Effective August 2, 2026
CandleBoss doesn't sell your data or show you ads. Signing in is optional. If you use the contacts-based leaderboard, your contacts are hashed and compared entirely on your device — they never leave it. We use privacy-focused analytics (TelemetryDeck) to catch crashes and understand usage, never tied to your name or Apple ID, and you can turn it off in Settings.
CandleBoss ("we," "us," "our") makes the CandleBoss iOS app, a candlestick pattern-recognition training tool. This policy explains what information the app collects, how it's used, and the choices you have. Questions? Email hello@candleboss.app.
Signing in is optional — you can use CandleBoss fully without an account. If you choose to sign in with Apple, Apple shares your name and an email address (real or a private relay address, your choice) along with an anonymous Apple identifier. This is stored only in your device's Keychain and is never transmitted to our servers or any third party.
If you enable the contacts-based leaderboard, the app reads your phone contacts on your device to find friends who also use CandleBoss. Each contact's phone number or email is converted into a one-way cryptographic hash on your device before any comparison happens — matching against other users takes place locally. Your contact list, in any readable form, never leaves your device or reaches our servers.
If you participate in the leaderboard, we store your XP total, accuracy, and streak under an anonymous, randomly generated handle (for example, "Swift Falcon") — never your real name. This is stored in a shared database (Apple CloudKit's public database) visible to other leaderboard participants.
Your drill history, per-pattern accuracy, and XP progress are backed up automatically, at most once per day, to your own private iCloud storage (Apple CloudKit's private database) — accessible only to you, never to us.
We use TelemetryDeck, a privacy-focused analytics provider, to understand how the app is used and to catch crashes. This can include which screens or events you interact with, your app version, OS version, device model, install date, subscription status, and — if the app crashes — a diagnostic report that may include part of a stack trace. None of this is linked to your name, Apple ID, or email. It's tied only to a random identifier generated on your device that can't be used to identify you personally, and TelemetryDeck doesn't use advertising identifiers or cross-app tracking. You can turn analytics off at any time in the app's Settings.
Your streak calendar, per-pattern drill accuracy, onboarding progress, and notification preferences are stored locally on your device and aren't transmitted anywhere beyond what's described above.
Apple — Sign in with Apple, CloudKit (leaderboard and backup), and StoreKit (subscriptions), governed by Apple's own privacy policy.
TelemetryDeck (telemetrydeck.com) — privacy-focused analytics, described in 2.5 above.
You can request deletion of your account and associated data at any time from Settings in the app, or by emailing hello@candleboss.app. This removes your leaderboard entry and cloud backup, and clears your data from the device you're using.
CandleBoss is not directed at children under 13, and we don't knowingly collect information from children under 13.
If this policy changes, we'll update the effective date above and post the revised version here.
Questions about this policy or your data: hello@candleboss.app.