Last changed: 26.8.2026.
The data controller is Vladan Pejović, Kraljevo, Srbija, Republic of Serbia.
Contact for any question about privacy and for exercising the rights in this policy: privacy@chesstrainers.app.
Mislisha is a chess coaching app. It is used by trainers and students, and a significant share of the students are children. If you are under 15, an account may be opened only with the consent of a parent or guardian — see section 8.
| Data | Why we have it |
|---|---|
| Email address | Signing in, verification code, lesson notifications |
| Name | Shown to the other participants of a lesson and to your trainer |
| Password | Stored only as a bcrypt hash — we cannot read the original password |
| Lesson titles and descriptions, comments on moves | Content you create yourself |
If you sign in through a Google account, we receive from Google only your email address and name. We do not receive your Google password and we have no access to your other Google services.
| Data | Why we have it |
|---|---|
| Moves played, positions, arrows and marks on the board | The work of the lesson and reviewing it later |
| Rating per tactical theme, number of puzzles solved and missed, solving time | Adjusting difficulty and reporting progress |
| Assignments your trainer set and results per assignment | Tracking homework |
| The move you played in each position of an assignment | So the trainer sees what you tried, not only whether it was right |
| Messages you and your trainer write on an assignment or a position | Feedback on homework |
| Trainer–student relationships | Inviting to lessons and sharing lessons |
| Scheduled sessions and notifications | Lesson reminders |
A lesson is kept as a timeline of moves, arrows and marks on the board, together with the list of participants. That record can be replayed later.
The interaction between a trainer and a student is not recorded. No participant's voice is captured or kept — under anybody's consent. Replaying a lesson is silent.
Audio exists in one case only: an adult user who is alone in the room may record their own material, for example a video lesson, then download it and publish it wherever they like. The server refuses audio as soon as anybody else is in the room, and stops the recording if somebody joins.
Subscriptions are charged through Google Play. Google is the seller and processes your payment data — we never see and never store a card number or any payment detail. From Google we receive only the purchase identifier, the product name, the subscription status and the expiry date.
We record, in aggregate per account and per month: seconds of voice communication, number of rendered video files, number of AI comments requested and number of pages scanned. We use this only to know what the service costs us and to prevent abuse.
We use the following service providers. Each receives only what it needs.
Carries live audio during a lesson. Agora processes the audio stream and technical connection data. The transfer takes place outside Serbia.
When you request an AI comment, we send chess data only: the position (FEN), the engine evaluation, the move classification and pre-calculated tactical and positional findings. We do not send your name, email, account identifier or any other personal data — Google cannot tell from that request who you are.
See 3.4. Google sign-in is used only to confirm identity.
For position analysis we send the position (FEN) only, without any data about the user.
Data is kept on DigitalOcean servers in Amsterdam, Holandija. Verification messages and messages to parents are sent through Namecheap Private Email.
| Data | Period |
|---|---|
| Account data | As long as the account exists |
| Audio a user records alone in a room | Until the account owner deletes them, or until the account is deleted |
| Rendered video files (MP4) | 14 days from creation — they can be produced again from the recording |
| Puzzle and assignment results | As long as the account exists — they form the history of progress |
| Messages on assignments | As long as the assignment exists; deleting the assignment deletes them too |
| Subscription data | As long as tax rules require |
| Aggregate resource usage data | As long as the account exists |
Deleting an account permanently deletes all related data — lessons, recordings, results and assignments. This action cannot be undone.
You have the right to access your data, to ask for correction of inaccurate data, to ask for deletion, to restrict processing, to object to processing and to transfer your data to another controller.
Send a request to privacy@chesstrainers.app. We answer within 30 days.
If you believe your rights have been infringed, you may address the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.
A significant share of our users are children. Therefore:
What consent looks like and what it covers is described on the Parent consent page.
Passwords are stored as a bcrypt hash. Communication with the server goes over HTTPS. Access to a student's data is held by only the trainer the student is connected to — no other trainer can see another trainer's students.
No measure is absolute. In the event of a data breach that may put your rights at risk, we will inform you and the Commissioner as the law requires.
If we change this policy, we publish the new version at this same address and change the date at the top. We inform you by email of significant changes.
Vladan Pejović
Kraljevo, Srbija
privacy@chesstrainers.app