Privacy Policy

• Account data — name/username, email, mobile number, and your role at the academy.
• Chess data — games you play or import, puzzle attempts, ratings, analysis and reports.
• Academy data — batches, class schedules, attendance and fee records.
• Linked accounts — your FIDE ID, Lichess or Chess.com usernames, if you provide them.
• Technical data — sign-in sessions and security/audit logs.

To provide coaching and training tools, run classes and tournaments, produce your progress reports, keep fee records, secure your account, and communicate with you about the academy. We rely on the consent you give at registration, and on the necessity of processing to deliver the service you have asked for.

We do not sell your personal data, and we do not use it for advertising.

Many of our students are children. We process a child’s data only with the consent of a parent or guardian, obtained at registration. We do not carry out tracking, behavioural monitoring for advertising, or targeted advertising directed at children.

A parent or guardian linked to a student can see that student’s progress, classes, attendance and fees. Every such access by someone other than the student is recorded in our audit log.

Your coaches can see the progress of students in their own batches. Academy administrators can see account and fee records. Other students cannot see your reports, fees or attendance.

We use service providers to run the platform. They process data on our instructions only:

• Supabase — database and hosting for your account, games and academy records (Mumbai, India).
• Upstash — cache and live presence data.
• Resend — sending verification codes, reports and invoices by email.
• Jitsi Meet (8x8) — live class video and audio, when a class uses the built-in video room.
• Groq and Anthropic — generating coaching text from your game data.
• Lichess and Chess.com — importing games, only when you give us a username or FIDE ID.
• Cloudinary — storing images you upload, such as a profile picture.
• Razorpay — processing payments, if and when online payments are enabled.

We keep your data while your account is active and for as long as needed for legitimate academy records (such as fees). You can ask us to delete your account, after which we remove your personal data except where we must keep it by law.

In practice that means we erase the information that identifies you — your name, email, phone number, linked chess accounts and profile details. Fee and invoice records are kept for the period required for financial and tax records, with your identifying details removed from them, so they can no longer be traced back to you.

Under the DPDPA you may:

• access the personal data we hold about you;
• ask us to correct or complete it;
• ask us to erase it;
• withdraw consent — including for optional marketing or SMS messages — at any time;
• nominate someone to exercise these rights on your behalf;
• raise a grievance with us, and escalate to the Data Protection Board of India.

Withdrawing consent that is necessary for the service may mean we can no longer provide it.

Passwords are stored hashed, never in plain text. Sign-in uses secure, HTTP-only cookies, and access to personal data within the platform is restricted by role and recorded in an audit log.

For any privacy question, or to exercise the rights above, contact us through the form on our website and mark your message for the attention of the Data Protection Officer. We will respond as required by the DPDPA.