Privacy policy

Controller and scope

Ajedrez de Silicio E.I.R.L., Peru, is responsible for data processed for Ajedrez de Silicio for Android, presented as Silicon Chess in English. Privacy contact: gpacheco@ajedrezdesilicio.com. This policy applies to the Android app, including its testing tracks; it does not replace the policy for your separate academy account.

Version date: September 23, 2026. You can read this policy and request deletion of your data without installing the app, signing in or paying.

Your board stays on your device

The free core works without an account. You work on and store your PGNs, positions, comments, drawings and library locally. Buying Premium or signing in does not automatically upload your library to our servers. Stockfish 19 analysis runs on your device.

When opening, saving, sharing or printing, you choose the document and destination through Android. If you choose Drive or another app, that provider receives the selected content under its own terms. We do not request general access to your Drive. Android backups and device transfers depend on your settings and are separate from synchronization with our servers. Your access session is encrypted and stored in an area excluded from those backups.

Optional sign-in, demo and academy

Buying or restoring Premium does not require creating a password or confirming an email. A technical profile in Supabase uses a random identifier and an authenticated session. These data are pseudonymous, not necessarily anonymous. Google Play handles payment; we do not receive your Google password or card details.

If you choose Google sign-in to request the demo, Supabase receives the identifier, verified email and profile data included by Google in that identity, which may include your name and profile photo. Signing in does not start the demo: you must request and confirm it. It lasts 24 hours, requires no card and does not automatically become a subscription. We also store your language and the data needed to authenticate you and check your access validity.

If you sign in through the academy, we check your verified identity, role and benefit validity. We do not copy your academy password or payment history. The benefit allows two installations. We store a random installation identifier, a hash of its credential, the model and activity/removal dates; we do not use IMEI, serial numbers or advertising identifiers for this limit. Offline permission lasts at most 24 hours and does not exceed the known expiry. Deleting only your Android profile does not delete your academy account or reset its device limits.

Purchases and fraud prevention

We process purchase identifiers and tokens, product, plan, subscription status and dates to grant Premium, restore it and handle renewals, incidents and deletion. To restore a purchase, use the same paying account in Play Store. The identity chosen for the demo or academy need not match that account.

Play Integrity checks the authenticity of the app and installation. Google processes app metadata, device integrity signals, licensing status and a request hash. Our server checks the result to prevent purchases being assigned to the wrong person. We do not use this check for advertising.

Book, search and dictation

Book and game queries transmit the data needed to respond, such as a chess position, filters, book ranges or a game identifier, together with access verification. This does not send your entire library. Hosting services also receive technical connection data such as IP address, date, path, status and request errors.

Microphone access is requested only when you choose dictation. The recognition service configured on Android may send your voice to its provider for online processing. Silicon Chess does not store recordings or send them to its own servers. Recognized text is used to build PGN moves. You can stop dictation and revoke the permission in Android. Voice service practices and availability depend on your device and provider.

Purposes and providers

We use data to provide the functions you request, manage access and subscriptions, prevent fraud and abuse, diagnose service failures, handle your requests and comply with legal obligations. The app contains no ads or advertising trackers.

Supabase provides authentication, database and server functions. HostingLabs hosts chess services and delivers transactional email; Google Workspace may serve as email fallback and customer support. Cloudflare distributes resources and queries. Google Play manages purchases and integrity checks. Google provides optional identification, and your configured voice provider may process dictation.

Providers receive the data needed for their role. Your account or library is not made publicly accessible. Files you voluntarily share go to your chosen destination. Disclosures required by law may occur. These services may process data outside Peru; locations and safeguards depend on the provider and service. You can request information about the providers and safeguards applicable to your data.

Retention

We retain identity and access status while you use the account or until its deletion is handled, except for the limited records described below. Receipt of a request does not mean deletion is complete.

Demo: the protected email hash expires 12 months after the start and is deleted during the next hourly cleanup. It prevents repeated demos; it contains no plaintext email, password, games or recordings. Deleting and recreating an account does not extend that period.

Academy: installation records expire after 180 days without activity or 90 days after removal; removal history expires after 30 days. Cleanup is daily. These records are linked to your academy account benefit.

After deletion, the minimum technical purchase token is kept separately from the deleted identity until 60 days after confirmed final expiry and removed during the next daily cleanup. Full Google responses and notifications expire after 7 days; their minimum metadata after 30 days. If expiry cannot be confirmed or a deletion incident exists, the case is reviewed before necessary information is destroyed.

The minimum deletion receipt is retained for 12 months from completion to document handling and prevent improper restoration. Support content is limited to what is necessary to resolve the case; our working retention period is 90 days from closure. We do not request passwords, codes, purchase tokens or card details by email.

Completed maintenance logs are cleaned up after 7 days for successful runs and 30 days for errors. Our email queue content is removed after delivery or maintenance following expiry; completed delivery metadata expires after 7 days. These periods do not describe every internal copy held by providers.

Provider backups and internal logs are not erased instantly when an account is deleted: they follow the providers' cycles, obligations and erasure procedures. We do not promise an unverified universal maximum for those copies. When restoring information under our control, deletions and expiries occurring after the backup must be reapplied. A legal obligation or claim may justify retaining specific records for the applicable period; the scope is limited and the entire account is not retained by default.

Requests, deletion and your rights

You can request deletion under Account and Premium → Account, privacy and help → Request deletion of my Android data, or through the external page linked below. Ownership is checked proportionately. You do not need an Android password if you never created one. If you lost your former access, explain this so we can review another secure verification method.

Our target is to reply within 2 business days and complete the request within 7 calendar days from receipt. If ownership verification is needed or an incident arises, we will inform you without artificially restarting the deadline. Applicable legal time limits will be respected. We will confirm the outcome and any data that must be retained, with the reason.

Deleting your Android account does not cancel a Google Play subscription, request a refund or delete your academy account. You can cancel the subscription separately in Google Play. Local, exported and shared files are deleted on the device or destination where you saved them.

Write to the privacy contact to request access, correction, deletion, objection or other rights available to you, or to withdraw consent where it is the basis of processing. Providing the requested service, preventing fraud and legal obligations may justify processing that does not rely exclusively on consent. You may contact the competent data protection authority; in Peru, the Autoridad Nacional de Protección de Datos Personales.

Security and audience

We use encrypted connections for account services and online queries. Server access is limited by identity and purpose; administrative credentials are not part of the app. No system guarantees absolute security.

The app is intended for teenagers and adults and is not marketed to children under 13. If you have not reached the age required in your country to consent to processing or enter a subscription, ask your parent or guardian to assist. The store content rating does not replace those requirements. Contact us if you identify improperly processed data about a child.

We will publish changes with their date and communicate material changes where appropriate. This policy does not replace consent required for a new purpose.

Optional privacy code

If your version offers a privacy code for purchases without email, you can generate it voluntarily. It only verifies a deletion request on our website; it cannot sign you in, restore purchases or cancel Google Play. Anyone holding the code can request deletion of that Android access, so keep it private.

We store only its cryptographic hash linked to the Android profile. It expires in 365 days; generating another replaces the previous one. Expired unused codes are removed during daily cleanup. When a request is confirmed, the hash is removed and the minimum verification link remains until deletion is processed; afterwards only the minimum receipt is retained for the 12 months stated above. The app does not retain the readable code: you choose where to save its file. If you do not have a code, you can request help by email without reinstalling or paying.