Privacy Policy

Effective date: 21 April 2026 · Last updated: 21 April 2026

GeKiGa Studio ("we", "us", "our") operates the ChezBot mobile application and related services (collectively the "Service"). This policy explains what information the Service collects, how it is used, and the choices you have. By installing or using the Service you agree to this policy.

1. Information we collect

Gameplay and device data — board positions (FEN), moves, puzzle progress, locale, device model, OS version, and crash diagnostics. This is used to operate and improve the Service.
AI analysis requests — when you ask ChezBot to explain a move, the position and move metadata are sent to our backend and to Cloudflare Workers AI / Stockfish analysis providers. Requests are not tied to your Apple ID and are not used to train public models.
Subscription and purchase data — handled by Apple's App Store. We receive a receipt-level transaction identifier so we can validate entitlements. We never receive your payment card or full Apple ID.
Advertising identifiers — if you grant permission through Apple's App Tracking Transparency (ATT) prompt, Google AdMob may access the IDFA to serve personalised ads. If you deny permission, non-personalised ads are shown instead. You can change this at any time in Settings › Privacy & Security › Tracking.
Diagnostics — Firebase Crashlytics collects anonymised crash stack traces and basic device metrics to help us fix bugs.

2. How we use your information

Operate core features (lessons, puzzles, game analysis, AI coaching).
Validate in-app subscriptions and unlock premium content.
Display advertising inside free features (banner, interstitial, rewarded, native, app-open formats).
Investigate crashes and improve stability.
Comply with legal obligations.

3. Third-party services

The Service integrates the following providers. Each has its own privacy policy:

Apple App Store & In-App Purchase — apple.com/legal/privacy
Google AdMob — policies.google.com/privacy
Google Firebase (Crashlytics) — firebase.google.com/support/privacy
Cloudflare (Workers, Workers AI, KV) — cloudflare.com/privacypolicy
Stockfish analysis upstream (stockfish.online) — board positions only, no personal data.

4. Data retention

Operational logs (e.g. failed-move analysis payloads stored in Cloudflare KV) are retained for up to 90 days for debugging and then deleted. Advertising identifiers are retained only as long as needed by the ad networks listed above. Anonymous crash reports are retained for up to 12 months.

5. Children's privacy

The Service is rated for general audiences. We do not knowingly collect personal information from children under 13 (or the equivalent age in your jurisdiction). Features that involve out-of-app links, ads, or purchases are gated behind a parental-access screen. If you believe a child has provided us with personal information, contact us and we will delete it.

6. Your rights

Depending on your location (EEA, UK, California, Brazil, etc.) you may have rights to access, correct, delete, or export your data, to object to processing, or to withdraw consent. To exercise any of these rights, email support@gekigastudio.net. We respond within 30 days.

7. Security

Data in transit is protected by TLS. Backend services run on Cloudflare Workers with access limited to the GeKiGa Studio team. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

8. International transfers

Our backend runs on Cloudflare's global network. Your requests are served by the nearest region and may transit through data centres outside your country. Cloudflare operates under the EU Standard Contractual Clauses where applicable.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app and the "Last updated" date above will change. Continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact

GeKiGa Studio · support@gekigastudio.net · gekigastudio.net