Privacy Policy
Version: 2026-08-07 • Last updated: 7 August 2026
This Privacy Policy explains how IQChess (9517-9206 Québec inc., "we", "us", "our") collects, uses, discloses, and protects personal information when you use our apps, websites, products, and services ("Services").
1) Summary
- We collect account info (e.g., email, name), gameplay and usage data, device and log data, and purchase metadata from platform stores.
- AI Analysis: When you use AI-powered features, chess data and the questions you type are processed by third-party AI providers on our behalf (see section 6a for the current list and their processing locations). You must provide explicit consent before any data is sent. We do not send your account identity to these providers, and we do not permit them to use your data to train their models. We do not route AI analysis data from the EEA, the United Kingdom, or Switzerland to providers that process in mainland China.
- Advertising: We display non-personalized ads through Google AdMob and partners. We do not track you across apps or websites for advertising purposes.
- We use data to provide and secure the Services, enable gameplay and social sign-in, process purchases, improve features (including AI/engine analysis), and comply with law.
- We share data with service providers (e.g., hosting, authentication, analytics, payments, AI analysis) under contracts; we don't sell personal information.
- You have rights to access, correct, and delete personal information, subject to legal limits. You can delete your account in-app.
2) Controller & Contact
Controller: 9517-9206 Québec inc. (IQChess). privacy@iqchess.org, Mailing: 4736 Saint Jean Blvd., Pierrefonds, QC H9H 4B2, Canada.
3) What we collect
- Account & Profile: email, display name, avatar, locale, and any profile fields you provide. If you sign in with Apple/Google/Facebook, we receive identifiers and the data those providers share (often name and email; sometimes only an opaque ID).
- Gameplay & UGC: game records (PGN/FEN), moves, analysis requests, chat/messages, reports you file, preferences.
- AI Analysis Data: When you use AI-powered analysis or coaching features, we collect chess positions (in FEN notation), your move history for the analyzed game, game classification (opening/middlegame/endgame), your selected language and analysis complexity level, the free-text questions and messages you send to the AI coach, and your AI coach memory (a short profile summarising your playing style, goals, and recurring themes, generated from your past sessions). This data is shared with our AI providers only after you provide explicit consent. See section 6a.
- Device & Logs: IP address, device model/OS, app version, crash reports, diagnostic logs, coarse location from IP.
- Advertising Data: Our advertising partners (Google AdMob, Unity Ads, Meta Audience Network, AppLovin, and others) may collect device information (device model, OS version, IP address) to serve ads and prevent fraud. We serve non-personalized ads only and do not track you across apps or websites.
- Purchase Data: transaction IDs, product IDs, price and currency metadata, and fraud signals from platform stores or processors. We do not receive full payment card numbers from Apple/Google/Stripe.
- Cookies & Similar: limited cookies/local storage for authentication, preferences, consent management, and analytics on the website.
4) How we use data
- Provide and operate the Services (authentication, gameplay, matchmaking, ratings, analysis, cloud sync).
- Maintain safety and integrity (fraud prevention, abuse detection, enforcing policies).
- Improve and develop features (including training quality signals for AI/engine tuning, de-identified where feasible).
- Communicate with you (service messages, updates). Marketing emails are optional and require your consent.
- Comply with legal obligations and platform policies; defend our legal rights.
5) Legal bases & consent
Where applicable (e.g., under PIPEDA and Québec Law 25), we obtain meaningful consent for the collection, use, and disclosure of personal information. For users in jurisdictions with GDPR-style regimes, our legal bases include consent, contract performance, legitimate interests (e.g., service security and improvement), and compliance with legal obligations.
6) Sharing & service providers
We share personal information with:
- Hosting & Infrastructure: Amazon Web Services (e.g., Cognito, AppSync, DynamoDB, S3, CloudWatch) in regions such as the United States and others we may add for performance.
- AI Analysis Providers: the third-party AI providers listed in section 6a below, which may change from time to time.
- Advertising Partners: Google AdMob, Unity Ads, Meta Audience Network (Facebook), AppLovin, and other ad mediation partners (see section 6b below for details).
- Identity Providers: Apple, Google, Facebook (if you use those to sign in).
- Payments: Apple App Store, Google Play, and (for web) Stripe or equivalent processor.
- Analytics & Logs: performance/crash analytics and telemetry providers.
- Moderation & Safety: tools used to detect abuse or cheating.
- Legal/Compliance: to comply with law, protect rights, or in connection with mergers/acquisitions.
Service providers act on our instructions and are bound by confidentiality and data-protection obligations.
6a) AI-Powered Chess Analysis and Coaching
When you use our AI analysis and coaching features (for example the "Analyze", "AI Coach", or "Play Kai" features in the app), you must provide explicit consent before any data is sent to a third-party AI provider. If you decline, the AI features are unavailable but the rest of the Services continue to work, including the on-device chess engine.
What data is sent:
- Chess game positions (in FEN notation) and your move history for the analyzed game
- Game classification (opening, middlegame, endgame) and engine evaluations
- Selected language and analysis complexity level
- Opening name and ECO code (used for optional web searches of chess theory)
- The free-text questions and chat messages you send to the AI coach. Please do not include personal information in these messages — they are sent to the provider as you write them
- Your AI coach memory: a short profile summarising your playing style, strengths, goals, recurring themes, and communication style, generated by us from your previous sessions
What is not sent: we do not send your name, email address, account or user ID, authentication tokens, IP address, device identifiers, or payment information to any AI provider. AI requests are pseudonymous: the provider receives chess data and your messages, but not the identity of the account they belong to.
Who receives the data. We use one or more of the following providers as processors on our behalf. Which one handles a given request depends on the feature, your region, and operational factors such as availability and capacity:
| Provider | Role | Where it processes | Use of your data for model training |
| OpenAI, L.L.C. |
Primary AI provider |
United States |
Not permitted. We use OpenAI under API terms that do not allow submitted data to be used to train their models. |
| OpenRouter, Inc. |
Routing broker that forwards requests to an upstream model provider |
United States, plus the location of the selected upstream provider |
Not permitted. We configure our OpenRouter account to exclude any upstream provider that may train on submitted data. |
| Hangzhou DeepSeek Artificial Intelligence Co., Ltd. ("DeepSeek") |
Alternative AI provider, where used |
Mainland China |
DeepSeek's own published policy states that it stores personal data in the People's Republic of China and may use it to train and improve its technology. Where we use DeepSeek, we do so under settings that direct it not to use our data for training, and only for users outside the regions listed below. |
Regional routing rule. We do not route AI analysis or coaching data belonging to users in the European Economic Area, the United Kingdom, or Switzerland to any AI provider that processes data in mainland China. For those users, AI requests are handled only by providers processing in jurisdictions covered by an adequacy decision or by appropriate safeguards as described in section 7.
Our commitments to you, whichever provider is used:
- Every AI provider acts as our processor, on our documented instructions, under a written data-processing agreement.
- We do not permit any AI provider to use your data to train or improve its own models, and we do not sell or share this data for advertising.
- We do not send account-identifying information, as described above.
- If we add or change AI providers in a way that materially affects your privacy — including a change in the country of processing — we will update this policy and notify you in-app or on our website before the change takes effect.
Purpose: To generate personalized chess move analysis, coaching conversation, and educational explanations tailored to your selected skill level. The AI coach may perform web searches for chess opening theory, endgame techniques, or strategic concepts to enrich its analysis. These searches use only chess-related terms (e.g., opening names) and never include personal information.
Data retention:
- We may cache analysis results on our own systems temporarily to improve performance and avoid repeat processing.
- AI providers may retain request data for a limited period for abuse monitoring, security, and legal compliance, in accordance with their own published policies linked below. We instruct providers not to retain data for any other purpose.
- Your AI coach memory and chat history are stored by us, not by the AI provider, and are kept until you delete them (see section 8 for post-deletion retention).
- Because AI requests do not carry your account identity, the provider cannot link them to you as an individual.
Your control:
- You must provide explicit consent before using AI analysis or coaching features.
- You can decline AI analysis at any time, and the rest of the app continues to work.
- You can view your stored AI coach memory in Settings → AI Coach Memory, and delete it in Settings → Privacy & Data.
- You can withdraw consent at any time in Settings → Privacy & Data → Reset AI Consent. Withdrawal stops future processing; it does not undo processing already carried out.
Third-party privacy policies:
6b) Advertising
IQ Chess displays advertisements through Google AdMob and its mediation partners. We are committed to user privacy and serve non-personalized ads only.
Ad personalization:
- We serve non-personalized ads only
- Ads are based on contextual information (the app content you're viewing) and general demographics
- Ads are not based on your behavior across other apps or websites
- We do not track you for advertising purposes
Advertising partners:
- Google AdMob (primary ad provider)
- Unity Ads
- Meta Audience Network (Facebook)
- AppLovin
- InMobi
- IronSource
- Chartboost
- Mintegral
- Pangle (ByteDance)
- Vungle
What data may be collected by ad partners: Our advertising partners may collect limited device information such as device model, operating system version, and IP address for the purposes of serving ads and preventing fraud. This data is not used to track you across apps or websites.
Third-party privacy policies:
Ad choices: You can learn more about ad choices and opt-out options for mobile advertising at the Digital Advertising Alliance's AppChoices page.
7) International transfers
We are established in Canada, and our service providers operate in several countries. Your personal information may therefore be transferred to, stored in, and processed in countries other than your own — principally Canada and the United States, and, for some AI processing outside the regions listed below, mainland China. Laws in those countries may differ from those in your country, and public authorities there may in some circumstances be able to access data held by local providers.
If you are in the European Economic Area, the United Kingdom, or Switzerland. We transfer your personal information out of your region only where one of the following applies:
- Adequacy: the destination country benefits from an adequacy decision. Transfers to us in Canada rely on the European Commission's adequacy finding for Canadian private-sector organisations subject to PIPEDA, and on the equivalent UK and Swiss recognitions.
- Standard Contractual Clauses: for other destinations, including the United States, we enter into the European Commission's Standard Contractual Clauses with the recipient, together with the UK International Data Transfer Addendum for UK transfers and the Swiss addendum for Swiss transfers, and we carry out a transfer impact assessment together with supplementary technical and organisational measures where required.
We do not transfer AI analysis or coaching data from these regions to providers processing in mainland China, as stated in section 6a. We do not rely on the Article 49 derogations for routine AI processing.
If you are in Canada. Under PIPEDA and Québec's Law 25, we remain accountable for personal information transferred to service providers outside Québec and Canada. We conduct a privacy impact assessment before such transfers, and we use contractual measures to ensure a level of protection comparable to that required in Québec.
Everywhere else. Where you are outside the regions above, AI analysis and coaching data may be processed by any of the providers listed in section 6a, including providers processing in mainland China, subject to the consent, minimisation, and no-training commitments described in that section.
You may request a copy of the safeguards we rely on for a given transfer by contacting privacy@iqchess.org.
8) Retention
We retain personal information only as long as necessary for the purposes set out in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify information.
Post-deletion retention: When you delete your AI coaching chat history, we retain it in a restricted, non-accessible state for 30 days to comply with applicable legal obligations, resolve disputes, and prevent fraud. After 30 days, the data is permanently and automatically deleted from our systems. During this retention period, the data is not visible to you or used for any purpose other than legal compliance.
9) Your rights
- Access & Portability: request a copy of your data.
- Correction: request updates to inaccurate information.
- Deletion: delete your account or chat history in-app; we will also delete or de-identify associated personal information. Certain data, including AI coaching chat history, may be retained in a restricted state for up to 30 days after deletion for legal, fraud prevention, or dispute resolution purposes, after which it is permanently deleted.
- Withdraw consent: where processing relies on consent, you may withdraw it at any time (this doesn’t affect prior processing).
To exercise rights, contact privacy@iqchess.org. We will verify your request and respond within timeframes required by law.
10) Children
The Services are not directed to children under 13. If we learn a child under 13 provided personal information without verifiable parental consent, we will delete it.
11) Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data (e.g., encryption in transit, access controls, logging). No system is perfectly secure; we cannot guarantee absolute security.
12) Breaches & incidents (Québec Law 25)
We maintain an incident register and will notify the Commission d’accès à l’information (CAI) and affected individuals of confidentiality incidents presenting a risk of serious injury, as required by law.
13) Marketing & CASL
We send marketing emails only with your express consent. You can unsubscribe at any time using the link in the email or by contacting us. Service/transactional messages are not marketing and will continue as needed.
14) Cookies
We use strictly necessary cookies/local storage for authentication and preferences, and limited analytics cookies to understand site usage. You can adjust browser settings to limit cookies, but some features may not work.
15) Third-party links
Our Services may contain links to third-party sites or services. Their privacy practices are governed by their policies, not this one.
16) Changes
We may update this Policy. The “Last updated” date indicates the current version. Material changes will be communicated in-app or on our website.
17) Contact
Privacy questions or requests: privacy@iqchess.org • Mailing: 4736 Saint Jean Blvd., Pierrefonds, QC H9H 4B2, Canada