---
title: "Cheevee Account Privacy Policy"
description: "What your Cheevee account keeps, how signing in works, how one account is shared with Cheevee Health, and how you change or delete your data."
canonical_url: "https://cheevee.app/privacy"
locale: en
meta:
  "og:description": "What your Cheevee account keeps, how signing in works, how one account is shared with Cheevee Health, and how you change or delete your data."
  "og:image": "https://cheevee.app/og/og-hub-en.jpg"
  "og:image:alt": "Cheevee: Your health hub lives at Cheevee. The Cheevee Health app icon with cards for this morning's readiness of 78, ready to train, and last night's sleep of 7h 42m."
  "og:image:height": "630"
  "og:image:width": "1200"
  "og:title": "Cheevee Account Privacy Policy"
---

> Index of every page on this site: [llms.txt](https://cheevee.app/llms.txt)

# **Cheevee Account Privacy Policy**

Last updated November 12, 2026

Your Cheevee account is the one account you use to sign in to every Cheevee app, which today means Cheevee Health. This policy explains what the account keeps, how signing up, signing in and the emails we send work, how the account is shared with each app, and how you change or delete your data. What each app keeps on its own is explained in that app’s privacy policy.

## **1. Scope and who we are**

This policy covers the Cheevee account and the parts of this website that don’t belong to a single app: the home page, the email verification and set-a-new-password pages, and the sign-in, sign-up and account pages. “We” means Cheevee, which provides the Cheevee account and the Cheevee apps. “App” means a Cheevee app that uses this account, and “you” means the account holder or a visitor to the website.

Each app has its own privacy policy, which explains what that app reads, records and keeps. For example, the Cheevee Health policy covers data from Apple Health, journal entries and nightly sleep logs. This policy applies together with each app’s policy; where the two say different things about an app’s data, that app’s policy applies.

We follow Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA). This policy describes the service as it works today. If the account is going to handle data differently, we will update this policy before that change takes effect.

## **2. In short**

A Cheevee account has one email and one password for every Cheevee app. It keeps your name, your email, your password as a hash we can’t read, your language, and what it needs to keep signing in secure. It holds no health data.

Each app you join has its own membership, terms, consent and data, kept apart from the account and from other apps. One app doesn’t read another app’s data.

You sign in with your email and password only; there is no sign-in through another company’s account. We email you only about your account. There are no ads and no analytics or tracking tools, and we don’t sell your data.

You can delete your account from a single app, or delete your whole Cheevee account, yourself at any time, in the app or on this website’s account page.

## **3. One account for every Cheevee app**

What every app shares: your name, email, password, email verification, password reset and language. Change one in any app and every app sees the new value; verify your email once and it counts for every app.

What belongs to each app: your membership of that app (when you joined and accepted its terms), any consent you gave that app, and the data that app keeps. Each app’s data is stored separately in our database, and one app doesn’t read another app’s data. If an app ever needs to use another app’s data, we will first ask for your separate consent, and use it only for the benefit of your health.

Each app signs in separately and has its own sessions, so signing out of one app doesn’t sign you out of the others, except when you change your password, set a new one or delete your Cheevee account (see Signing up and signing in).

Today Cheevee has one app, Cheevee Health. When a new app starts using this account, we will update this policy before that app is available.

## **4. What the account keeps**

When you sign up, the account keeps your display name (up to 100 characters), your email (stored in lowercase; one account per email), your password as an Argon2id hash (we can’t read your password), when you verified your email, your language (Thai or English, set from the app’s language when you sign up, every time you sign in and when you change it, so the emails we send are in the same language), and when the account was created and last changed.

To stop password guessing, the account counts wrong passwords in a row and keeps when sign-in was locked. If the account no longer belongs to any app, it also keeps when that started and when we sent the warning email before deletion (see Keeping and deleting data).

For each app you join, we keep when you joined and accepted that app’s terms, and when you gave that app consent, if you did. These are kept in that app’s part of the database.

The account doesn’t keep your date of birth, sex, phone number, address, photos, payment details or health data.

## **5. Signing up and signing in**

You sign up with a name, an email and a password of 8 to 52 characters with upper and lowercase letters, a number and at least one special character (!@#$%^&\*), and you accept the Cheevee account’s terms and privacy policy. Signing up in an app also accepts that app’s terms and privacy policy and joins you to it straight away. Signing up on this website creates the Cheevee account only: you join an app later, in the app or on the website’s account page, and accept its terms then.

You sign in with your email and password only. There is no sign-in with Apple, Google, LINE or any other account, so we receive nothing from those services. A wrong email and a wrong password get the same answer, so nobody can tell whether an email has an account. Five wrong passwords in a row lock sign-in for 15 minutes, during which the password isn’t checked; a right password clears the count, and setting a new password through the emailed link unlocks it at once.

Each sign-in creates a session, for which the server keeps the IP address and app (user agent) last used, and when the session started, was last used and expires. The app receives sign-in tokens and keeps them in the device’s secure storage, such as the iPhone Keychain. The token used to call the service lasts 15 minutes; the app then renews it with a second token that is replaced every time it’s used. On this website, the same tokens are kept in cookies your browser sends only to our server (see This website). The server keeps tokens only as hashes.

A session expires after 30 days without use, and 180 days after sign-in even if it is still in use. A session also ends when you sign out, when you change your password (every device except the one you used), when you set a new password through the forgot-password link (every device), when you delete your account from an app (the device you used) and when you delete your Cheevee account (every device and every app).

To limit repeated attempts, the server counts requests over short periods, such as signing in, signing up and asking for emails, per IP address, email or account, stored as one-way hashed keys.

## **6. Emails we send**

We email you only about your account, in your account’s language: a verification link that works for 24 hours (when you sign up, change your email or ask for a new link); a set-a-new-password link that works once, for 1 hour (a new link replaces earlier ones); a notice when your password is changed; a notice to your previous email when your account’s email is changed, with the new email partly hidden and the time of the change; and a warning before we delete an account that no longer belongs to any app.

We don’t send ads, newsletters or marketing email, and we don’t use your email for them.

Asking for a set-a-new-password link, or a new verification link while signed out, always gets the same answer, whether or not the email has an account. We keep a record of each link as a hash, with the email it was sent to and whether it has been used. A set-a-new-password link only works while the account’s email is unchanged since it was sent, and setting a new password through it also verifies your email, since it shows the inbox is yours.

## **7. Changing your account**

You can change your name and language at any time: in Cheevee Health under Settings › Account, or on this website’s account page. Everything in this section can be done in either place.

Changing your email needs your current password. The new email works at once but isn’t verified yet, and gets a new verification link; links sent to the old email stop working, and devices that are signed in stay signed in.

Changing your password needs your current password. Every other device is signed out, and a sign-in lock is lifted. If you forget your password, ask for a set-a-new-password link from the app’s sign-in screen.

## **8. Using your account with Cheevee Health**

Cheevee Health works without an account: everything worked out from Apple Health happens on your iPhone. The app asks you to sign in only for features kept with your account: journal entries, nightly sleep logs, syncing your wake-up goal and notification settings, and subscribing to Cheevee Health Plus.

Signing up in Cheevee Health joins you to Cheevee Health straight away. If your account comes from another Cheevee app, sign in to Cheevee Health with the same email and password; the app asks you to accept the Cheevee Health terms before joining, with no new sign-up and no second email verification.

From the account, Cheevee Health receives only your account ID, name, email, whether your email is verified, your language and the apps you have joined. What Cheevee Health keeps with your account (journal entries, nightly sleep logs, synced settings and a copy of your Plus subscription) is Cheevee Health’s data and is kept apart from your account details. Those records are kept on the server only after you give explicit consent in the app, separately from signing up and accepting the terms. The details are in the Cheevee Health Privacy Policy.

Data from Apple Health is not part of your Cheevee account and is never sent to our server. If you subscribe to Plus, RevenueCat, which manages the subscription with Apple, receives your Cheevee account ID (a random ID, not your name or email), as the Cheevee Health policy explains.

Choose Delete account from Cheevee Health in the app’s settings or on this website’s account page and enter your password: your Cheevee Health membership and all your Cheevee Health data are deleted at once, and that device is signed out. Your Cheevee account stays, for other apps, or to join Cheevee Health again with the same email and password, which starts afresh because the earlier data is gone.

## **9. Access log**

To show how your data has been handled, the server keeps an access log when you delete your account from an app, when you delete your Cheevee account and when an account is deleted because it no longer belongs to any app, as well as each app’s events listed in that app’s policy, such as opening, saving or deleting records in Cheevee Health and giving or withdrawing consent.

The log keeps what was done, when, and the IP address and app (user agent) used. It holds nothing you wrote or chose, and is kept for 1 year, including after you delete your account.

## **10. Legal basis**

Account details and sessions are used to provide the account you signed up for, under our contract with you (the Cheevee Account Terms). Counting wrong passwords, limiting repeated attempts, security emails and the access log rest on our legitimate interest in keeping your account secure, and on the PDPA’s duty to keep personal data secure and show how it has been handled.

The Cheevee account holds no sensitive personal data. If an app keeps health data, that app asks for your explicit consent separately, as its policy explains, and you can withdraw it at any time.

## **11. Who we share data with**

The account and this website have no third-party analytics, advertising or tracking tools. We don’t sell, rent or trade personal data, and we don’t use account details for advertising or marketing.

To run the account we use two service providers, who may process data only on our instructions: the provider hosting our servers and database in Singapore (where the account, sessions, the access log and each app’s data are kept), and Brevo (Sendinblue SAS, France), which sends account emails and receives only your name, your email and the emails we send you.

Each app may use further providers for its own features; Cheevee Health, for example, uses RevenueCat for Plus subscriptions and Sentry for crash reports. See that app’s policy.

We may disclose data when the law or an order from an authority with legal power requires it, and only as much as needed.

## **12. Transfers abroad**

Our servers and database are in Singapore, so account details leave Thailand. PDPA section 28 allows this where the destination has adequate personal data protection; Singapore has its own Personal Data Protection Act 2012, and data is encrypted in transit. Emails sent through Brevo are processed in the European Union under the GDPR.

## **13. This website**

This website has no third-party analytics, advertising or tracking cookies. It keeps a nuxt-color-mode value in your browser’s local storage that remembers whether you chose the day or night theme, and holds no personal data. The page’s language is in its address (/th), not stored in your browser.

When you sign in or sign up on this website, our server (on its own address, such as api.cheevee.app) sets three cookies in your browser: cv\_at, the sign-in token that lasts 15 minutes; cv\_rt, the token that renews it and is replaced each time it’s used; and cv\_session, which only says that you may be signed in. cv\_at and cv\_rt can’t be read by the website’s scripts (httpOnly), travel only over HTTPS and are sent only to our server, never to other websites. If you tick Remember me when you sign in (and when you sign up on this website), cv\_rt and cv\_session last 30 days without use, like a session in the app; if you don’t, they’re deleted when you close your browser and the session ends after 24 hours without use. Either way, 180 days after sign-in at most. Signing out, deleting your account from Cheevee Health and deleting your Cheevee account on this website delete them. These cookies are needed to keep you signed in, so they don’t need your consent; without them you can’t sign in on the website.

When you open the link in a verification email, the verification page sends the code in the link to our server; if you ask for a new link there, it sends the email you type. When you open a set-a-new-password link, that page sends the code in the link and the new password you type to the server, which keeps the password only as a hash. These pages are never cached, don’t appear in search results, and don’t pass the code in the link on to other websites.

The sign-in, sign-up and account pages send what you type (your name, email, password, and the changes you make) to our server, which keeps passwords only as hashes. Like the pages above, they are never cached and don’t appear in search results.

## **14. Security**

Everything between the apps, the website and the server travels over an encrypted connection (HTTPS). Passwords are kept as Argon2id hashes; sign-in tokens, emailed links and the counters for repeated attempts are kept as one-way hashes, so a copy of the database can’t be used to sign in as you.

Five wrong passwords in a row lock sign-in for 15 minutes, and a session expires at the latest 180 days after sign-in. Important actions (changing your email or password, deleting your account from an app and deleting your Cheevee account) need your current password, and we email you when your account’s password or email is changed. Only the people who run the service can reach the database.

Please use a password you don’t use anywhere else, and change it at once if you get a notice about a change you didn’t make.

## **15. Keeping and deleting data**

We keep account details for as long as the account exists. Ended sessions are deleted 30 days after they end, emailed links 7 days after they expire, counters for repeated attempts when their period is over, and the access log after 1 year.

To delete your whole Cheevee account, choose Delete Cheevee account in any app’s settings and enter your password; the confirmation names every app whose data will go too. The account, your data in every app you joined, all sessions, and the account’s verification and set-a-new-password links are deleted at once, and every device in every app is signed out. Or email us from your account’s email and we will delete it for you. Either way, the access log, which holds nothing you wrote or chose, is kept until its year is up.

If your account no longer belongs to any Cheevee app (for example after you delete your account from Cheevee Health, or when you signed up on this website and haven’t joined an app), we keep it for 365 days from that day in case you come back or join, then delete it for good, emailing you a warning with the deletion date at least 30 days before. If the warning can’t be sent, we don’t delete the account yet and try again the next day. If you join an app before that date, the account isn’t deleted.

Deleting an app from your device doesn’t delete your account, and deleting your account doesn’t cancel a subscription bought through the App Store; cancel it in your Apple ID settings.

## **16. Your rights**

Under the PDPA you have the right to access, correct, delete or port your personal data, to object to or restrict its use, and to withdraw consent. You can change your name, email, language and password yourself, and delete your account from an app or delete your whole Cheevee account, in the app’s settings or on this website’s account page. For rights over the data an app keeps, see that app’s policy.

For a copy of your account details, or any other request, email us from your account’s email. We answer every request within 30 days of receiving it; if we can’t do what you ask, we will tell you why. You can also complain to Thailand’s Personal Data Protection Committee.

## **17. Children**

The Cheevee account is for people aged 13 and over. If you are under 20, please ask a parent or guardian for consent before signing up.

## **18. Changes to this policy**

The date it was last updated is always shown at the top. If we change how the account keeps or uses data, we will update this page before the change takes effect.

## **19. Contact us**

Questions or requests about your account or your data? Write to us at the email at the end of this page.

## **Each app’s documents**

What each app keeps, and the terms for using it, are in that app’s documents.

- [Cheevee Health Privacy Policy](https://cheevee.app/health/privacy)
- [Cheevee Health Terms of Service](https://cheevee.app/health/terms)

Questions about this document: [**cheevee.app@gmail.com**](mailto:cheevee.app@gmail.com)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://cheevee.app/#website","@type":"WebSite","inLanguage":"en-US","name":"Cheevee","url":"https://cheevee.app/","publisher":{"@id":"https://cheevee.app/#identity"},"workTranslation":{"@id":"https://cheevee.app/th#website"}},{"@id":"https://cheevee.app/privacy#webpage","@type":"WebPage","dateModified":"2026-11-12","description":"What your Cheevee account keeps, how signing in works, how one account is shared with Cheevee Health, and how you change or delete your data.","name":"Cheevee Account Privacy Policy","url":"https://cheevee.app/privacy","breadcrumb":{"@id":"https://cheevee.app/privacy#breadcrumb"},"isPartOf":{"@id":"https://cheevee.app/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://cheevee.app/privacy"]}],"primaryImageOfPage":{"@id":"https://cheevee.app/#logo"}},{"@id":"https://cheevee.app/#identity","@type":"Organization","name":"Cheevee","url":"https://cheevee.app/","contactPoint":{"@type":"ContactPoint","contactType":"customer support","email":"cheevee.app@gmail.com","availableLanguage":["th","en"]},"logo":{"@id":"https://cheevee.app/#logo"},"sameAs":["https://lin.ee/Ocbwiw4"]},{"@id":"https://cheevee.app/privacy#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Cheevee","item":"https://cheevee.app/","position":1},{"@type":"ListItem","name":"Cheevee Account Privacy Policy","item":"https://cheevee.app/privacy","position":2}]},{"@id":"https://cheevee.app/#logo","@type":"ImageObject","caption":"Cheevee","contentUrl":"https://cheevee.app/apple-touch-icon.png","inLanguage":"en-US","url":"https://cheevee.app/apple-touch-icon.png"}]}
```

## Sitemap

See the full [sitemap](https://cheevee.app/sitemap.md) for all pages.