Effective October 18, 2026
CandleBoss doesn't sell your data or show you ads. Signing in is optional. We use privacy-focused analytics (TelemetryDeck) to understand how the app is used, including which plan was selected and the price shown at purchase. It's never tied to your name or Apple ID. Analytics is on by default, and you can turn it off anytime in Settings → Privacy → "Share anonymous usage analytics". Purchases are completed by Apple and recorded by RevenueCat under an anonymous ID.
CandleBoss ("we," "us," "our") makes the CandleBoss iOS app, a candlestick pattern-recognition training tool. This policy explains what information the app collects, how it's used, and the choices you have. Questions? Email hello@candleboss.app.
Signing in is optional. You can use CandleBoss fully without an account. If you choose to sign in with Apple, Apple shares your name and an email address (real or a private relay address, your choice) along with an anonymous Apple identifier. This is stored only in your device's Keychain and is never transmitted to our servers or any third party.
The leaderboard is part of CandleBoss Pro. While you're a Pro member, the app posts your weekly XP automatically after each completed session, including when you are not signed in with Apple, and posts your all-time XP total, accuracy and streak when you tap Post. These are stored under an anonymous, randomly generated handle (for example, "Swift Falcon") and a random identifier kept in your device's Keychain, never your real name, email or Apple ID. They're stored in a shared database (Apple CloudKit's public database) that other leaderboard participants can see. There is no leaderboard remove button. Removing the entry tied to this device's player ID is described in section 6.
Your drill history, per-pattern accuracy and XP progress are backed up automatically, at most once per day, to your own private iCloud storage (Apple CloudKit's private database). Only you can access it; we can't.
We use TelemetryDeck, a privacy-focused analytics provider, to understand how the app is used. This can include which screens or events you interact with, your app version, OS version, device model, and install date.
It can also include purchase and price information: the plan you select (monthly, yearly, or lifetime), the localized price and currency shown on the paywall, the raw price, whether a purchase, restore or trial succeeded, failed or was cancelled, a category for a purchase or restore error, and whether the premium entitlement is active. It doesn't include a card number, a bank account, an Apple receipt or a billing address. Apple processes the payment.
None of this is linked to your name, Apple ID or email. It's tied only to a random identifier generated on your device and stored as a hash. That identifier can't be used to identify you personally. TelemetryDeck doesn't use advertising identifiers or cross-app tracking. Crash reports stay on your device and aren't sent to us or to TelemetryDeck.
Turning analytics off. Analytics is on unless you turn it off. In Settings → Privacy, the switch is labeled "Share anonymous usage analytics". Your choice takes effect immediately and is saved on your device, where the CandleBoss widget and Shortcuts also respect it. Turning it off stops every analytics signal, including ones already queued in the app. The widget and Shortcuts don't add new records while it's off, and anything already queued is deleted, not sent later. Turning it off also clears the analytics identifier the app shares with RevenueCat (section 2.6). If you turn the switch back on, anything left from the off period is cleared first, and collection starts again from that moment. Turning analytics off doesn't change any feature or anything you've paid for.
While the switch is on, a widget answer or a Shortcut can leave a short record on your device. The app sends that record through the same analytics path the next time it opens. The record is a fixed set of event names and values, never free text you typed.
Your streak calendar, per-pattern drill accuracy, onboarding progress and notification preferences are stored locally on your device and aren't transmitted anywhere beyond what's described above.
The Home Screen widget reads a snapshot the app writes into shared storage on your device (streak, today's pattern question, and your answer). That snapshot stays on the device. A Challenge a Friend link is a number in a candleboss:// link that you share yourself. We don't receive that link, and it doesn't contain your name or account.
Premium is sold as an auto-renewable subscription or a one-time purchase through Apple's App Store. The app uses RevenueCat (revenuecat.com) to check whether your premium access is active and to restore purchases. RevenueCat assigns its own anonymous app user ID. We don't send RevenueCat your name, email or Apple ID.
While "Share anonymous usage analytics" is on, the app also sends RevenueCat two values so purchase events can be counted in aggregate: the hashed analytics identifier from section 2.4, and our TelemetryDeck app ID. Turning the switch off clears both immediately, and turning it back on sends them again. We never receive your payment card or bank details. Apple handles the charge.
We share data with these providers only for the purposes described in this policy. Each of them is required to give your data the same or equal protection as this policy describes.
If you're signed in with Apple, Settings → Account → Delete Account removes the account data on the device you're using, including the cloud backup, and removes the leaderboard entry tied to this device's player ID. It does not remove an entry stored under a different device or player ID. Delete Account is not shown when you are not signed in. If you're not signed in, or at any time, email hello@candleboss.app to have your leaderboard entry and data removed. That request removes the leaderboard entry tied to this device's player ID only. To withdraw consent to analytics, turn off "Share anonymous usage analytics" (section 2.4). That stops new analytics, deletes signals not yet sent, and clears the identifier shared with RevenueCat. Analytics already received stays anonymous, under the random identifier only, and is kept under TelemetryDeck's retention settings. Apple and RevenueCat keep the purchase records they need to provide what you bought.
CandleBoss isn't directed at children under 13, and we don't knowingly collect information from children under 13.
If this policy changes, we'll update the effective date above and post the revised version at https://candleboss.app/privacy/.
Questions about this policy or your data: hello@candleboss.app.