Privacy Policy

1. Who We Are

ChessRecall is developed and operated by VanSoftware, an independent software developer. For any privacy-related inquiries, please contact us at the address provided in Section 11.

2. Information We Collect

2.1 Information You Provide

• Account information: When you sign in with Google, we receive your name, email address, and profile picture URL from your Google account.
• App content: Openings you add, custom positions, study notes, and review history.
• Purchase records: When you purchase a subscription or lifetime license, Google Play processes the payment. We receive a non-personally-identifiable purchase token from RevenueCat to verify your subscription status.

2.2 Information Collected Automatically

• Usage data: Features you interact with, session duration, screens visited, and button taps — collected via PostHog analytics to help us improve the App.
• Device information: Device model, operating system version, app version, and a randomized device identifier. We do not collect your IMEI, phone number, or precise location.
• Crash reports: Crash logs and error stack traces, which may include device state at the time of the crash.
• Performance data: App load times and network request durations to identify performance issues.

2.3 Information Stored Locally

ChessRecall uses Hive (an offline NoSQL database) to store your opening data, review history, and FSRS algorithm state directly on your device. This local data is synchronized with Firebase Firestore when you are logged in and have an internet connection.

2.4 Information We Do NOT Collect

• Precise GPS location
• Contacts, microphone, or camera data
• SMS or call logs
• Full payment card details (handled entirely by Google Play)
• Passwords (we only support Google Sign-In)

3. Third-Party Services

We integrate with the following third-party services. Each has its own privacy policy which governs how they handle your data:

3.1 Firebase Auth (Google LLC)

We use Firebase Authentication to allow you to sign in with your Google account. Firebase Auth stores your user ID, email, display name, and profile photo URL. See Firebase Privacy Policy.

3.2 Firebase Firestore (Google LLC)

Your study data — including saved openings, review history, FSRS card states, and settings — is synchronized to Firebase Firestore under your authenticated user ID. Data is stored on Google's servers in the United States. See Firebase Privacy Policy.

3.3 Hive (Local Storage)

Hive is an open-source local database that runs entirely on your device. Data stored in Hive does not leave your device unless explicitly synced to Firestore. No data is sent to any Hive servers.

3.4 RevenueCat

We use RevenueCat to manage in-app purchases and subscriptions processed through Google Play. RevenueCat receives anonymized purchase tokens and subscription status information. RevenueCat does not receive your full name, email, or payment card details. See RevenueCat Privacy Policy.

3.5 PostHog

We use PostHog for product analytics to understand how users interact with the App and to identify areas for improvement. PostHog collects anonymized event data (e.g., "opened explorer mode", "completed review session") along with your anonymized device identifier. We do not send your name or email to PostHog. PostHog may store data on servers in the EU or US. See PostHog Privacy Policy.

3.6 Lichess API

The Explorer Mode feature makes requests to the Lichess public API to retrieve opening statistics (win rates, move frequencies). These requests are unauthenticated — we do not link your Lichess account and we do not send any personally identifiable information to Lichess. Lichess may log anonymized request data per their own privacy policy. See Lichess Privacy Policy.

3.7 Google Play

All in-app purchases are processed by Google Play. Google collects billing information, purchase history, and other payment data as described in Google's Privacy Policy. We do not receive or store your payment card details.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the service: Authenticate your account, sync your study data, and deliver features.
• Personalize your experience: Apply the FSRS algorithm to your personal review history to schedule your sessions optimally.
• Process purchases: Verify subscription status and unlock premium features.
• Improve the App: Analyze anonymized usage patterns via PostHog to fix bugs, optimize features, and prioritize development.
• Provide support: Respond to inquiries and diagnose issues using crash and error logs.
• Legal compliance: Comply with applicable laws and regulations.

We do not use your personal data for advertising, sell it to third parties, or use it for profiling unrelated to the chess study features of the App.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these circumstances:

• Service providers: With Firebase (Google), RevenueCat, and PostHog as described above, solely to operate the App.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before any such transfer.
• Protection of rights: To enforce our Terms of Service or protect the rights, property, or safety of VanSoftware or others.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the App's services. Specifically:

• Account data (Firebase): Retained until you delete your account. You can delete your account from within the App or by contacting us.
• Study data (Firestore): Retained as long as your account exists. Deleted when your account is deleted.
• Analytics data (PostHog): Retained for up to 12 months in anonymized form.
• Purchase records (RevenueCat): Retained as required for legal and financial compliance (typically 7 years).
• Local data (Hive): Stored on your device. Deleted when you uninstall the App or clear its data.

7. Data Security

We take reasonable measures to protect your data, including:

• All data in transit is encrypted using TLS/HTTPS.
• Firebase Firestore data is secured with Firebase Security Rules that restrict access to your own user ID only.
• We do not store passwords — authentication is delegated to Google Sign-In.
• Access to production systems is restricted to authorized VanSoftware personnel.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

8.1 For all users

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Data portability: Request a machine-readable export of your study data.
• Opt-out of analytics: You may request to opt out of PostHog analytics collection by contacting us.

8.2 EU/EEA Residents (GDPR)

You also have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. Our legal basis for processing your data is:

• Contract performance: Processing necessary to provide the App's services.
• Legitimate interests: Analytics and crash reporting to improve the App.
• Legal obligation: Retention of purchase records.

8.3 California Residents (CCPA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days (or as required by applicable law).

9. Children's Privacy

ChessRecall is not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by sending a notification through the App. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: