Candor Privacy Policy

1. Who we are

Candor is published on Google Play by Tag Tracker LLC and on the Apple App Store by Astralab Studios, Inc. (together “we”, “us”). This policy explains what the Candor Android app (package com.tagtracker.hiddencamera) and the Candor iPhone app (bundle ID com.astralabstudios.candor) collect, why, and your choices. Both apps follow this policy.

2. Data that stays on your phone

Camera (lens finder)

With your permission, the app uses the camera and flashlight to highlight small bright reflections. Frames are analyzed in memory on your phone and discarded. The app does not save photos or video and does not send camera images anywhere.

Scan history and reports (iPhone)

The iPhone app can save a summary of each sweep so you can review it later, and can create a report that you choose to share. History is stored only on your phone, and a report leaves your phone only when you share it yourself.

Magnetic sensor

Readings from your phone’s magnetometer are shown on screen and are not stored or sent.

Wi-Fi network check

The app sends standard discovery requests to devices on the Wi-Fi network you are connected to and checks for video-related ports. The list of devices it finds (for example local addresses and open ports) is shown to you and kept only on your phone. On iPhone, iOS asks for Local Network permission before this check runs.

Bluetooth check

With your permission, the app scans for nearby Bluetooth devices and shows names and signal strength. Results are kept on your phone. On Android 11 and older, Android requires location permission for Bluetooth scanning; Candor does not read or store your location. The iPhone app does not request location permission.

3. Data we collect

Anonymous usage events

To understand whether the app works and which features help people, the app sends a small set of events to our analytics provider, PostHog (United States): app opened, onboarding completed, scan started and completed (which check, and how many devices were found and flagged), and paywall and purchase steps (which plan, whether a trial was involved, and error codes). Each event carries a random identifier created on your phone, the app version, and basic device information such as the Android or iOS version and device model. PostHog receives your IP address as part of the network request. We do not create user profiles, and we never include camera images, device names, network addresses, or Bluetooth identifiers in these events.

Purchases

Subscriptions are sold and processed by Google Play on Android and by Apple through the App Store on iPhone. We do not receive your payment card details. Google or Apple tells the app whether you have an active subscription so it can unlock Premium. Their handling of your payment information is covered by the Google Privacy Policy and the Apple Privacy Policy.

Support email

If you email us, we receive your email address and whatever you write, and use it only to reply.

4. How we use data and who we share it with

We use usage events only to operate, fix, and improve Candor and to measure how well its features and offers work. We do not sell personal information, do not use it for advertising, and do not share it with third parties except the service providers named above (PostHog for analytics, Google and Apple for purchases) acting on our behalf, or where the law requires it.

5. Security and retention

Data sent by the app is encrypted in transit (HTTPS). Usage events are kept only as long as they are useful for understanding and improving the app, and are deleted on request where we can identify them.

6. Your choices

• You can deny camera, Bluetooth, Local Network, or location permissions; the related check will not run.
• Uninstalling the app deletes everything it stored on your phone.
• You can manage or cancel subscriptions in Google Play > Payments & subscriptions on Android, or in Settings > your name > Subscriptions on iPhone.

7. Children

Candor is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

8. Privacy requests and contact

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection for personal information controlled by Tag Tracker LLC or Astralab Studios, Inc.. Email support@tagtracker.tech. Include only the information needed to find the relevant record; do not email passwords or payment-card details.

9. Changes to this policy

We may update this policy when app features, providers, or legal requirements change. We will update the date at the top and give additional notice when required.