Privacy Policy
Last updated 27 September 2026
This policy explains what Repertoire Studio (run by TT Labs, India) collects, why, and the choices you have. The short version: without an account your repertoire never leaves your browser; with one, we store what we need to sync it and run the features you use. We don’t sell your data or use it for advertising.
1. If you don’t sign in
Your repertoires, notes, training progress, settings and imported games are stored in your browser’s own storage on your device. They are not sent to us. Clearing your browser’s site data deletes them.
2. If you sign in
You sign in with Google through Firebase Authentication. We then store:
- Account details from Google: your name, email address, profile photo and account ID.
- Your study data, so it syncs between devices: repertoires and notes, training progress, settings (including a Lichess API token, if you add one), imported games and their analyses.
- Plan and credits: whether you have Pro, your credit balance and usage.
3. The AI coach
When you ask the AI coach something, the position, the moves, your question and any game you ask about are sent through our server to Google’s Gemini API, which generates the answer. Our server doesn’t keep a copy of the request. Questions about a position and their answers are saved only in your browser; a full game review is saved with that game’s analysis, which syncs to your account like the rest of your study data. We record how many credits each request used.
4. Games from Lichess and Chess.com
If you enter a Lichess or Chess.com username, your browser fetches that player’s public games directly from those services. A Lichess token you add is used by your browser to call Lichess on your behalf.
5. Payments
Payments are handled by Dodo Payments, the Merchant of Record for purchases. Your card details go to Dodo Payments, never to us. We receive what we need to give you access: customer and subscription IDs, the plan bought, and its status.
6. Analytics
We use Google Analytics to understand how Repertoire Studio is used and to find problems: pages viewed, features used, device and browser type, approximate location, performance measurements and error reports. When you are signed in, these are linked to a pseudonymous account ID, not your name or email. Advertising features are turned off. Analytics requests go through our own domain.
If you are in the European Economic Area, the UK or Switzerland, analytics cookies are only used if you agree. Until you do, Google Analytics works in a cookieless mode that doesn’t store identifiers on your device. You can change your choice at any time:
7. Other processing
- Our hosting (Google Firebase Hosting and Cloud Functions) processes technical request data such as IP addresses to serve pages and keep the service secure.
- If you use the feedback link, what you submit goes to Google Forms.
- We may look up an account by email address to answer a support request or resolve a billing problem.
8. Why we process data
To provide the service you asked for (your account, sync, the AI coach and purchases); to keep it secure and prevent abuse of credits and payments; to understand and improve it through analytics (with your consent where the law requires it); and to meet legal obligations such as keeping payment records.
9. Who we share it with
Only the providers that run parts of the service for us: Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, Google Analytics and the Gemini API) and Dodo Payments. Lichess and Chess.com receive requests only when you use those features. We don’t sell personal data. Our servers are in the United States, so your data may be processed outside your country.
10. How long we keep it
Account and study data are kept until you delete your account. Analytics data linked to your device or account is deleted automatically by Google Analytics 14 months after your last visit. Payment records are kept as long as tax and accounting law requires.
11. Your rights and choices
- Export everything at any time from Settings → Export everything.
- Delete your account and synced data by emailing support@trivedh.com from the address you sign in with. We complete deletions within 30 days.
- Access or correct your data, or withdraw consent to analytics, by writing to the same address.
Depending on where you live (for example under India’s Digital Personal Data Protection Act or the EU/UK GDPR), you may have further rights, including the right to complain to your data protection authority. Please write to us first so we can try to help; grievances are handled at support@trivedh.com.
12. Children
Repertoire Studio is not meant for children under 13 and we don’t knowingly collect their data. If you think a child has created an account, email us and we will delete it.
13. Security
Data is encrypted in transit, access to each account’s data is restricted to that account by our database rules, and payment and AI keys are kept on the server, never in the app. No system is perfectly secure, but we work to protect your data.
14. Changes
If this policy changes in a way that matters, we will update the date above and tell signed-in users.
Questions? Write to support@trivedh.com.