Privacy Policy

Effective 19 August 2026 · Last updated 10 October 2026

The short version. ChessGPT stores your email, the chess games you give us, and the messages you send the coach — because the product cannot work without them. We send your games and chat messages to AI providers (OpenAI and Anthropic) to generate analysis; under our agreements with them, your content is not used to train their models.

We do not sell your data, we do not run advertising, and we do not track you across other apps or websites. You can delete your account and everything in it at any time, from inside the app or by emailing us.

The rest of this page is the precise version.

1.Who this policy covers

This policy applies to the ChessGPT website at chessgpt.co and to the ChessGPT iOS app. Where the two differ, we say so explicitly.

ChessGPT is operated as an independent service. For any privacy question, contact chessgpt.co@gmail.com.

2.What we collect

Information you give us

Email address and password — to create and secure your account. Passwords are hashed by our authentication provider; we never see or store them in readable form.
Your Chess.com or Lichess username, if you choose to link one. We then retrieve your publicly available games and ratings from those services. We never ask for, and cannot access, your password on those sites.
Chess games (PGN data) that you paste, share, or import.
Messages you send to the ChessGPT coach.

Information we generate about you

Game analyses, weekly lessons, puzzles, opening repertoires, and personal insight reports produced from your games.
Your subscription tier and usage counts (for example, how many analyses you have run against your plan's allowance).

Payment information

Payments are processed entirely by Stripe. Card numbers never reach our servers. We store only Stripe's customer and subscription identifiers, your plan, and its status, so we know what you are entitled to.

Usage and diagnostic information

Product analytics — which features you use and when, recorded against your account identifier, so we can tell what works and what is broken. Collected on the website and on our servers, including for requests originating from the iOS app.
Error reports — crash and exception data when something fails, so we can fix it. Configured to exclude personally identifying request data.
Standard technical data — IP address, browser or device type, and timestamps, recorded in ordinary server logs and used for security, abuse prevention, and debugging.

3.What we do not collect

No advertising identifiers. The iOS app does not use the IDFA and will never show you the App Tracking Transparency prompt, because there is nothing to track.
No cross-app or cross-site tracking, and no data brokers.
No session recording or screen replay. Explicitly disabled.
No location, contacts, photos, camera, microphone, or health data. The app never requests these permissions.
We never sell or rent your personal information, and we have never done so.

4.How we use your information

To provide the product: analyze your games, answer your questions, build your repertoire, and generate lessons and puzzles.
To operate your account, enforce plan limits, and process subscriptions.
To keep the service secure and prevent abuse, including rate limiting.
To understand which features are used, so we can improve them.
To contact you about your account or a material change to the service. We do not send marketing email you have not asked for.

5.AI processing — what happens to your games and messages

Generating analysis requires sending your chess games and chat messages to large language model providers. We use OpenAI and Anthropic for this.

We access these providers through their business APIs. Under their API terms, content submitted this way is not used to train their models. Providers may retain content briefly for abuse monitoring, as described in their own policies.

Chess positions are also evaluated by Stockfish, an open-source chess engine that runs on our own servers and in your browser. Nothing is sent to a third party for that step.

If you would rather your games were never sent to an AI provider, the practical consequence is that ChessGPT cannot analyze them — that processing is the product. You can stop at any time by deleting your account.

6.Who we share information with

We share data only with the service providers below, only to the extent needed for them to do their job. Each is bound by its own contractual and security obligations.

Provider	Purpose	What it receives
Supabase	Accounts, authentication, database	Email, account data, your chess content
Railway	Backend hosting	All data in transit and processing
Vercel	Website hosting	Standard request logs
Stripe	Payments and subscriptions	Email, payment details you enter with them
OpenAI	AI analysis, chat, lessons	Game PGNs, chat messages
Anthropic	AI analysis, lessons	Game PGNs, chat messages
PostHog	Product analytics	Account identifier, email, feature events
Sentry	Error monitoring	Error traces, technical context
Chess.com / Lichess	Retrieving your public games	Only the public username you provide

We may also disclose information if legally required to, or to protect the rights and safety of our users. If ChessGPT is ever acquired, your data would transfer as part of that business, and we would tell you before it did.

7.How long we keep it

Account data and chess content — for as long as your account exists.
On deletion — your account, games, analyses, chat history, lessons, and repertoires are permanently deleted. This is not reversible and we cannot recover them afterwards.
Payment records — Stripe retains transaction records as required by financial and tax law, independently of us.
Logs and error reports — retained on a short rolling window for operational purposes.

8.Your rights and how to use them

Wherever you live, you can:

Delete your account and all associated data — in the app (Android or iPhone) under Profile → Delete account, or by emailing us. No need to explain why. Step-by-step: chessgpt.co/delete-account.html.
Access or export your data — email us and we will provide it.
Correct your information — most of it is editable in the app; email us for the rest.
Cancel your subscription at any time, from your account settings.

If you are in the EEA or UK, you additionally have the rights to object to or restrict processing, to data portability, and to lodge a complaint with your local supervisory authority. Our legal bases are: performance of a contract (providing the service you signed up for), legitimate interests (security, abuse prevention, and product improvement), and consent where required.

If you are in California, you have the rights to know, delete, and correct, and the right not to be discriminated against for exercising them. We do not sell or share personal information as the CCPA defines those terms.

To exercise any of these, email chessgpt.co@gmail.com. We aim to respond within 30 days.

9.Children

ChessGPT is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, email us and we will delete it. Users between 13 and the age of majority should have a parent or guardian review this policy.

10.Security

All traffic is encrypted in transit with TLS. Passwords are hashed by our authentication provider and are never visible to us. Access to production data is limited to the systems that require it, and administrative credentials are held separately from the application.

No system is perfectly secure, and we will not claim otherwise. If we ever discover a breach affecting your personal data, we will notify affected users and the relevant authorities as required by law.

11.International transfers

ChessGPT is operated from the United States, and our providers process data there. If you use the service from outside the US, you are sending your information to the US, where privacy law differs from your own. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards offered by our providers.

12.Changes to this policy

If we make a material change, we will update the date above and notify you in the product or by email before it takes effect. Continuing to use ChessGPT after a change means you accept the updated policy.

13.Contact

Questions, requests, or complaints: chessgpt.co@gmail.com. A person reads this address.