Chere' privacy, in plain English.

Short version: your business's records live on a server set up for your business alone. No ads, no tracking, nothing sold. AI help runs through that server, and anything about your customers goes only to Anthropic or OpenAI. Ask, and I delete it.

Who this covers

Chere' is made by Winters Code, which is me, Preston Winters, in Bandon, Oregon. This policy covers the Chere' app on iPhone and Android and the server each business's copy of the app talks to. The business using Chere' decides what it keeps about its own customers. I build and run the software that keeps it.

If you are a customer of a business that uses Chere', that business is the one to ask first about your records. You can also ask me, using the contacts at the bottom.

What stays on your phone

• Your sign-in and the key that pairs this phone with your business, held in the phone's secure storage (the iPhone Keychain, or Android's encrypted storage).
• A recent copy of your records so the app works without signal: at most 500, each kept 30 days.
• Changes waiting for a connection, drafts you have not finished, and photos taken for jobs.
• A short history of your conversations with the Chere' assistant. By default that is the newest 40 lines of each, and up to 10 earlier conversations.

Signing out clears the sign-in, the offline copy, waiting changes, the conversations and the app's temporary files. Uninstalling removes everything the app kept. On Android, none of it goes into the phone's cloud backup.

What goes to your business's server

Everything you save: customers, jobs, estimates, invoices, payments, notes, photos and documents. Each business that uses Chere' has its own server, which I set up and run. Your records are not pooled with any other business's. Photos and documents are kept in Cloudflare storage set up for your business, and the app removes the location data from every photo before it leaves the phone. Every connection is encrypted (HTTPS). The server's request logs include your phone's internet address.

What the app asks permission for

Each one asks first, and each one is used only when you tap the thing that needs it.

• Camera: job photos and document scans.
• Photos: attach a photo you already took, or save one.
• Microphone and speech recognition: talking to Chere' instead of typing. Your words are recognized on the phone. No audio is sent anywhere or saved.
• Location: fills in a job site's address when you tap the locate button.
• Motion: measures a slope when you tap the measure button.
• Contacts: fills in a new lead or customer from the one contact you pick. Nothing is saved until you save the form.
• Face ID or fingerprint: lets you back into the app. The phone checks it, and the app only learns yes or no.
• Notifications: reminders the phone shows you.
• Call log, Android only: after a call ends, Chere' can offer to save the caller as a lead. It reads the newest call's number, time, length and the name your phone has for it. It asks once, with a note that says why, and never asks again if you say no.

AI, and who sees what

Chere' uses AI to read job photos and plans into an estimate, draw design pictures, draft replies, and answer you in conversation. The app never calls an AI company itself. Each request goes to your business's server, which sends it on.

Anything with your customers in it (a name, a job note, a photo of their property, a review they wrote) goes only to Anthropic or OpenAI. The server refuses to send it anywhere else. Design pictures are drawn by OpenAI's image service from the property photo and your notes.

Both companies may keep a request for up to 30 days to check for abuse, and neither uses it to train its models. Neither has a no-retention agreement with my business, so I won't tell you they keep nothing.

Requests with nobody's information in them, like the going price of a material, can also be answered by Google or xAI.

Other services, only if your business uses them

• Cloudflare carries every request to your server, so it sees them as they pass. It also stores your photos, documents and encrypted backups.
• Resend sends your estimate and invoice emails and your alerts.
• Twilio sends text messages, when texting is turned on.
• Square, when you connect it, receives the customer's name, company, email and phone, and the lines on their invoice.
• Google (Gmail, Calendar, Business Profile), Facebook and Yelp, when you connect them, to sync your mail, calendar and reviews.
• Business memory lets the Chere' assistant remember things about your work, which can include a customer's name, a job and a price. It stays off until you agree in the app. The memories live on my own memory server, in a space no other business can read. You can delete one, or all of them, at any time.
• Apple TestFlight, during the beta, collects crash reports and any feedback you send, under Apple's own privacy policy, and shares them with me.

What I never do

• No ads, and no advertising identifier.
• No analytics, crash-reporting or tracking kits in the app.
• The app reports nothing about how you use it.
• Nothing is sold, rented or traded to anyone.

Pages your customers see

When you send an estimate or an invoice, your customer gets a private link. Each link is long and random, expires after 30 days by default, and you can cut it off sooner. The estimate page loads no scripts. When a customer accepts, the server records the name they typed, the time, their internet address and their browser, as the signed record of the agreement.

How long it's kept

Your records stay while your business uses Chere'. A few things clear themselves: synced email after a year, synced reviews after 90 days. The server keeps a record of what each AI request cost, never what it said. Encrypted backups are kept daily for 30 days, weekly for a year, monthly for a year, and quarterly for seven years.

Deleting, and getting a copy

• Delete a record in the app and it is removed from the server's database.
• A customer with jobs, estimates or invoices is erased instead. Their name, contact details, addresses and links are removed in one step. Invoices, payments and signed agreements stay, because a business has to keep its tax and contract records.
• Ask me to delete everything your business has in Chere', backups included. It is done within 30 days, and I email you when it is.
• Ask me for a copy of your records and I send it.

Children

Chere' is a tool for businesses. It is not meant for children under 13, and I don't knowingly collect information about them.

When this changes

If this policy changes in any meaningful way, the date at the top moves and the change shows up in the site's public history (/changelog).

Questions

Email preston@winterscode.com or text 541-551-0731. For help with the app itself, see Chere' support.