Privacy Policy

This Privacy Notice for KL App Labs Ltd ('we', 'us', or 'our') explains how and why we may access, collect, store, use, disclose, and otherwise process personal information when you use Checkmate Chaos and related services (the 'Services').

Checkmate Chaos is a chess game and entertainment application featuring computer play, online multiplayer, player accounts, rankings and leaderboards, puzzles, progression systems, character-based presentation, and optional premium features. Some features may be available without an account through Guest mode.

If you do not agree with this Privacy Notice, please do not use the Services. Questions or privacy requests may be sent to help@kinglapp.com or through https://www.klapps.co.uk/support.

Summary of key points

We collect information according to how you use Checkmate Chaos. Registered users may provide a player name and email address and use password-based or Google authentication. We may also process account identifiers, game activity, rankings, progression, purchase entitlements, device/technical information, and support communications.

We do not knowingly collect sensitive personal information such as racial or ethnic origin, religious beliefs, sexual orientation, biometric data, or health information as part of the ordinary operation of Checkmate Chaos.

Player names are public-facing and may appear to other users during matches and on leaderboards, rankings, game records, or similar gameplay surfaces.

Guest users can use certain features without creating a registered account. Guest progress and preferences are intended to remain on the device and may be lost if app data is cleared, the application is uninstalled, or the device is replaced.

We use third-party providers where necessary to operate the Services, including Supabase for backend/database and authentication functionality, Google for Google sign-in and Google Play services, and RevenueCat for subscription and purchase entitlement management.

1. What information do we collect?

Registered accounts may require a player name/username and email address. We also process authentication and account information needed to create, secure, recover and maintain an account, and information you provide when contacting customer support.

Your chosen player name is intended to be public and may be visible to other Checkmate Chaos users. Do not use a player name containing personal information you do not want displayed publicly.

Where email/password authentication is used, authentication is handled through our authentication infrastructure. We do not intend to store or make users' passwords available to KL App Labs personnel in readable plain-text form. Authentication systems may process credentials, session tokens, account identifiers, sign-in timestamps, verification status and related security information.

If you choose 'Continue with Google', Google and our authentication provider may process information necessary to authenticate you. Information made available to Checkmate Chaos depends on the permissions used by the sign-in implementation and may include your email address, provider/account identifier and profile information made available within those permissions.

Guest mode may be used without providing an email address or creating a permanent account. Guest progress and preferences are intended to be stored locally on the device and may not be recoverable after uninstalling the app, clearing app data, resetting or replacing the device, or otherwise losing local data.

Gameplay and profile data may include chess games and moves; results; matchmaking and opponent/game identifiers; ratings and rankings; leaderboard position; Chaos Points; titles, achievements and streaks; puzzle and Academy progress; game modes and time controls; and fair-play, moderation, anti-cheat and security information.

Optional purchases and subscriptions may be processed through Google Play Billing. KL App Labs does not directly collect or store payment card numbers, bank account details or card security codes. RevenueCat may process app/account identifiers, product and entitlement information, transaction or receipt information and related technical information needed to determine purchase status.

Depending on the production build and services used, technical information may include IP address, device and application identifiers, device model, operating system and version, app version, language, approximate country or region derived from technical information, network information, crash/diagnostic information, timestamps and feature usage.

2. How do we use your information?

We process information to create and administer accounts; authenticate and recover users; provide Guest mode; provide chess games and online matchmaking; maintain ratings, rankings, leaderboards, progression, achievements and game history; provide puzzles and learning features; process purchase entitlements; respond to support requests; maintain security; investigate cheating, fraud and abuse; diagnose errors; improve reliability; comply with legal obligations; resolve disputes; and enforce our agreements.

3. Legal bases for processing

Where UK GDPR, EU GDPR or similar legislation applies, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations and, in exceptional circumstances, vital interests. Legitimate interests may include operating and improving the Services, securing accounts, preventing abuse and understanding service performance where those interests are not overridden by your rights.

4. When and with whom do we share information?

We may disclose information to service providers necessary to operate Checkmate Chaos. These may include Supabase for backend infrastructure, database functionality, authentication and account management; Google for Google sign-in, Google Play distribution and billing, and other Google services actually integrated into the production application; and RevenueCat for purchase, subscription and entitlement management where enabled.

We may also disclose information where required by law, to protect rights and security, investigate misuse, enforce agreements, or in connection with a merger, acquisition, financing, restructuring or sale of all or part of the business, subject to applicable law.

5. Supabase and account infrastructure

Checkmate Chaos uses Supabase infrastructure for account and backend functionality. Supabase Auth can associate a permanent user with identifying information such as an email address or third-party identity and assigns a unique user identifier. Account authentication and application data may be connected through that identifier.

We use account identifiers to associate appropriate game/profile data with the correct account and to control access to protected information. Access controls and other technical safeguards may be used to restrict users to information they are authorised to access.

6. Online multiplayer, public profiles and leaderboards

Checkmate Chaos includes or is intended to include online and competitive features. Your player name, rating, rank, titles, leaderboard position, game results and certain game-related statistics may be visible to other users. Information deliberately displayed through these features should be treated as public within the Checkmate Chaos service.

Your email address and authentication credentials are not intended to be displayed publicly through leaderboards or matches.

7. Fair play, safety and moderation

We may process gameplay, account and technical information where reasonably necessary to protect users and the integrity of the Services. This may include investigating suspected cheating, automated play, manipulation of rankings, abuse, fraudulent activity, attempts to bypass restrictions or other violations of our rules.

Where permitted by applicable law and our Terms, accounts may be warned, restricted, suspended, reset or terminated following investigation. We may retain limited records of enforcement or security incidents where reasonably necessary to prevent repeated abuse, establish or defend legal claims, or comply with law.

8. International data transfers

KL App Labs Ltd is based in Scotland, United Kingdom. Some service providers may process or store information in countries other than your own. Where personal information is transferred internationally, we will take appropriate steps required by applicable data protection law, which may include adequacy regulations, contractual safeguards or other lawful transfer mechanisms.

The actual hosting regions and transfer arrangements applicable to third-party providers depend on the configuration of those services and may change over time.

9. How long do we keep information?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, including providing the Services, maintaining accounts, complying with legal obligations, resolving disputes, preventing fraud or abuse and enforcing agreements.

Account-related game and profile information may be retained while an account remains active. When an account is deleted, associated personal information will be deleted or anonymised as required by applicable law, except where limited information must be retained for legitimate legal, accounting, security, fraud-prevention, dispute-resolution or enforcement purposes.

Guest information stored only on the user's device generally remains until it is deleted by the user, application data is cleared, the application is uninstalled, or the device/storage is otherwise erased. Third-party providers may retain information according to their own legal obligations and retention policies.

10. How do we keep information safe?

We use reasonable technical and organisational measures designed to protect personal information. These may include authentication controls, access restrictions, secure communications, database access controls and service-provider security features. No electronic transmission or storage system can be guaranteed to be completely secure, and users should protect their login credentials and devices.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing, obtain a portable copy of information in certain circumstances, and withdraw consent where processing relies on consent.

To exercise a privacy right, contact help@kinglapp.com or visit https://www.klapps.co.uk/support. We may need to verify your identity before completing certain requests. UK users may also complain to the Information Commissioner's Office (ICO).

12. Account deletion

Users who create a Checkmate Chaos account may request deletion of their account and associated personal data. Checkmate Chaos will provide a readily discoverable account-deletion route within the application. We will also provide an external method of requesting account deletion through the KL App Labs website.

Following a valid account-deletion request, we will delete the account and associated personal information as required by applicable law. Merely disabling or freezing an account is not treated as deletion. Limited information may be retained where necessary for legal obligations, security, fraud prevention, dispute resolution, financial recordkeeping, or the establishment, exercise or defence of legal claims.

The external Checkmate Chaos account-deletion webpage is available at https://klapps.co.uk/checkmate-chaos/delete-account.

13. Children's privacy

Checkmate Chaos is not directed to children below the minimum age permitted to use the Services under applicable law. We do not knowingly collect personal information from children in violation of applicable privacy legislation. If you believe that a child has provided personal information contrary to applicable requirements, contact help@kinglapp.com so that we can investigate and take appropriate action.

Any age rating, content restrictions, parental controls or age-gating used in the application should be read together with this Privacy Notice and the applicable Google Play listing.

14. Subscriptions and billing

Where Checkmate Chaos offers subscriptions or other digital purchases, purchases are processed through Google Play Billing and are subject to Google's applicable terms and policies. Subscriptions may automatically renew unless cancelled through the user's Google Play account before the applicable renewal date. Uninstalling Checkmate Chaos does not itself cancel an active subscription.

Refund requests are administered in accordance with Google Play's applicable policies. KL App Labs may change available plans or pricing from time to time. Where required, notice of subscription price changes will be provided through Google Play or another applicable distribution channel.

15. Do-not-track and similar signals

Some browsers and operating systems provide Do-Not-Track or similar signals. There is not currently a universally accepted standard governing how all applications must respond to these signals. Where applicable law creates a mandatory recognised mechanism, we will comply with applicable requirements.

16. United States privacy rights

Residents of certain US states may have additional privacy rights under applicable state law, including rights to know or access personal data, correct inaccuracies, request deletion, obtain a copy of certain data, and opt out of certain processing where applicable. These rights are subject to statutory limitations and exceptions.

KL App Labs does not intend to sell personal information for monetary consideration. If our practices change in a manner that creates additional statutory disclosure or opt-out obligations, this Privacy Notice will be updated accordingly.

Requests may be made through https://www.klapps.co.uk/support or help@kinglapp.com. We may request information reasonably necessary to verify a request.

17. Third-party services

Third-party services used by Checkmate Chaos operate under their own terms and privacy practices. Their processing may include information necessary to provide authentication, infrastructure, billing, subscriptions, security or other integrated functionality.

• Google Privacy Policy: https://policies.google.com/privacy
• Supabase Privacy Policy: https://supabase.com/privacy
• RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

18. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to Checkmate Chaos, our service providers, legal requirements or data practices. The date at the top indicates when it was last updated. Where appropriate or legally required, we may provide additional notice of material changes.

19. Contact us

20. Reviewing, correcting or deleting your data

Subject to applicable law, you may request access to personal information we hold about you, ask us to correct inaccurate information, or request deletion of information. Registered users may also request deletion of their Checkmate Chaos account as described in Section 12.

Requests can be submitted through https://www.klapps.co.uk/support or by email to help@kinglapp.com.