Privacy Policy

Last updated July 31, 2026

This Privacy Policy explains how HereNow Labs, Inc. ("HereNow Labs", "we", "us", "our") collects, uses, discloses, and protects information in connection with the Brilliancy mobile app and website (the "Service"). HereNow Labs is the controller of the personal information described here. Brilliancy shows notable moments from real grandmaster chess games, and you can browse the feed without an account. By using the Service, you agree to this policy.

1. Information we collect

We collect the following categories of information:

• Account information. If you choose to sign in with Apple or Google, we receive a stable account identifier and, where you permit it, your email address. If you choose to sign in with an email address instead, we store that address and the date you confirmed it, so that we can send you a sign-in code when you ask for one. Signing in is optional and is used to sync your activity across devices.
• Email preferences. If you ask us to send you emails about chess moments, we store that you asked and when. If you later unsubscribe we store that too, and we keep the record of your original request as evidence that the earlier messages were sent with your permission.
• Usage information. Actions you take in the Service, such as which moments you view and whether you make a guess, collected through our analytics provider.
• Device and technical information. Device type, operating system, app version, language, coarse region inferred from IP address, and diagnostic identifiers used by our analytics and crash-reporting providers.
• Diagnostics. Crash logs and error reports, which may include device state and IP address, so we can find and fix problems.
• Communications. If you email us, we receive your message and contact details.
• Chess content. The games shown come from publicly available Chess.com data. We do not gather information about the players beyond what is already public.

We do not collect your contacts, precise location, health data, or payment information, and we do not use the device microphone or camera to identify you.

2. Sources of information

We collect information directly from you (for example when you sign in or email us), automatically from your device as you use the Service, and from service providers who help us operate the Service (for example Apple or Google when you sign in).

3. How we use information

We use information to:

• Provide, operate, maintain, and improve the Service.
• Sync your activity across devices when you sign in.
• Diagnose crashes, debug, and secure the Service against abuse.
• Understand which content resonates so we can make the feed better.
• Send you a sign-in code when you ask for one.
• Send you emails about chess moments, but only if you have asked us to, and only until you tell us to stop.
• Respond to your messages and provide support.
• Comply with law and enforce our terms.

We never sell your email address, and we never share it so that anybody else can market to you. Every one of those emails carries an unsubscribe link that works immediately, and you can turn them off at any time from your profile.

4. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal information on these legal bases: performance of a contract (to provide the Service you request), our legitimate interests (to secure, analyze, and improve the Service in ways that do not override your rights), your consent (where required, for example certain analytics), and compliance with legal obligations.

5. How information is shared

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose limited information to service providers who process it on our behalf under contract, and in the limited other cases below:

• PostHog for product analytics.
• Sentry for crash and error reporting.
• Apple and Google when you choose to sign in with them.
• Resend to deliver our email. Sign-in codes go to everyone who asks for one; your address is added to our mailing list only if you have signed up for our emails.
• Legal and safety. To comply with law, respond to lawful requests, or protect the rights, safety, and integrity of the Service and its users.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

6. Analytics and diagnostics

Our analytics (PostHog) and crash-reporting (Sentry) providers use software development kits and device or usage identifiers to measure how the Service performs. This helps us understand engagement and fix crashes. These providers process data under our instructions and their own privacy commitments.

7. Data retention

We keep personal information only for as long as needed to provide the Service and for the purposes described here, unless a longer period is required or permitted by law. Account information is kept while your account is active. Usage and diagnostic information is kept for a limited period and then deleted or aggregated. You can delete your account yourself at any time, from Profile then Settings in the app, or beside your name on the web. See deleting your account for exactly what is removed and what is kept. In short: your account, profile, rating, likes, follows and comments are permanently deleted, while the positions you attempted remain in the anonymous community statistics with your user id removed, because those figures are shown to other players.

8. Data security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International data transfers

We are based in the United States and may process and store information in the United States and other countries whose data protection laws may differ from those where you live. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers.

10. Your privacy rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal information, and you may object to or ask us to restrict certain processing. You can use the Service without an account. To exercise a right, email team@herenowlabs.xyz. We may need to verify your identity before acting, and we will not discriminate against you for exercising your rights.

11. California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you rights to know what personal information we collect, to access and delete it, to correct it, and to opt out of any sale or sharing of it. We do not sell your personal information and we do not share it for cross-context behavioral advertising. The categories we collect and our purposes are described above. You may exercise these rights, including through an authorized agent, by emailing team@herenowlabs.xyz. We will not discriminate against you for exercising them.

12. European and UK rights

If you are in the EEA or the UK, in addition to the rights above you have the right to lodge a complaint with your local data protection supervisory authority. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

13. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at team@herenowlabs.xyz and we will delete it. Where a higher age of digital consent applies, we apply that standard.

14. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no common standard for responding to these signals, the Service does not currently respond to them.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page and, for material changes, provide additional notice in the Service where appropriate. Your continued use after an update means you accept the revised policy.

16. Contact

HereNow Labs, Inc. If you have questions or requests about this policy or your personal information, contact us at team@herenowlabs.xyz.