Data We Collect
Account data
- Email address (used for passwordless OTP authentication)
- Password hash (optional, if the user sets a password)
- Preferred language and timezone
Session & security data
- IP address and device user-agent (stored per session to allow session management and revocation)
- JWT refresh tokens
Push notifications
- Device push token (only if you grant notification permission)
Learning & progress data
- Chess openings you are studying and your chosen side (White / Black)
- Spaced-repetition metrics: ease factor, interval, repetition count, last/next review date, success rate
- Daily activity log (activity type, date, timezone) used to compute streaks
- XP points, level, daily goal
- No third-party advertising data is collected.
How We Use Your Data
| Purpose | Data used |
|---|
| Authentication & session security | Email, IP, user-agent, tokens |
| Personalised learning experience | Learning progress, activity, XP |
| Push notifications (opt-in) | Push token |
| Language & timezone preferences | Language code, timezone |
Data Retention & Deletion
When you delete your account, all personal data (user record, sessions, push tokens, learning progress, activity history) is permanently deleted from our servers.
Data Sharing
We do not sell or share your personal data with third parties. Data is stored on our own servers and is not used for advertising purposes.