Privacy and personal data

1. Controller and contact

The controller is SNS for Life Sagl, CHE-363.063.835, Via Guidino 4, 6900 Paradiso, Switzerland. For privacy requests: support@chessentia.com. Do not send passwords, sign-in codes or identity documents with your initial request.

2. Studying without an account

Studied variations, exercises, reviews, personal games, notes, language, sounds and board appearance are stored locally in the app or browser. Stockfish analyses positions on your device: the app does not upload them to an analysis service. On the web, loading pages still sends requests to the hosting provider, which may process your IP address and technical connection information. External links open services with their own privacy notices.

3. Account and online backup

When an adult creates an account, Supabase processes email, username, account ID, credentials, language, session information and technical authentication data. Choose a nickname: your real name is not required. Passwords are handled by the authentication service and are not included in study backups. An online copy is sent only when you use the save command in Profile; it contains progress, lines, comments, exercises and personal games included in the backup format. Avoid names, contact details or other personal information in notes and PGNs, especially information about children or other people. When you contact online services, gateway logs may contain your IP address, country and city inferred from that IP, client type, requested path, time and request outcome. This is a network-based location estimate; the app does not request GPS access. These data support service operation, security and troubleshooting, not advertising.

4. Purposes and legal grounds

We use data to provide the requested account, backup and purchased courses, verify and restore purchases, confirm email, recover access, provide support and protect the service. Where the GDPR applies, the intended legal bases are performance of the requested service, legitimate interests in security and support, and applicable legal obligations. We do not request blanket consent for all processing. Any additional optional uses will be explained separately before they are enabled. The app includes no advertising SDK, commercial profiling or cross-app tracking and does not sell user data.

5. Children and families

Free content is available without registration, including to children. Online account features are restricted to people aged 18 or over: this is a service policy, not a universal legal age threshold. The age-band choice happens on the device; we do not ask for a date of birth. This declaration does not verify identity or parental consent. Personal accounts for minors and uploading their study data are not enabled as a dedicated service. Adults must not upload children's personal data in their own backup. If you believe a child's data has been collected, contact us to investigate and request deletion. An underage selection is not sent to the server. Registering an adult account does send the adult declaration and the acknowledged notice version.

6. Providers and transfers

The Supabase database is configured in Frankfurt, Germany; authentication and support may involve its international subprocessors. Infomaniak sends verification and recovery emails and hosts the support mailbox support@chessentia.com. The website is hosted through OpenAI ChatGPT Sites and its infrastructure providers. Apple handles App Store and TestFlight distribution and in-app payments under its own rules. The database location does not mean that all processing takes place in Switzerland or the EU. The provider documents linked below describe locations and transfer safeguards; you may request further information from the controller.

7. Retention

Local data remains on your device until you delete it or the app or browser removes its storage. Your account and latest online copy remain available while you keep the account; automatic deletion for inactivity is not enabled. Account deletion removes the account and online copy from the active application database. It does not delete exported files, storage on other devices, or instantly erase every provider log and backup. These have separate retention cycles: we do not promise immediate deletion from all copies. Support correspondence is kept to handle the request and relevant obligations or disputes. You may ask which criteria apply to your case.

8. Your rights

Under applicable law you may request access, correction, deletion, portability, restriction or objection, and withdraw any consent given. From Profile you can export progress and available account data, or delete the account after confirming your identity. You can also contact us without reinstalling the app. Requests are verified proportionately and handled within applicable deadlines. You may contact the FDPIC in Switzerland or your country's competent data protection authority. A local backup does not include all possible provider logs: contact the controller for a full access request.

9. Purchases and updates

A non-consumable in-app purchase unlocks the selected course for both sides, without a subscription. Apple shows the price and currency before confirmation and handles payment. TestFlight purchases are Apple Sandbox tests without charges; purchases in the commercial App Store version are charged. On iPhone you can buy and restore without a Chessentia account, using purchases belonging to the current Apple Account. Apple receives a random installation identifier for new purchases; historical tokens remain unchanged. The server checks product status with Apple before delivering complete lessons, which require Internet and remain in temporary memory. Chessentia does not collect payment card details or your Apple password. Only optional website linking saves the course, transaction identifiers, dates and revocations associated with your profile; links for purchases made in earlier versions remain available. You can export these records in Profile. Deleting your profile removes the link from the active application database, not Apple’s history or the ability to restore on iPhone. Provider logs and backups follow the retention cycles described above. Purchase information updated: 20 October 2026. [2026-10-20-commercial-v1]

Purchase verification and technical data

To protect courses, Chessentia verifies the app through Apple App Attest and transactions through Apple. The Supabase server processes a public key, a random installation identifier, security counters and purchase data. It does not receive your Apple Account password. Temporary requests expire after 2 minutes; keys inactive for 90 days and daily counters are removed at the next service cleanup. Signed transactions are not saved in logs or backups. A link to your Chessentia profile is saved only if you choose to link purchases to the website; deleting the profile removes this link. Restoration on iPhone through Apple remains independent of your profile. Contact: support@chessentia.com.

Provider documents

• Supabase — Data Processing Addendum
• Supabase — Data residency and transfers
• Infomaniak — Privacy
• Infomaniak — Data Processing Agreement
• OpenAI — ChatGPT Sites DPA
• Apple — Privacy