Privacy Policy

ChessTrack — by NivinLabs
Effective date: March 8, 2026

1. Who We Are

ChessTrack (package: ai.nivinlabs.chesstrack) is developed by NivinLabs.

Contact: nivinlabs@gmail.com

2. Data We Collect

2.1 Account Information

• Email address and display name (via Google Sign-In)
• Date of birth (used for age group classification: under 13, 13–17, 18+)
• Parent/guardian email address (mandatory for users under 13)

2.2 Gameplay Data

• Game records: moves, results, PGN notation, opponent difficulty, time control settings
• Puzzle progress: puzzle ratings, solve history, hints used
• Statistics: win/loss/draw records, ELO rating, accuracy percentages, games played by difficulty level
• Analysis cache: Stockfish engine evaluations for completed games

2.3 Coach-Student Platform Data

• Student UUID (unique identifier for coach pairing)
• Coach connection records: connection status, assigned role (viewer/trainer/head coach), timestamps
• Course enrollment and progress data
• Lesson completion status and puzzle attempt records within courses

2.4 Device Permissions

• Internet: Required for cloud sync, authentication, and coach-student features
• Vibration: Used for haptic feedback during gameplay

3. How We Use Your Data

• Providing core chess gameplay, puzzles, and analysis features
• Tracking your progress, statistics, and ratings over time
• Enabling the coach-student platform (connecting with coaches, sharing progress)
• Syncing your data across devices when signed in
• Age-appropriate content and privacy protections

We do not use your data for advertising, profiling, or marketing. We do not sell or rent your data to anyone.

4. Third-Party Services

ChessTrack uses the following third-party services:

• Supabase (supabase.com/privacy) — Cloud database, user authentication, and data hosting. Your account and gameplay data is stored on Supabase servers when you are signed in.
• Google Sign-In (policies.google.com/privacy) — Authentication only. We receive your email and display name; we do not access your Google contacts, files, or other Google data.
• Google Fonts (developers.google.com/fonts/faq/privacy) — UI fonts loaded at runtime. Google may log font requests (IP address, URL).

We do not share your personal data with any other third parties.

5. Data Storage & Security

• Local storage: All gameplay data is stored in an SQLite database on your device (offline-first architecture). The app works fully offline.
• Cloud storage: When signed in, data syncs to Supabase cloud servers. Data is encrypted in transit using HTTPS/TLS.
• Guest mode: You can use the app without signing in. In guest mode, all data stays on your device only.

6. Children's Privacy (COPPA Compliance)

We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

Users Under 13

• A parent/guardian email address is required during registration
• Parent/guardian must approve all coach connections before they become active
• No data is shared with third parties beyond our infrastructure providers (Supabase, Google)
• Parents can request review or deletion of their child's data at any time by contacting nivinlabs@gmail.com

Users Aged 13–17

• Parent/guardian email is optional but recommended
• Parents are notified of key events (e.g., new coach connections)

Users 18 and Older

• No parental consent or notification required

7. Coach-Student Platform

• Students can voluntarily connect with chess coaches using a QR code or student UUID
• Coach connection requests must be approved by the student (and by a parent for under-13 users) before any data is shared
• Connected coaches receive read-only access to: game history, puzzle progress, course progress, and statistics
• Students can revoke a coach's access at any time — the coach immediately loses all access to the student's data
• Students can connect with multiple coaches simultaneously, each with different roles
• Student data is student-owned — coaches receive access, not copies

8. Data Retention

Your data is retained for as long as your account exists. Local data persists on your device until you clear app data or uninstall the app.

9. Data Deletion

You can delete your account from the Settings screen within the app. Account deletion permanently removes all your data from our cloud servers, including:

• Account information and profile
• All game history, statistics, and analysis data
• All coach connections and course progress
• Puzzle history and ratings

Local data on your device can be removed by clearing the app's data or uninstalling the app.

Parents of users under 13 may request data deletion by emailing nivinlabs@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: nivinlabs@gmail.com