Privacy Policy

1. Information we collect

• Coach account: name, email address, and authentication details.
• Students: a display name the coach enters, and an optional parent/guardian contact email. Students do not create their own login — they join through an invite link.
• Activity: lessons, games and moves, tournament pairings and results, chess ratings, puzzle progress, and chat messages within the Service.
• Live media: camera and microphone streams during lessons and tournaments are transmitted in real time so participants can see and hear each other. We do not record these streams by default.
• Technical: basic device and usage data (such as approximate page views and visits) for reliability and product analytics, and a small number of cookies (see below).

2. How we use information

• to provide the Service — run lessons, pair tournaments, sync boards and clocks, and connect video;
• to send transactional emails such as invitations, homework notifications, and lesson recaps;
• to keep the Service secure and to investigate misuse;
• to understand and improve how the Service is used.

3. Children's privacy (including COPPA)

The Service is used by minors through their coach. Children do not create their own accounts and do not provide information to us directly — a coach enters a student's display name, optional contact email, and (optionally) date of birth, and invites them.

For children under 13 in the United States, the Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information. We rely on the coach (the student's school or educator) to obtain that consent, or to provide it on the parent's behalf for educational use, and the coach must affirm this when adding a student. We collect only the limited information needed for the student to learn and play, and we do not condition participation on more information than is reasonably necessary.

We do not use children's personal information for behavioral advertising, and we do not sell it. A parent or guardian may, at any time, ask the coach or contact us to review the information collected about their child, refuse further collection or use, or request its deletion. We will act on verified requests promptly.

4. Service providers we use

We rely on a small set of trusted providers to operate the Service. They process data only to provide their service to us:

• Supabase — database and authentication (stores account and activity data);
• LiveKit — real-time video and audio transport;
• Vercel — application hosting and privacy-friendly usage analytics;
• Resend — transactional email delivery;
• a third-party chess engine API (chess-api.com / stockfish.online) — receives board positions (FEN) to compute analysis when you use “Analyze with Stockfish”; no account data is sent;
• a payment provider — only if and when paid plans are used.

5. Cookies

We use a small number of cookies: a session cookie that keeps you signed in, and preference cookies that remember your chosen language and light/dark theme. Analytics is privacy-friendly and does not use advertising cookies or sell your data.

6. Data retention

We keep information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer period is required by law.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Our providers may process data in countries other than yours. Where that happens, we rely on those providers' safeguards for such transfers.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. To exercise these rights — or for a student, to have a coach or guardian do so — contact us using the details below.

10. Changes to this Policy

We may update this Policy. When we make material changes, we will update the date above and, where appropriate, notify account holders.

Contact

To ask about this Policy or exercise a privacy right, email us at privacy@coachmate.lat.