Privacy and personal data

1. Controller and contact

The controller is SNS for Life Sagl, CHE-363.063.835, Via Guidino 4, 6900 Paradiso, Switzerland. For privacy requests: support@chessentia.com. Do not send passwords, sign-in codes or identity documents with your initial request.

2. Studying without an account

Studied variations, exercises, reviews, personal games, notes, language, sounds and board appearance are stored locally in the app or browser. Stockfish analyses positions on your device: the app does not upload them to an analysis service. On the web, loading pages still sends requests to the hosting provider, which may process your IP address and technical connection information. External links open services with their own privacy notices.

3. Account and online backup

When an adult creates an account, Supabase processes email, username, account ID, credentials, language, session information and technical authentication data. Choose a nickname: your real name is not required. Passwords are handled by the authentication service and are not included in study backups. An online copy is sent only when you use the save command in Profile; it contains progress, lines, comments, exercises and personal games included in the backup format. Avoid names, contact details or other personal information in notes and PGNs, especially information about children or other people.

4. Purposes and legal grounds

We use data to provide the account and backup you request, verify email, recover access, assist you and protect the service. Where GDPR applies, the intended grounds are performance of the requested service, legitimate interests in security and support, and applicable legal obligations. We do not ask for blanket consent to all processing. Any additional optional uses will be explained separately before activation. The app does not integrate advertising SDKs, commercial profiling or cross-app tracking; it does not sell user data.

5. Children and families

Free content is available without registration, including to children. Online account features are restricted to people aged 18 or over: this is a service policy, not a universal legal age threshold. The age-band choice happens on the device; we do not ask for a date of birth. This declaration does not verify identity or parental consent. Personal accounts for minors and uploading their study data are not enabled as a dedicated service. Adults must not upload children's personal data in their own backup. If you believe a child's data has been collected, contact us to investigate and request deletion. An underage selection is not sent to the server. Registering an adult account does send the adult declaration and the acknowledged notice version.

6. Providers and transfers

The Supabase database is configured in Frankfurt, Germany; authentication and support may involve its international subprocessors. Infomaniak sends verification and recovery emails and hosts the support mailbox support@chessentia.com. The website is hosted through OpenAI ChatGPT Sites and its infrastructure providers. Apple manages TestFlight distribution and related data under its own rules. The database location does not mean that all processing takes place in Switzerland or the EU. The provider documents linked below describe locations and transfer safeguards; you may request further information from the controller.

7. Retention

Local data remains on your device until you delete it or the app or browser removes its storage. Your account and latest online copy remain available while you keep the account; automatic deletion for inactivity is not enabled. Account deletion removes the account and online copy from the active application database. It does not delete exported files, storage on other devices, or instantly erase every provider log and backup. These have separate retention cycles: we do not promise immediate deletion from all copies. Support correspondence is kept to handle the request and relevant obligations or disputes. You may ask which criteria apply to your case.

8. Your rights

Under applicable law you may request access, correction, deletion, portability, restriction or objection, and withdraw any consent given. From Profile you can export progress and available account data, or delete the account after confirming your identity. You can also contact us without reinstalling the app. Requests are verified proportionately and handled within applicable deadlines. You may contact the FDPIC in Switzerland or your country's competent data protection authority. A local backup does not include all possible provider logs: contact the controller for a full access request.

9. Purchases and updates

Real sales are not active yet. Some TestFlight builds allow Apple Sandbox test purchases, without charges, for authorized test accounts. To verify and restore access, Apple receives a pseudonymous identifier corresponding to the Chessentia account. Our Supabase server stores the user, product and course identifiers, test environment, transaction and original transaction identifiers, and purchase, verification and any revocation dates. It checks the status with Apple before delivering lessons and when the app becomes active again. Chessentia does not collect card details or the Apple password. Full lessons downloaded during this trial remain in temporary memory and require Internet; local progress follows the rules above. You can also export your purchase ledger from Profile. Deleting the account removes this ledger from the active application database, but not Apple’s records; purchases are not automatically transferred to a new account. Contact support for restore issues. Provider technical logs follow the retention cycles described above. We will update the relevant information before real sales. Notice version: 2026-10-18.

Provider documents

• Supabase — Data Processing Addendum
• Supabase — Data residency and transfers
• Infomaniak — Privacy
• Infomaniak — Data Processing Agreement
• OpenAI — ChatGPT Sites DPA
• Apple — Privacy