Privacy Policy

1. Introduction

ChessMind (chessmind.pro) is an AI-powered chess analysis and training platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. By using ChessMind, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you sign in with Google OAuth, we receive and store the following:

• Your name and email address
• Profile photo URL
• Google account identifier

2.2 Chess Platform Data

When you connect a chess platform, we collect:

• Your Chess.com and/or Lichess username
• Game history and metadata fetched from public APIs (moves, results, timestamps, time controls, openings)
• Rating data across different time controls

2.3 Analysis & Training Data

• AI-generated analysis reports based on your game data
• Training plans and progress tracking
• Module completion status and training activity

2.4 Usage & Analytics Data

• Pages visited and features used
• Device type, browser, and operating system
• IP address and approximate location
• Session duration and interaction patterns

3. How We Use Your Data

• To provide personalized chess analysis and training recommendations
• To generate and store your analysis reports and training plans
• To process payments and manage your subscription
• To authenticate your identity and maintain account security
• To improve the Service through aggregated, anonymized usage analytics
• To communicate important updates about the Service

4. Data Processing

Stockfish chess engine analysis runs client-side in your browser. Your game positions are analyzed locally on your device and are not sent to our servers for engine evaluation. AI-powered analysis reports use processed game statistics and patterns — individual moves and positions are not stored on our servers beyond what is necessary to deliver the Service.

5. Third-Party Services

We use the following third-party services:

• Google OAuth — For authentication. Subject to Google's Privacy Policy.
• Lemon Squeezy — For payment processing and subscription management. Your payment information (credit card details) is handled entirely by Lemon Squeezy and is never stored on our servers. Subject to Lemon Squeezy's Privacy Policy.
• Vercel — For hosting and deployment. Subject to Vercel's Privacy Policy.
• Chess.com & Lichess APIs — To fetch your publicly available game data. We access only public game history using your connected username.

6. Cookies

ChessMind uses essential session cookies for authentication and to maintain your logged-in state. These cookies are strictly necessary for the Service to function and do not track you across other websites. We do not use advertising or third-party tracking cookies.

7. Data Retention

We retain your account data and analysis reports for as long as your account is active. Training plan progress and game analysis are stored to provide continuity in your improvement journey. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

8. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate personal data.
• Right to Erasure — Request deletion of your personal data (“right to be forgotten”).
• Right to Data Portability — Receive your data in a structured, machine-readable format.
• Right to Object — Object to processing of your data for certain purposes.
• Right to Restrict Processing — Request that we limit how we use your data.

California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell your personal information to third parties.

9. Data Deletion

You can delete your analysis and training data at any time from the Settings page within the app. To request full account deletion including all associated data, please contact us at support@chessmind.pro. We will process deletion requests within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption for all data in transit, secure authentication via Google OAuth, and access controls on our infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

ChessMind is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@chessmind.pro.