RUCS privacy policy
This policy explains which data RUCS (the website and the Android and iOS apps) processes, why, and your rights.
Controller
KONEKTOR METAVERSE S.L., B44604874, C/ Ausiàs March, 142, 2.º 4.ª, 08013 Barcelona, España. Privacy contact: chess@rucs.app.
Data we process
Account: an internal identifier; if you save your progress, your email and the Google or Apple identifier you sign in with (Apple lets you hide your email).
Learning: progress per skill, lessons, exercises, games against RUC, RUCS Elo, streaks, XP and preferences (language, sound, board look).
Feedback you send: the message, any screenshots you attach and technical data (page, device, browser, version).
App usage (only if you consent): pseudonymous events, IP address to estimate approximate location (country and city), and possible session recordings with typed input masked, to improve the product. We do not send your email or name to PostHog.
Reminders (only if you turn them on in the app): the device notification token and the chosen time.
Purposes and legal basis
Providing the service (your account, progress, the League, the reminders you ask for): performance of the service you request.
Usage analytics: your consent, which you can withdraw in Settings.
Handling your feedback and keeping the service secure: legitimate interest.
We do not sell your data or use it for advertising or cross-app tracking.
Providers
Supabase (database and sign-in), Vercel (web hosting), PostHog in the EU (analytics, only with consent), Resend (sending feedback to the team), Fly.io in Madrid (chess engine: receives positions only, no personal data), Google and Apple (if you sign in with them).
Some providers may process data outside the European Economic Area under GDPR safeguards (standard contractual clauses).
How long
Your account, progress, games, preferences and reminders are deleted when you delete your account. Feedback messages and screenshots are also deleted when you delete your account. Until then, screenshots are deleted after 90 days and messages 12 months after the request is closed (a daily process applies this).
PostHog (only with consent): analytics events are kept for up to 1 year and session recordings for up to 30 days. Account deletion does not automatically delete these pseudonymous events; you can request their deletion at chess@rucs.app.
Supabase Pro database backups may retain data for up to 7 additional days until rotation and are used only for disaster recovery. Email deletion requests are completed within 30 days.
Your rights
You can delete your account and all its data in the app: Profile → Account → Delete account (or at rucs.app/account/delete).
To access, rectify, object, restrict processing or request portability, write to chess@rucs.app. You can complain to the Spanish Data Protection Agency (aepd.es).
Age
RUCS is meant for people aged 13 and over. In Spain, processing the data of children under 14 requires their parents’ or guardians’ consent.
Changes
If we change this policy we will tell you in the app. Last updated date above.