Privacy Policy

1. Who we are

Kandlo is a trading-education app operated by Kandlo LLC ("Kandlo", "we", "us"). This policy explains what information the Kandlo app and this website collect, why we collect it, and what you can do about it.

Kandlo is currently intended for users in the United States. Kandlo is not currently being launched or actively marketed to users in the European Economic Area or the United Kingdom. Kandlo LLC is the operator of Kandlo and is the controller of the information described in this policy — meaning we are the ones who decide why and how it is used. You can reach us about this policy at support@kandlo.app.

Kandlo is an educational platform. It does not provide financial advice, it does not provide real-money trading services, and it does not place trades or hold money.

2. Information we collect

Signing in

Kandlo uses Clerk to provide authentication and account sign-in. Depending on the sign-in method you use, Clerk processes the information necessary to authenticate you. Kandlo's application database does not store your password. What Kandlo keeps is the account identifier that links your progress to you. Information about your sign-in identity, such as the email address you sign in with, is handled by Clerk under its own privacy policy and is not copied into Kandlo's database.

If you sign in with Google, Google confirms your sign-in to Clerk and may provide account information, including your name and email address, to Clerk. Clerk handles that information. Kandlo shows the name on your Clerk account inside the app, for example in a greeting on your own screen. Kandlo's application database does not store your name. Google handles the sign-in under its own privacy policy.

Your Kandlo account

Your Kandlo account record holds a Kandlo account identifier, the link to your sign-in identity, the username you choose, and the value used to generate your avatar picture.

What you do in the app

We record your activity so that your progress persists:

chart challenges you complete — the call you made, the result, and the change to your rating;
lessons and concept drills you finish, and the concepts you have learned;
your rating, accuracy, statistics, streaks, Kandles and achievements;
Rapid Fire runs and their scores;
a short recent-activity list shown on your own profile.

Your settings

Your chosen market and timeframe, whether sound is on, your notification preferences, and your device's time-zone offset. The offset is used for one purpose: working out when your local day and your local calendar month begin, because your streak and your free monthly challenges both depend on it.

Notifications

If you allow notifications, we store the push token your operating system issues for that device and whether the device is iOS or Android. We also keep a record of which notifications have already been sent to you, so that you are not sent the same one twice.

Separately, the Android app includes Firebase Cloud Messaging, which Google's Firebase documentation says can create its own installation and registration identifiers on the device as part of how it works. Kandlo's Android app does not switch that automatic start-up off, so this can happen whether or not you allow notifications in Kandlo. Those identifiers are handled by Google and Firebase under their own policies. Kandlo only stores a push token in its own database if you allow notifications.

Technical information and error monitoring

Kandlo's servers run on Cloudflare. Like any online service, they necessarily receive technical information with each request your app makes, such as your IP address and details of the request. Kandlo's own database has no place to store an IP address, and Kandlo's server is configured not to keep Cloudflare's stored request logs. Cloudflare may still process network information to deliver traffic and protect its network, under its own policy.

When the Kandlo server hits an unexpected error, it can send an error report to Sentry, our error-monitoring provider. Reports are built to leave out the request itself (including its web address and contents), headers, cookies and any user details, and to keep the error itself, a technical trace, and the environment and version. That filtering reduces what a report contains, and we do not promise that no personal information can ever appear in one.

The Kandlo app also contains Sentry's crash-reporting component. It only works in an app build that has been given a reporting address, and we turn it on or off by build. When it is on, the app may send Sentry limited crash and error information, such as the error itself, a technical trace, and the app and device software version, so that we can find and fix crashes and keep Kandlo reliable. We set it up to collect as little as we can: we do not deliberately attach your name or email address to a report, and the app filters out request details and similar extra data before sending. Some crashes happen in the phone's own code, where the app's filter may not run, so a report may contain more than the filter would otherwise allow. As with server reports, we do not promise that no personal information can ever appear in one.

Subscriptions

If you subscribe to Kandlo Pro, we receive information about your subscription and entitlement — that it is active, which product it is, and when it expires. Kandlo's application database does not store your card number or your billing details. Payment is taken by the Apple App Store or Google Play under their own terms.

Playing without an account

You can try Kandlo without signing up. While you play as a guest, your progress is stored on your device. If you later create an account, that guest record is uploaded once so your progress carries over, and we keep a small record that the import happened so that it cannot be repeated.

If you contact us

We receive whatever you choose to include in your message, including the address you send it from.

3. Information we do not collect

These are choices about what Kandlo collects, and they describe Kandlo at the time this policy was last updated. One item below is a component that may be switched on or off by build, and it says so:

Kandlo currently contains no analytics or product-measurement SDK.
Kandlo does not use Sentry to track you or to measure how you use the app. Its crash-reporting component (Sentry) is for diagnosing crashes and errors only, and may be on or off in a given build. Crash and error monitoring is described under Information we collect.
Kandlo currently carries no advertising, no advertising identifiers and no cross-app tracking.
The Kandlo app does not call an AI or language model while you use it.
Kandlo does not request access to your contacts, photos, camera, microphone or precise location. The only permission it asks for is notifications.

Kandlo does not sell personal information, and does not share personal information for targeted advertising.

If any of this changes, this policy changes with it, in the same release.

4. How we use information

To sign you in and keep you signed in.
To save your progress and show it back to you.
To decide what you have access to — your free challenges, your free lessons and concepts, and your Pro subscription if you have one.
To rank players on leaderboards.
To send the notifications you have turned on.
To answer you when you contact support.
To keep the service working and to prevent abuse of free limits.

5. Legal bases for processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a legal basis for using your information. The basis depends on what we are doing and, where applicable, on the law that applies to you:

To perform our contract with you, or to take steps you have asked for — providing your account and the core Kandlo service, saving your progress, grading and recording your practice activity, managing your access to the features you have asked for, and providing subscription-related functionality.
Our legitimate interests, where applicable — keeping the service secure, preventing abuse and manipulation of usage limits and leaderboards, maintaining the reliability of the service, responding to your support requests, and necessary internal administration. Where we rely on this basis, we consider your rights and interests as well as ours.
Your consent, where applicable — optional processing for which Kandlo specifically asks you, such as sending you notifications where consent is the applicable basis. Where we rely on consent, you can withdraw it at any time, and doing so does not affect processing carried out before you withdrew it.
Compliance with a legal obligation — where we have to process or keep information to comply with applicable law.

Consent is not the basis for the Kandlo service as a whole. Most of what Kandlo does with your information is necessary to provide the service you asked for, or rests on the legitimate interests described above.

6. Leaderboards, and what other people can see

Kandlo has leaderboards that other users can see. If you appear on one, they can see your username, your avatar, your rank, and the value that board ranks by. Nothing else about you is shown, and the address you sign in with is never shown.

Your avatar is generated from your account identifier rather than being that identifier, so your underlying account identifiers are not published.

If you reset your progress, or delete your account, your leaderboard entry goes with the account data it was drawn from.

7. Service providers

We use a small number of providers to run Kandlo. Each receives only what it needs.

For the app:

Clerk — authentication and account sign-in.
Neon — the database that stores your Kandlo progress.
Cloudflare — hosting and delivering traffic for the Kandlo server that the app talks to.
Sentry — receiving error reports from the Kandlo server, and crash and error reports from the Kandlo app when its crash reporting is on, as described under Information we collect.
Expo Push Service, and on Android Firebase Cloud Messaging — delivering notifications. They receive your push token and the text of the notification. Firebase Cloud Messaging may also process its own device identifiers, as described under Notifications above.
RevenueCat — managing subscription and entitlement state, in builds of the app where subscriptions are enabled. Where it is enabled, it identifies you by your Kandlo account identifier. Subscriptions are not enabled in every build of the app.
Apple and Google — payment and billing for subscriptions, under their own terms and privacy policies.

For this website:

Cloudflare — hosting this website (as well as the Kandlo server, above), and forwarding mail sent to our support address.

The charts you practise on are generated by Kandlo. No provider of financial information receives anything about you.

8. Where information is processed

Our service providers may process information in countries other than the country where you live, including the United States. Privacy laws in those countries may differ from those in your own.

Where applicable data protection law requires safeguards for an international transfer of your information, Kandlo will use an appropriate lawful transfer mechanism. If you would like to know what applies to a transfer relevant to you, contact support@kandlo.app.

9. How long we keep information

We keep your account information and your progress for as long as your account exists. When you delete your account, the information described under Deleting your account is removed at that point.

If you reset your progress in the app, your rating, streaks, Kandles, achievements, learned concepts, lesson progress and activity list are cleared. A record that a challenge was attempted is kept, without your result, so that resetting cannot hand back free attempts you have already used.

We may keep support correspondence for as long as is reasonably necessary to respond to your request, maintain appropriate business records, resolve issues, or meet legal obligations.

Our service providers keep their own records under their own policies and retention periods, separately from Kandlo's application database.

10. Your choices and privacy rights

In the app you can:

turn notifications on or off, in Profile → Notifications and in your device's own settings;
reset your progress, in Profile → Account, which keeps your account;
delete your account — see Deleting your account;
play as a guest, without creating an account at all.

Depending on where you live, applicable privacy law may give you rights relating to your personal information, which may include access, correction or deletion. To make a request, email support@kandlo.app. Depending on applicable law, we may ask you to complete reasonable verification before we act on a request, and we will respond as applicable law requires.

Kandlo does not currently offer an automated data export or download.

If your information is protected by the EU GDPR or the UK GDPR, see EEA and UK privacy rights for the specific rights that may apply to you and how to exercise them.

11. EEA and UK privacy rights

As set out above, Kandlo is currently intended for users in the United States, and is not currently being launched or actively marketed in the European Economic Area or the United Kingdom. This section is here because the rights below apply wherever the law gives them to you, not because Kandlo is offered in those regions today. If that changes, we will update this policy before it does.

If your information is protected by the EU General Data Protection Regulation (GDPR) or the UK GDPR, you have rights over it. Subject to the conditions, limitations and exceptions in the applicable law, these include the right to:

access the personal information we hold about you;
rectification — correct information that is inaccurate or incomplete;
erasure — ask us to delete your personal information;
restriction — ask us to limit how we process it;
object to processing, including where we rely on our legitimate interests;
data portability, where applicable — receive information you provided to us in a portable format, or ask us to transmit it to another provider where that is technically feasible;
withdraw consent, where our processing relies on your consent. Withdrawing consent does not affect processing we carried out before you withdrew it.

Not every right applies to every processing activity, and applicable law sets out the exceptions. To make a request, email support@kandlo.app. We may ask you for reasonable information to verify your identity before we act on a request, and we will respond within the time applicable law allows.

Kandlo does not currently provide an automated data export or download; a request is handled by a person.

Complaints

If you are in the EEA, you may have the right to lodge a complaint with the data protection supervisory authority in your country. If you are in the United Kingdom, you may have the right to complain to the Information Commissioner's Office (ICO).

You do not have to contact us first. We would still like the chance to help, so you are welcome to reach us at support@kandlo.app as well.

12. Deleting your account

You can delete your Kandlo account at any time from Profile → Account → Delete account. If you cannot open the app, the Account Deletion page explains how to ask us instead.

Deleting your account removes the Kandlo information keyed to you: your account and profile, your challenge history, your statistics, rating, streaks, Kandles and achievements, your lesson and concept progress, your Rapid Fire history, your activity list, your settings, and your notification registrations. Kandlo also asks Clerk to delete the associated sign-in identity. If that step does not succeed, the app tells you so rather than claiming otherwise, and you can contact us to finish it.

Deleting your Kandlo account does not by itself delete records that third parties hold independently. Apple, Google, our subscription provider, our authentication provider and other providers may keep their own records under their own policies or legal obligations. That is separate from Kandlo's own application data, which is removed.

Deleting your Kandlo account does not cancel an Apple App Store or Google Play subscription. Subscriptions are managed in your store account and must be cancelled there.

13. Security

We describe only what we actually do:

Every request that touches your account data must carry a valid session token, which our server verifies before it will act.
The account acted on is always the one named by that verified token, never one named by the request itself.
Requests our providers send us are cryptographically verified before we act on them.
Privileged credentials are held on the server, and are not included in the mobile app or in this website's public code.

No system can guarantee absolute security, and we do not claim otherwise.

14. Age requirement and younger users

Kandlo is intended for users aged 16 and older. Kandlo is not intended for children under 16, and you may not use Kandlo if you are under 16.

If you have not reached the age of legal majority where you live, a parent or legal guardian must consent to your use of Kandlo where applicable law requires that consent.

Kandlo does not currently verify a user's age, and it does not currently verify the identity of a parent or guardian or capture their consent. We state the rule; we do not claim a system that checks it.

If Kandlo learns that an account belongs to someone under 16, the user or their parent or guardian may contact support@kandlo.app so that we can take appropriate action.

15. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change is significant, we will make that clear in the app.

16. Contact

Questions about this policy: support@kandlo.app.