Privacy Policy

Last updated: November 5, 2025

1. Introduction

Welcome to ChessOut ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, and profile photo when you sign in with Google or Apple
• Chess Rating: Manual ELO rating or Lichess rating (if you link your account)
• Lichess Account: Username and rating when you connect via OAuth

2.2 Location Data

• GPS Location: We collect your location to show nearby chess matches and calculate distances
• Match Locations: Venue names and addresses for matches you create

2.3 Usage Data

• Analytics: We use Firebase Analytics to track app usage, screen views, and user interactions
• Match Activity: Matches created, joined, played, cancelled, and other game statistics
• Messages: Chat messages sent within matches

2.4 Technical Data

• Device Information: Device type, operating system, app version
• Push Notification Tokens: FCM tokens for sending notifications

3. How We Use Your Information

We use your information to:

• Provide and maintain the ChessOut service
• Show you nearby chess matches based on your location and ELO preferences
• Facilitate communication between match participants
• Send push notifications about match updates (joins, cancellations, messages, reminders)
• Verify chess ratings through Lichess integration
• Improve our service through analytics and usage patterns
• Prevent fraud and abuse

4. Information Sharing

4.1 With Other Users

We share the following with other ChessOut users:

• Your name and profile photo
• Your chess rating (ELO)
• Lichess username and verification status (if linked)
• Match details you create (venue, time, ELO range)
• Messages sent in match chats

4.2 With Service Providers

• Firebase (Google): Authentication, database, analytics, storage, messaging
• Google Maps: Location services and directions
• Lichess: Rating verification via OAuth

4.3 Legal Requirements

We may disclose your information if required by law or to protect our rights and safety.

5. Data Security

We implement appropriate security measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Firebase security rules for database access control
• Secure OAuth flows for Lichess integration
• Regular security updates and monitoring

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update your profile information anytime
• Deletion: Request deletion of your account and associated data
• Opt-out: Disable location services or push notifications
• Data Portability: Request your data in a structured format

7. Location Data

Location services are optional but required for finding nearby matches. You can:

• Grant or deny location permission at any time through device settings
• Use the app without location (you won't see nearby matches)
• Your precise location is never shared with other users (only match venues are visible)

8. Children's Privacy

ChessOut is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. Data Retention

• Account Data: Retained while your account is active
• Match Data: Retained for historical purposes (including cancelled matches)
• Messages: Retained as part of match history
• Analytics: Aggregated analytics data retained indefinitely

10. Third-Party Links

Our app may contain links to third-party services (Lichess, Google Maps). We are not responsible for their privacy practices. Please review their privacy policies.

11. International Data Transfers

Your data may be processed in countries other than your own, including the United States where Firebase servers are located. We ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, through app notifications.

13. Contact Us

If you have questions about this privacy policy or your data, please contact us at:

• Email: privacy@chessout.app
• Website: https://chessout-64.web.app

14. GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to object to processing based on legitimate interests
• Right to restrict processing in certain circumstances

15. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of sale of personal information (we do not sell your data)
• Non-discrimination for exercising privacy rights