Privacy Policy

1. Who is responsible

The controller for Backgammon AI Coach is Computer Force SRL, Str. Gheorghe Lazăr nr. 3, 300078 Timișoara, Romania, registered under J35/1824/1994, VAT ID RO5833419 ("Computer Force", "we", "us").

Privacy or data-rights requests may be sent to Contact form or by post to that address, marked Backgammon AI Coach — Privacy. Product-help routes are described on our Support page.

2. Data stored on your device

The app can store onboarding choices, skill level and learning goals, appearance and accessibility settings, active and completed games, dice and move journals, local match history, coaching results, course and lesson progress, practice positions, privacy choices, and a pseudonymous app identity used to preserve coaching quotas and subscription access.

This information remains on the device unless a feature described below sends a bounded request. Local game and coaching records remain until you delete them with the in-app controls or clear the app's data. Some platform-protected identity and purchase evidence may survive an iOS reinstall so that access can be restored safely.

3. Remote coaching and analysis

When you explicitly request remote analysis, a hint, an explanation, or generated practice, the app may send the current canonical board position, dice, score and cube context, candidate or played move, teaching level, language, a pseudonymous identifier, entitlement information, and limited technical metadata needed to deliver and protect the request.

The service may use a specialist backgammon engine to evaluate positions and OpenAI to turn verified game facts into an explanation. Language-model output is teaching text only; it is not the authority for legal moves or specialist scores. Remote coaching may be unavailable when a production provider is not configured or cannot be reached.

Encrypted analysis-result records expire after a short fixed period, normally 30 minutes and never more than 24 hours. A separate explanation cache may retain generated coaching text for up to one hour by default and no more than seven days. Reads do not extend those periods. Infrastructure backups may take longer to age out under controlled operational schedules.

4. Anonymous access, security and abuse prevention

No name, email address or social login is required for core use. Firebase Anonymous Authentication and Firebase App Check may provide short-lived proofs that the request comes from an authentic installation. The backend derives a pseudonymous subject, applies rate limits and quotas, and uses protected credentials stored by the operating system.

Security systems may process IP address, request time, route category, response status, duration, approximate payload size, device or app attestation, and coarse abuse counters. Ordinary application logs are designed not to include raw board payloads, tokens, purchase receipts, personal names, email addresses or payment details.

5. Subscriptions and purchases

Apple or Google processes purchases and payment details. RevenueCat helps the app retrieve product information and decide whether the pseudonymous app user has Coach Pro access. We may process an anonymous RevenueCat App User ID, product and entitlement identifiers, purchase and expiry dates, renewal state, period type, and store environment. We do not receive your payment-card details.

Deleting app data does not cancel a subscription. Subscription management, cancellation and refunds are handled through the store account used for the purchase; see Support for the correct route.

6. Analytics, diagnostics and advertising

The shipping default sends no product analytics. Firebase Crashlytics is integrated on Android and iOS for optional diagnostics, but automatic collection is disabled. Crash reports can be sent only after you explicitly enable diagnostics in the app. Before consent, the app disables collection, clears unsent reports and clears its Crashlytics user identifier.

If diagnostics are enabled, Crashlytics may receive a bounded error category and stack information together with provider-managed app, device, operating-system, session, crash, Crashlytics installation and Firebase installation identifiers. Firebase Analytics and advertising tracking are not configured. You can withdraw diagnostics consent; collection is then disabled again and unsent reports are cleared.

We do not sell personal data, use advertising identifiers, serve behavioural advertising or create advertising profiles.

7. Website data

This website has no account, waitlist, analytics script, advertising pixel, local storage or payment flow. The contact form collects the optional name and reply email address, message and selected topic that you provide.

A necessary session cookie protects the form against CSRF. Cloudflare Turnstile processes browser technical signals for anti-bot protection and validates the request on the server. Submitted requests are delivered to Backgammon AI Coach's dedicated Zammad support system and are accessible only to its support team. We do not use the form for advertising tracking. NodeWorx and Cloudflare may process technical request data to deliver, cache and protect the website.

8. Service providers and transfers

Depending on the feature and platform, data may be processed by Computer Force's backend infrastructure, NodeWorx, Cloudflare, Google Firebase, RevenueCat, Apple, Google and OpenAI. These providers act under their own terms or data-processing commitments and may process data outside Romania or the European Economic Area using applicable transfer safeguards.

9. Purposes and legal grounds

We process data to provide the app and requested coaching, maintain subscription access, keep the service secure, prevent abuse, diagnose faults and comply with legal obligations. Depending on the context, the legal ground is performance of the service contract, our legitimate interest in reliable and secure operation, compliance with law, consent for optional diagnostics, or consent for any future analytics feature.

10. Your controls and rights

The app provides controls to reset preferences and delete local coaching data or local history. Clearing application storage removes the app's local sandbox on Android; uninstall and protected-key behaviour is controlled partly by the mobile platform. Store purchases must be managed separately.

Where applicable, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Because the app is anonymous-first, we may need the pseudonymous installation information shown by the app to locate a server-side record safely. You may also complain to the Romanian data-protection authority or your local supervisory authority.

11. Children

The service is not directed to children under 13 and does not knowingly collect a child's name, email address or precise location. A parent or guardian who believes a child has provided personal data should use the privacy contact above.

12. Changes

We may update this policy when the app, providers or legal requirements change. The effective date at the top identifies the current version. Material changes will be presented through the website, app or store listing as appropriate.