Privacy Policy

This Privacy Notice for KL App Labs Ltd ('we', 'us', or 'our') explains how and why we may access, collect, store, use, disclose, and otherwise process personal information when you use Checkmate Chaos and related services (the 'Services').

Checkmate Chaos is a chess game and entertainment application featuring computer play, online multiplayer, player accounts, rankings and leaderboards, puzzles, progression systems, character-based presentation, and optional premium features. Some features may be available without an account through Guest mode.

If you do not agree with this Privacy Notice, please do not use the Services. Questions or privacy requests may be sent to help@kinglapp.com or through https://www.klapps.co.uk/support.

Summary of key points

We collect information according to how you use Checkmate Chaos. Registered users may provide a player name and email address and use password-based or Google authentication. We may also process account identifiers, game activity, rankings, progression, purchase entitlements, device/technical information, and support communications.

We do not knowingly collect sensitive personal information such as racial or ethnic origin, religious beliefs, sexual orientation, biometric data, or health information as part of the ordinary operation of Checkmate Chaos.

Player names are public-facing and may appear to other users during matches and on leaderboards, rankings, game records, or similar gameplay surfaces.

Guest users can use certain features without creating a registered account. Local progress and preferences may be included in Android backup or device transfer, depending on your device settings and app version. They may be lost if app data is cleared, the application is uninstalled, or no usable backup is available.

We use third-party providers where necessary to operate the Services, including Supabase for backend/database and authentication functionality, Google for Google sign-in and Google Play services, RevenueCat for subscription and purchase entitlement management, and Google AdMob for advertising in ad-supported versions. Guest mode does not prevent advertising or purchase-service data from being processed.

1. What information do we collect?

Registered accounts may require a player name/username and email address. We also process authentication and account information needed to create, secure, recover and maintain an account, and information you provide when contacting customer support.

Your chosen player name is intended to be public and may be visible to other Checkmate Chaos users. Do not use a player name containing personal information you do not want displayed publicly.

Where email/password authentication is used, authentication is handled through our authentication infrastructure. We do not intend to store or make users' passwords available to KL App Labs personnel in readable plain-text form. Authentication systems may process credentials, session tokens, account identifiers, sign-in timestamps, verification status and related security information.

If you choose 'Continue with Google', Google and our authentication provider may process information necessary to authenticate you. Information made available to Checkmate Chaos depends on the permissions used by the sign-in implementation and may include your email address, provider/account identifier and profile information made available within those permissions.

Guest mode may be used without providing an email address or creating a permanent account. Game progress and preferences are stored locally; Android may back up or transfer eligible local files according to your device settings. The updated backup configuration excludes sign-in credentials, cached account and online-session data, profile photos and purchase caches from new backups and device transfers. Older app versions or existing backups may behave differently. A restored device may require sign-in, renewed advertising choices and purchase restoration.

Gameplay and profile data may include chess games and moves; results; matchmaking and opponent/game identifiers; ratings and rankings; leaderboard position; Chaos Points; titles, achievements and streaks; puzzle and Academy progress; game modes and time controls; and fair-play, moderation, anti-cheat and security information.

Optional purchases and subscriptions may be processed through Google Play Billing. KL App Labs does not directly collect or store payment card numbers, bank account details or card security codes. RevenueCat processes app/account identifiers, product and entitlement information, purchase history, transaction or receipt information and related technical information to validate and restore purchases and provide subscription analytics. The purchase service may create an anonymous app-user identifier before you buy anything. Purchase records are not processed only temporarily in memory; they may be retained to manage and restore entitlements and meet recordkeeping requirements.

Depending on the production build and services used, technical information may include IP address, device and application identifiers, device model, operating system and version, app version, language, approximate country or region derived from technical information, network information, crash/diagnostic information, timestamps and feature usage.

2. How do we use your information?

We process information to create and administer accounts; authenticate and recover users; provide Guest mode; provide chess games and online matchmaking; maintain ratings, rankings, leaderboards, progression, achievements and game history; provide puzzles and learning features; process purchase entitlements; respond to support requests; maintain security; investigate cheating, fraud and abuse; diagnose errors; improve reliability; comply with legal obligations; resolve disputes; and enforce our agreements.

2A. Advertising and privacy choices

Ad-supported versions use Google AdMob. Its Mobile Ads software can send Google your IP address (from which a general location may be estimated), advertising ID, app-set or other device identifiers, ad and app interactions, and technical performance information. Google uses this information to deliver and measure advertising, analyse performance, and detect fraud. This does not require access to your GPS location or phone address book.

Google's consent service presents privacy choices where required and available. Where an advertising privacy-options control is offered in Settings, you can revisit those choices. You can also use Android's advertising-ID controls. Declining personalised advertising does not necessarily stop all advertising-related processing: limited or non-personalised ads may still involve technical, measurement and fraud-prevention data. Availability of ads and privacy controls can vary by region and build.

Read how Google uses information from apps that use its services and Google's Privacy Policy. Contact us using the details below if you need help with your choices.

3. Legal bases for processing

Where UK GDPR, EU GDPR or similar legislation applies, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations and, in exceptional circumstances, vital interests. Legitimate interests may include operating and improving the Services, securing accounts, preventing abuse and understanding service performance where those interests are not overridden by your rights.

4. When and with whom do we share information?

We may disclose information to service providers necessary to operate Checkmate Chaos. These may include Supabase for backend infrastructure, database functionality, authentication and account management; Google for Google sign-in, Google Play distribution and billing, and other Google services actually integrated into the production application; and RevenueCat for purchase, subscription and entitlement management where enabled. In ad-supported versions, advertising and associated technical information is also shared with Google AdMob as explained in Section 2A. Google may process this data under its own privacy terms, not solely as a provider acting on our instructions.

We may also disclose information where required by law, to protect rights and security, investigate misuse, enforce agreements, or in connection with a merger, acquisition, financing, restructuring or sale of all or part of the business, subject to applicable law.

5. Supabase and account infrastructure

Checkmate Chaos uses Supabase infrastructure for account and backend functionality. Supabase Auth can associate a permanent user with identifying information such as an email address or third-party identity and assigns a unique user identifier. Account authentication and application data may be connected through that identifier.

We use account identifiers to associate appropriate game/profile data with the correct account and to control access to protected information. Access controls and other technical safeguards may be used to restrict users to information they are authorised to access.

6. Online multiplayer, public profiles and leaderboards

Checkmate Chaos includes or is intended to include online and competitive features. Your player name, rating, rank, titles, leaderboard position, game results and certain game-related statistics may be visible to other users. Information deliberately displayed through these features should be treated as public within the Checkmate Chaos service.

Your email address and authentication credentials are not intended to be displayed publicly through leaderboards or matches.

When you use online features, we store match moves and results, matchmaking records, ratings, friend requests and relationships, blocks, and predefined safety-report reasons. Friends information is an in-game social graph; we do not read your phone's address book. Character reactions use selections from a fixed list rather than free-text chat. These records support online play, player controls and abuse prevention. Choosing a local game does not send those local moves to the online service.

7. Fair play, safety and moderation

We may process gameplay, account and technical information where reasonably necessary to protect users and the integrity of the Services. This may include investigating suspected cheating, automated play, manipulation of rankings, abuse, fraudulent activity, attempts to bypass restrictions or other violations of our rules.

Where permitted by applicable law and our Terms, accounts may be warned, restricted, suspended, reset or terminated following investigation. We may retain limited records of enforcement or security incidents where reasonably necessary to prevent repeated abuse, establish or defend legal claims, or comply with law.

8. International data transfers

KL App Labs Ltd is based in Scotland, United Kingdom. Some service providers may process or store information in countries other than your own. Where personal information is transferred internationally, we will take appropriate steps required by applicable data protection law, which may include adequacy regulations, contractual safeguards or other lawful transfer mechanisms.

The actual hosting regions and transfer arrangements applicable to third-party providers depend on the configuration of those services and may change over time.

9. How long do we keep information?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, including providing the Services, maintaining accounts, complying with legal obligations, resolving disputes, preventing fraud or abuse and enforcing agreements.

Account-related game and profile information may be retained while an account remains active. When an account is deleted, associated personal information will be deleted or anonymised as required by applicable law, except where limited information must be retained for legitimate legal, accounting, security, fraud-prevention, dispute-resolution or enforcement purposes.

Guest information stored only on the user's device generally remains until it is deleted by the user, application data is cleared, the application is uninstalled, or the device/storage is otherwise erased. Third-party providers may retain information according to their own legal obligations and retention policies.

10. How do we keep information safe?

We use reasonable technical and organisational measures designed to protect personal information. These may include authentication controls, access restrictions, secure communications, database access controls and service-provider security features. No electronic transmission or storage system can be guaranteed to be completely secure, and users should protect their login credentials and devices.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing, obtain a portable copy of information in certain circumstances, and withdraw consent where processing relies on consent.

To exercise a privacy right, contact help@kinglapp.com or visit https://www.klapps.co.uk/support. We may need to verify your identity before completing certain requests. UK users may also complain to the Information Commissioner's Office (ICO).

12. Account deletion

Users who create a Checkmate Chaos account may request deletion of their account and associated personal data. The account-deletion link in Settings opens our website request route. You can also use that route directly without reinstalling the app. Requests are handled by our support team and may require verification that you own the account; following the link is not an instant or automatic deletion.

Following a valid account-deletion request, we will delete the account and associated personal information as required by applicable law. Merely disabling or freezing an account is not treated as deletion. Limited information may be retained where necessary for legal obligations, security, fraud prevention, dispute resolution, financial recordkeeping, or the establishment, exercise or defence of legal claims.

The external Checkmate Chaos account-deletion webpage is available at https://klapps.co.uk/checkmate-chaos/delete-account.

13. Children's privacy

Checkmate Chaos is not directed to children below the minimum age permitted to use the Services under applicable law. We do not knowingly collect personal information from children in violation of applicable privacy legislation. If you believe that a child has provided personal information contrary to applicable requirements, contact help@kinglapp.com so that we can investigate and take appropriate action.

Any age rating, content restrictions, parental controls or age-gating used in the application should be read together with this Privacy Notice and the applicable Google Play listing.

14. Subscriptions and billing

Where Checkmate Chaos offers subscriptions or other digital purchases, purchases are processed through Google Play Billing and are subject to Google's applicable terms and policies. Subscriptions may automatically renew unless cancelled through the user's Google Play account before the applicable renewal date. Uninstalling Checkmate Chaos does not itself cancel an active subscription.

Refund requests are administered in accordance with Google Play's applicable policies. KL App Labs may change available plans or pricing from time to time. Where required, notice of subscription price changes will be provided through Google Play or another applicable distribution channel.

15. Do-not-track and similar signals

Some browsers and operating systems provide Do-Not-Track or similar signals. There is not currently a universally accepted standard governing how all applications must respond to these signals. Where applicable law creates a mandatory recognised mechanism, we will comply with applicable requirements.

16. United States privacy rights

Residents of certain US states may have additional privacy rights under applicable state law, including rights to know or access personal data, correct inaccuracies, request deletion, obtain a copy of certain data, and opt out of certain processing where applicable. These rights are subject to statutory limitations and exceptions.

KL App Labs does not intend to sell personal information for monetary consideration. Advertising disclosures and transfers described in Section 2A may fall within broader definitions of sale, sharing or targeted advertising under some state laws. Where applicable, use the advertising privacy choices offered in the app or contact us to exercise your opt-out rights.

Requests may be made through https://www.klapps.co.uk/support or help@kinglapp.com. We may request information reasonably necessary to verify a request.

17. Third-party services

Third-party services used by Checkmate Chaos operate under their own terms and privacy practices. Their processing may include information necessary to provide authentication, infrastructure, billing, subscriptions, advertising, measurement, security or other integrated functionality.

• Google Privacy Policy: https://policies.google.com/privacy
• Supabase Privacy Policy: https://supabase.com/privacy
• RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

18. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to Checkmate Chaos, our service providers, legal requirements or data practices. The date at the top indicates when it was last updated. Where appropriate or legally required, we may provide additional notice of material changes.

19. Contact us

20. Reviewing, correcting or deleting your data

Subject to applicable law, you may request access to personal information we hold about you, ask us to correct inaccurate information, or request deletion of information. Registered users may also request deletion of their Checkmate Chaos account as described in Section 12.

Requests can be submitted through https://www.klapps.co.uk/support or by email to help@kinglapp.com.