Privacy Policy
PawnUp · Last updated 16 August 2026
The short version: PawnUp stores your email, your chess, what you told onboarding and anything you send us through the feedback form, so the app can be about you. That is the whole list. It runs no analytics and no crash reporting, it has never sent anyone your name, your email or your chess.com handle, and there is no advertising in it of any kind.
This policy covers the PawnUp mobile app and the website at pawnup.app. PawnUp is made and run by an independent developer in France, who is the data controller for everything described below. Questions, requests, or a complaint: [email protected].
What is in your account
All of it lives in our Supabase database, in rows keyed to your user id. Row level security is switched on for every table, so nobody else's queries can reach your rows.
| What | Why we have it |
|---|---|
| Your email address | It is how you sign in, and how we send you a password reset. |
| Your chess.com username and the games it brought in | Only if you linked an account. It is what the app reviews. |
| Your onboarding answers: a starting rating, a goal, minutes a day | They size the daily plan. |
| Your training: analysed games, puzzle attempts, streaks, progress | It is the product. Without it there is nothing to show you. |
| Anything you send through the feedback form, and an email address only if you typed one into it | So we can fix what you told us about, and reply if you asked for one. The message is stored with the screen you were on, the app version and the platform, which is the part you do not have to describe. The address is never filled in for you: leaving it blank means you do not want a reply, and that is the default. |
For everything above the first row down to your training, the legal basis is performance of the contract you enter by making an account: each of them exists because the app cannot do what you asked it to do without it. Feedback is different and is your consent, given by choosing to send it. You can decline by not using the form, and there is no part of PawnUp that stops working if you never do.
Deleting your account deletes your feedback with the rest of it, addresses included. That is one deletion rather than two lists to keep track of.
Analytics and crash reports: there are none
This version of PawnUp measures nothing about how you use it. No product analytics, no usage events, no screen tracking, no crash or error reporting. Nothing is sent to an analytics company or an error tracker, because the app is not built with the keys that would let it reach one. That is why there is no analytics switch in Settings: a switch that governed nothing would be worse than saying this plainly.
We would rather tell you what that costs us than pretend it is purely a gift. When the app breaks on your phone we do not hear about it, so the way we find out is you telling us through the feedback form in Settings, or by email. If a screen is broken for you, that is the thing that fixes it.
If this ever changes, this page changes first. That is partly automatic and partly a person, and it is worth being exact about which. The website you are reading this on is checked against this page every time it is built, in both directions, and a version of it that collected something this page denies would fail to build at all. The iPhone and Android apps are built on somebody else's servers, where that check has to be run by hand before a release, so for those it is our procedure rather than a machine. We would rather tell you where the seam is than describe a guarantee that is only three quarters true.
What we send to other companies
- Supabase hosts the database and signs you in.
- chess.com is read, never written. The app fetches your public profile and your own game archives. Linking tells them nothing about you.
- Nobody else. No analytics service, no error tracker, no advertising SDK, no attribution network, no session replay, no device identifier, no fingerprinting, no data broker, and nothing sold or shared for anyone else's marketing. The app sends no advertising identifier on any platform, which is also why iOS never shows you a tracking prompt.
Deleting your account
Settings → Account → Delete account. It asks once, then it is done: your rows, your games, your puzzle history and your sign-in are removed. There is no soft delete, no grace period and nothing to email us about first.
Backups roll off within 30 days, which is the one place a copy briefly outlives the deletion. There is nothing else to delete, because there is nowhere else it went.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, withdraw a consent you gave, or complain to your data protection authority. This policy relies on two bases and no others: the contract you enter by making an account, and your consent for the feedback you choose to send. Neither is legitimate interest, so there is no legitimate-interest processing here for you to object to. In France your authority is the CNIL. Deletion is a button in the app; for anything else, email [email protected] and we will answer within a month.
Where the data lives
Supabase is a US company and your data is in its EU region; the game analysis service runs on hardware in France. Where a transfer to the United States happens it rests on the EU Commission's standard contractual clauses.
Children
PawnUp is not directed at children under 13, and we do not knowingly collect anything from one. If you believe a child has made an account, email us and we will delete it.
Retention
Account data stays for as long as the account does, and deleting the account deletes it. There is no second store with a retention period of its own, because nothing is collected anywhere else.
Changes
If this policy changes in a way that affects what we collect, the app will say so rather than quietly updating the date at the top.