot make that technically impossible.
7.3When you block someone, she can no longer message you directly, and neither of you can book an Experience the other is already booked on. If you are both already booked on the same one, tell us and we will move one of you. We do not tell her you blocked her.
7.4After an Experience you can rate it and, privately, the women you met — including telling us if someone did not arrive. She never sees your rating. If you both say you would like to meet again, we connect you and tell you both. If two or more people say someone did not attend, a person on our team looks at it; nothing happens automatically.
8.1We give a Venue the minimum it needs to hold the booking: the booking name, the number of people and the time.
8.2We do not collect health, access or dietary information, so we have none of our own to pass on. If you tell us something a Venue needs to know, we pass on the fact — “one guest needs step-free access” — not your name, and never the reason behind it.
8.3We do not give Venues your contact details or anything they could use to market to you.
9.1We are a US company, so your data is transferred to and stored in the United States. Some of our providers are also outside the UK.
9.2The UK does not consider the United States to provide equivalent protection generally. So we rely on the EU Standard Contractual Clauses together with the UK Addendum to those Clauses, which form part of our agreement with each provider, alongside a transfer risk assessment we have carried out and recorded.
9.3You can ask us for a copy of the safeguards we use. Email hello@cherie.social.
10.1The table in section 4 gives the period for each purpose. The general rule is that we keep data while your account is open and delete it when your account is deleted. You can delete your account yourself in the app: Settings → Profile Settings → Delete my account. It takes effect immediately, and it also cancels your subscription.
10.2Some things outlast your account, and you should know which:
10.3If your account is inactive for two years we will email you. If you do not respond within 30 days, we delete it.
11.1Data is encrypted in transit and at rest. Access is limited to team members who need it for their job.
11.2We keep the software we rely on up to date. If a personal data breach puts you at risk, we will tell you and the regulator as the law requires.
11.3Please help: use a strong, unique password, and tell us straight away if you think someone has got into your account.
11.4If there is a breach that is likely to be a risk to you, we will report it to the Information Commissioner's Office within 72 hours of becoming aware, and if the risk to you is high, we will tell you directly and without undue delay. We will tell you what happened, what data was involved, and what to do about it.
Under the UK GDPR you have the following rights. They are free to use, and we will not treat you differently for using them.
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you, and an explanation of what we do with it. |
| Rectification | Have anything inaccurate corrected, or anything incomplete filled in. |
| Erasure | Have your data deleted, where there is no overriding reason for us to keep it. See section 10 for what we must retain. |
| Restriction | Have us pause using your data while a dispute about it is resolved. |
| Portability | Get the data you gave us in a structured, machine-readable file, or have us send it to someone else. |
| Object | Object to processing based on legitimate interests. You can object to direct marketing at any time and we must stop immediately, no reasons needed. |
| Withdraw consent | Withdraw consent for anything based on it — marketing, filming — at any time. |
| Complain | Complain to the Information Commissioner's Office. See below. |
12.1To use any of these, email hello@cherie.social. To delete your account you can also do it yourself in the app: Settings → Profile Settings → Delete my account. We will respond to an email within one month. If your request is complex we may extend by up to two further months, and we will tell you within the first month if we do.
12.2We may need to check who you are before we act, so that someone cannot get your data by pretending to be you. We will ask for the minimum necessary and delete it once you are verified.
12.3If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. But you can go straight to the regulator if you prefer.
13.1We only send marketing email if you have opted in, or if you are an existing member and it is about something similar to what you already have. Every email has an unsubscribe link that works in one click.
13.2Unsubscribing from marketing does not stop service messages — booking confirmations, payment receipts, safety notices — because those are part of the service you have paid for.
13.3We do not use your questionnaire answers, your optional profile answers or your Messaging content for marketing.
14.1This website sets no cookie for members or visitors. The only cookie it sets keeps our own staff signed in to an internal tool, and it is strictly necessary. Your own sign-in on the website is kept in your browser's storage, not in a cookie.
14.2We do not currently set any analytics or preference cookies on this website, so there is nothing here for you to consent to and no cookie banner to answer. If that changes we will ask you first, and we will say so here and in the Cookie Policy before we do it — and we will ask before the script loads, not after.
14.3The full list of cookies, what each does and how long it lasts, is at cherie.social/cookies.
14.4In the app we use a device identifier for analytics and crash reporting. Reinstalling the app resets it. To have the analytics data linked to your account deleted, email hello@cherie.social.
15.1Chérie is for adults. You must be 18 or over, and we do not knowingly collect data from anyone under 18.
15.2If we find out that someone under 18 has created an account, we close it and delete the data.
15.3If you believe a child has given us information, email hello@cherie.social and we will deal with it immediately. See also our Child Safety Standards Policy.
16.1We will update this policy when what we do changes. The date at the top tells you when it last changed, and previous versions are at cherie.social/legal/archive.
16.2If a change is significant — a new purpose, a new category of data, a new recipient — we will email you at least 30 days beforehand rather than quietly changing the page.
17.1This section is for anyone who applies at cherie.social/casting to be cast in our series. Cherie Social, Inc. is the controller of your application.
17.2What we collect: your full name, age, email address and phone number; where in London you live; your work, languages and availability; your acting experience, your agency if you have one, and your day rate; links to your social accounts; how your friends would describe you; which character you see yourself as, and why; your photo; and your video, or a link to it. We also record when you applied, the browser you used, the page you came from and any campaign link you followed.
17.3Why: to consider you for a part, to contact you about auditions, and to keep a record of who applied. Our legal basis is the steps you have asked us to take before a possible contract with you, and our legitimate interest in casting our series.
17.4Who receives it: Google Firebase and Google Cloud, where your application, photo and video are stored; Google Sheets, where our casting team reviews applications; Amazon SES, which sends your confirmation email; and Vercel, which hosts the casting page and receives your application. Section 6 says where each of them is.
17.5How long: if you are not cast, we delete your application — including your photo and your video — 12 months after the casting closes.
17.6You have the rights in section 12. To use them, or to withdraw your application, email hello@cherie.social.