Privacy Policy

• Account data: your email address, display name, and optional avatar. If you sign in with Google, we also receive your Google profile name and picture.
• Learning progress: XP, hearts, streaks, completed lessons, daily-challenge results, and onboarding answers (chess level, opening style, goal, daily XP target).
• Social graph: the accounts you follow and who follows you, so we can show friends leaderboards.
• AI coach interactions: the lesson context sent to the coach and the response we cache so you can re-read it later.
• Technical logs: basic request logs (timestamp, path, error) needed to run and debug the service.

• We do not sell your personal data.
• We do not run third-party advertising trackers inside the app.
• We do not access your device contacts, camera, or microphone.

• To power your account, save progress across devices, and keep streaks accurate.
• To personalize recommendations based on your onboarding answers.
• To generate Coach Rook feedback after lessons.
• To show global and friends leaderboards.
• To detect abuse and keep the service reliable.

Chesslyst is built on the following providers:

• Lovable Cloud (hosting, authentication, database, storage) — stores your account and progress.
• Lovable AI Gateway — routes prompts to a large-language-model provider to generate coach feedback. Coach requests include lesson context but not your email address.
• Google Sign-In — only if you choose to sign in with Google.

These providers process data on our behalf under their own security practices. This is not a certification or independent audit; it is a description of the platform features we rely on.

We use browser storage to keep you signed in and to remember preferences like whether sound effects are on. We do not use third-party advertising cookies.

We keep your account data while your account is active. If you delete your account, we remove your profile, stats, follows, and lesson history from active systems. Backup copies may persist for a short rolling window before being overwritten.

• Edit your display name and avatar on the profile page.
• Turn sound effects on or off in your profile.
• Request account deletion or a copy of your data by emailing hello@chesslyst.app.
• If you are in the EU/UK, you have rights under GDPR/UK GDPR (access, correction, deletion, portability, objection). Contact us and we will honor valid requests.

Chesslyst is not directed at children under 13 (or the minimum age of digital consent in your country). If you believe a child has created an account, contact us and we will remove it.

Passwords are handled by our authentication provider and are not visible to us. Database access uses row-level security so that players can only read and write their own data. No system is perfectly secure — please use a strong, unique password.

Our providers may process data in countries other than yours. Where required, we rely on their standard contractual protections for international transfers.

We may update this policy as Chesslyst evolves. Material changes will be reflected in the "Effective" date at the top, and where practical announced in the app.

Questions or privacy requests? Email hello@chesslyst.app.