Privacy Policy

• Account information: your name, email address and a password (stored only as a salted hash, never in readable form). If you sign in with Google or Apple, we receive your name, email address and a provider account identifier from that provider.
• Learning data: the openings you study, the moves you play in training sessions, your attempts, hints used, accuracy, review schedule, streaks and progress. This is how the Service works.
• Preferences: your time zone, daily goal and sound setting.
• Subscription information: your plan, subscription status, billing period and Stripe customer and subscription identifiers. Your card details are entered on Stripe's pages and are not received or stored by us.
• Technical information: IP address, browser type and request details recorded in server logs for security and reliability, and a sign-in session cookie.
• Communications: messages you send to us, and the transactional emails we send you (for example password resets).

• to provide the Service: lessons, practice, spaced-repetition scheduling, statistics and your account;
• to process payments and manage your subscription;
• to send service emails such as password resets and important account or billing notices;
• to keep the Service secure, prevent abuse, fix bugs and monitor performance;
• to comply with law and enforce our Terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only with service providers that help us operate the Service, under terms that limit their use of it:

• Amazon Web Services (hosting, database and content delivery);
• Stripe (payment processing and subscription billing);
• Postmark (delivery of transactional email);
• Google and Apple, only if you choose to sign in with them.

We may also disclose information if required by law or legal process, to protect rights, safety or security, or as part of a merger, acquisition or sale of assets, in which case we will tell you if your information becomes subject to a different privacy policy.

We use a small number of cookies that are necessary for the Service: a secure session cookie that keeps you signed in and security tokens used during sign-in. Your browser may also store preferences such as the color theme and sound setting. We do not currently use advertising cookies or third-party analytics. If that changes, we will update this policy.

We keep account and learning data while your account is active. If you ask us to delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep some records, for example billing and tax records, or to resolve disputes and meet legal obligations. Server logs are kept for a limited time. Backups are overwritten on a rolling schedule.

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, access controls and a private database. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password.

You can view and update your name, time zone and password in Account settings. To access a copy of your data, correct it, or delete your account and data, email us at support@chesspandit.com. We may need to verify your identity first.

California and other US state residents: depending on where you live, you may have the right to know, access, correct and delete personal information, to opt out of its sale or sharing for targeted advertising (we do neither), and not to be discriminated against for exercising these rights. Send requests to the address above. You may also appoint an authorized agent to make a request for you.

You can unsubscribe from non-essential emails; we will still send essential account and billing messages.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, contact us and we will delete it.

We process information in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, give additional notice.

ChessPandit - support@chesspandit.com