Privacy Policy

1. Information We Collect

We collect the following types of information:

2. How We Use Your Information

• Core functionality: Enable location-based discovery, messaging, and social features
• Authentication: Verify your identity via Apple Sign-In or Google Sign-In
• Personalization: Show relevant nearby content and connections
• Safety: Detect and prevent abuse, fraud, and policy violations
• Improvements: Analyze usage patterns to improve the Service (aggregated, non-identifying)

3. Data Storage & Security

Your data is stored across two systems:

• Firebase (Google Cloud): Real-time data including authentication, profile, location, messages, and meetings
• PostgreSQL (backend server): User profiles, referrals, CDO tokens, and wallet information

All data is transmitted over encrypted connections (TLS/SSL). We implement industry-standard security measures to protect your information.

4. Data Sharing

We do not sell your personal data. We may share information with:

• Other users: Your public profile, location (when Live), and shared content are visible to other Candao users
• Service providers: Firebase (authentication, database), Apple (authentication, payments)
• Legal requirements: When required by law or to protect rights and safety

5. Tracking & Analytics

Candao does not track you across other apps or websites. We do not use advertising identifiers. We do not share data with advertising networks or data brokers.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update inaccurate information in your profile
• Delete: Permanently delete your mobile account and associated data through Settings → Privacy & Security → Delete Account
• Restrict: Limit how your data is used by adjusting your privacy settings

7. Account Deletion

When you delete your account:

• Your Firebase authentication is permanently destroyed
• All personal content (profile, messages, photos, meetings) is removed from Firebase
• Personal information in our backend (name, avatar, bio, wallet) is permanently nullified
• A minimal, non-identifying record is retained for compliance and abuse prevention
• Deletion is processed server-side and is irreversible

8. Location Data

Candao uses your location to power its core discovery features. You control location access through iOS Settings. When you go "Live," your approximate location is shared with nearby users. When not Live, your location is not shared.

Background location is used only to maintain Live status accuracy and detect when you leave a pinned location.

9. Children's Privacy

Candao is not intended for users under 17 years of age. We do not knowingly collect information from children. If we learn that we have collected data from a child, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App. Your continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests, contact us at privacy@candao.io.