Privacy Policy — ChessApp

ChessApp

1. Information We Collect

Account information: When you register we collect your email address and an optional display name. Passwords are stored as salted PBKDF2-SHA256 hashes — we never store plaintext passwords.

Player data: We store FIDE IDs and names of chess players you choose to track. This data is fetched from public sources (fide.com and chess-results.com).

WhatsApp number (optional): If you enable WhatsApp notifications, we store your phone number solely to send pairing alerts. It is never shared with third parties beyond the messaging provider (Twilio).

Device token (optional): If you enable push notifications, we store a Firebase Cloud Messaging (FCM) token linked to your account, used only to deliver pairing notifications.

Usage data: We do not collect analytics or crash reports beyond standard server access logs, which are retained for up to 7 days.

AI Research & Analysis (Advanced plan, optional): If you use these features, the player name/FIDE ID or PGN game data you submit is sent to Anthropic's Claude API solely to generate your report. This data is not stored by us beyond your generated reports, which you can delete at any time.

2. How We Use Your Information

To authenticate your account and maintain your session
To fetch chess player data and tournament pairings on your behalf
To send pairing notifications via push (FCM) or WhatsApp if you have enabled them
To display your tracked players and their tournament history

3. Data Sharing

We do not sell, rent, or share your personal data. Limited sharing occurs only with:

Firebase (Google LLC) — push notification delivery. Subject to Google's Privacy Policy.
Twilio Inc. — if WhatsApp notifications are enabled, your phone number is passed to Twilio. Subject to Twilio's Privacy Policy.
Chess-Results.com & FIDE — publicly accessible chess databases we read data from. We do not send your personal data to them.
Anthropic PBC — if you use the AI Research or AI Analysis features (Advanced plan), the player name/FIDE ID or game data you submit is sent to Anthropic's Claude API to generate your report. Subject to Anthropic's Privacy Policy.

4. Data Retention

Your data is retained for as long as your account exists. You can permanently delete your account and all associated data at any time from Settings → Delete My Account inside the app, or by emailing abhinavkaiser@gmail.com. Upon deletion, all your data — account, players, saved games, notification history — is permanently removed immediately.

5. Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed and salted. Session tokens are randomly generated (256-bit) and expire after 30 days.

6. Children's Privacy

ChessApp is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us at abhinavkaiser@gmail.com.

7. Your Rights

You may access or correct your personal data from the app's Settings tab, and delete your account and all associated data at any time via Settings → Delete My Account — no need to contact us first. You can also request access, correction, or deletion by emailing abhinavkaiser@gmail.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent revision.

9. Contact

Developer Abhinav Kaiser
Email abhinavkaiser@gmail.com
App https://xxiot.duckdns.org/chessapp