Privacy policy
Last updated: 2 November 2026
ReasonableMoves is provided by i-Help Networks (Chamber of Commerce 30157746, the Netherlands), the controller of your personal data under the General Data Protection Regulation (GDPR). We keep as little data as we can, and we never sell it. Questions: support@reasonablemoves.app.
What we keep and why
| Data | Why | Basis |
|---|---|---|
| Email address and password (stored only as a secure hash) | Your account, signing in, password reset, service emails | Contract |
| Language and theme | Showing the app the way you set it | Contract |
| Training progress and settings | The trainer itself | Contract |
| Linked Lichess and Chess.com usernames, and the Lichess access token (encrypted) if you link Lichess | Showing your ratings and fetching opening data | Contract |
| Subscription and payment records (amount, date, status, Mollie references) | Billing, and our legal duty to keep financial records | Contract, legal obligation |
| Messages you send us (feedback, email) | Answering you and improving the service | Legitimate interest |
| Technical logs (IP address, time, request) | Security and fixing problems | Legitimate interest |
We don't use advertising, tracking or analytics tools, and we don't build profiles of you.
Who processes it for us
- Microsoft Azure (Sweden, EU): hosting the app and sending emails.
- Neon (database in Frankfurt, Germany, EU): storing the data above.
- Mollie B.V. (the Netherlands): handling payments. Mollie receives your payment details directly; see Mollie's privacy statement.
- Lichess (France): if you link your Lichess account, your token is used to ask Lichess for opening data and your public profile. Lichess only sees these requests.
We have data processing agreements with the processors where the GDPR requires them. Your data stays in the European Union.
How long we keep it
- Your account, progress and settings: until you delete your account.
- Payment records: 7 years, as Dutch tax law requires, also after you delete your account.
- Technical logs: at most 30 days.
- Feedback: until it is handled, at most 2 years.
When you delete your account (in your account settings), we delete your account, progress and settings straight away and revoke a linked Lichess token.
Cookies and local storage
We use one cookie: a session cookie that keeps you signed in. It is strictly necessary, so it needs no consent. Your browser also keeps a few preferences (language, theme) and a cache of opening data in local storage, which never leaves your device. There are no third-party or tracking cookies.
Your rights
You have the right to see, correct, export and delete your data, and to object to or restrict its use. Email support@reasonablemoves.app and we will answer within one month. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Security
All traffic is encrypted (HTTPS). Passwords are stored as secure hashes, Lichess tokens are encrypted, and only we have access to the systems.
Changes
If we change this policy in a way that matters to you, we will tell you by email.