Privacy,plainly.
Candelo is an app for learning to read price charts, made by Ranne Studio FZE, United Arab Emirates (“we”). This policy explains what the app and this website collect, why, who helps us process it, and what you can do about it. Questions: support@ranne.studio.
What we collect
If you use the app without an account. Your lessons, streak, hearts, gems and settings are stored on your phone. Nothing about your progress leaves the device, except the items below.
- Usage events (for example: a lesson started or finished, a drill played, the paywall shown), with a random identifier, app version, device model, iOS version and an approximate country derived from your IP address. We use PostHog for this.
- Purchases. If you subscribe, Apple handles the payment. RevenueCat receives the purchase record and a random app user id so we know Pro is active. We never see your card details.
- Ads (free version only). Google AdMob shows ads and receives your IP address, device information and ad interactions. It uses your device’s advertising identifier only if you allow tracking when iOS asks. In the EEA and UK you are asked for consent first, and you can change your choice in Settings → Ad privacy choices.
If you create an account (Sign in with Apple, Google, or an email link) we also store your email address (Apple may give us a private relay address), an account id, your progress so it can sync between phones, your drill results for the leaderboards, the course you picked and how you heard about Candelo if you told us. We use Supabase to host this.
Leagues, ranked drills and friends (account only). The league name you choose is shown to the other people in your weekly league group and on the boards. We store your league XP and ranked rating, the friends you add with an invite code (we never upload your contacts), and any name you report as offensive.
Waitlist on this website. The email you submit, the link it came from, your browser’s referrer and user agent, your country (from your IP address; we don’t store the address itself) and the time.
Support. If you email us, we keep the conversation and the device details the app adds to the message.
We don’t collect your precise location, contacts, photos or trading-account details. Share cards are saved to Photos only when you tap Save; we never read your library.
Why we use it
- To run the app: sync your progress, restore your subscription, run leagues, friends and leaderboards (contract).
- To understand which lessons work and fix what doesn’t, using usage events (legitimate interest).
- To keep a free version by showing ads; personalised ads only with your consent (consent).
- To keep public names respectful: reported names are reviewed and can be reset (legitimate interest).
- To answer support requests and send the launch email you signed up for (contract / consent).
- To meet legal and tax obligations.
We don’t sell your personal data, and we don’t use it to trade or to recommend financial products.
Who processes it for us
- Supabase: accounts, progress, leagues, friends and leaderboards.
- RevenueCat: subscription status.
- PostHog: usage analytics.
- Google: ads (AdMob) and, if you choose it, Google sign-in.
- Apple: Sign in with Apple, payments, and app distribution.
- Vercel: hosting for this website.
These providers may process data outside your country, including in the United States and the EU, under their own safeguards such as standard contractual clauses.
How long we keep it
Account data stays until you delete your account. Usage events are kept for up to two years. Waitlist emails are deleted after the launch email or when you ask. Support emails are kept for as long as needed to help you and for our records.
Your choices and rights
- Delete everything: Settings → Delete my data removes your account, synced progress, league and friends data, and the data on your phone.
- Tracking: answer “Ask App Not to Track” when iOS asks, or change it later in iOS Settings → Privacy & Security → Tracking.
- Ad consent (EEA/UK): Settings → Ad privacy choices.
- Depending on where you live, you can ask for a copy of your data, correction, deletion, restriction, or to object to analytics. Email support@ranne.studio and we’ll answer within 30 days. You can also complain to your local data protection authority.
Children
Candelo is rated 16+ and isn’t directed at children. If you think a child has given us personal data, email us and we will delete it.
Security
Data is encrypted in transit, access is limited to what each provider needs, and your account data is protected by per-user access rules. No system is perfectly secure, so tell us at support@ranne.studio if you find a problem.
Changes
If we change this policy in a way that matters, we’ll update the date above and tell you in the app.
Contact
Ranne Studio FZE · support@ranne.studio