Candor Privacy Policy

1. Who we are

Candor is published on Google Play by Tag Tracker LLC and on the Apple App Store by Astralab Studios, Inc. (together “we”, “us”). This policy explains what the Candor Android app (package com.tagtracker.hiddencamera) and the Candor iPhone app (bundle ID com.astralabstudios.candor) collect, why, and your choices. Both apps follow this policy.

2. Data that stays on your phone

Camera (lens finder)

With your permission, the app uses the camera and flashlight to highlight small bright reflections. Frames are analyzed in memory on your phone and discarded. The app does not save photos or video and does not send camera images anywhere.

Scan history and reports (iPhone)

The iPhone app can save a summary of each sweep so you can review it later, and can create a report that you choose to share. History is stored only on your phone, and a report leaves your phone only when you share it yourself.

Magnetic sensor

Readings from your phone’s magnetometer are shown on screen and are not stored or sent.

Wi-Fi network check

The app sends standard discovery requests to devices on the Wi-Fi network you are connected to and checks for video-related ports. The list of devices it finds (for example local addresses and open ports) is shown to you and kept only on your phone. On iPhone, iOS asks for Local Network permission before this check runs.

Bluetooth check

With your permission, the app scans for nearby Bluetooth devices and shows names and signal strength. Results are kept on your phone. On Android 11 and older, Android requires location permission for Bluetooth scanning; Candor does not read or store your location. The iPhone app does not request location permission.

3. Data we collect

Anonymous usage events

To understand whether the app works and which features help people, the app sends a small set of events to our analytics provider, PostHog (United States): app opened, onboarding completed, scan started and completed (which check, and how many devices were found and flagged), and paywall and purchase steps (which plan, whether a trial was involved, and error codes). Each event carries a random identifier created on your phone, the app version, and basic device information such as the Android or iOS version and device model. PostHog receives your IP address as part of the network request and uses it to estimate your approximate location (country and city), which we use only to understand where the app is used. We do not create user profiles, and we never include camera images, device names, network addresses, or Bluetooth identifiers in these events.

Onboarding answers

Some new users see a few optional setup questions (for example where they are checking, what brought them to the app, and how often they stay somewhere new) that personalize their scan plan. The answers are saved on your phone and sent to PostHog with the usage events described above so we can understand which features help which people. They are not linked to your name or contact details and are never sent to advertising partners. You can skip the questions, and you can ask us to delete your answers as described below.

Install source

On Android, the app reads the Google Play install referrer once to learn which campaign or link led to the install (for example a search ad or our Tracker Detect app). This source is added to the usage events.

Advertising measurement (Meta)

On iPhone, Candor asks for your permission with Apple’s App Tracking Transparency prompt, shown after setup and the subscription screen. Only if you tap Allow does the app send Meta (Facebook and Instagram) a few app events to measure whether our ads work: that the app was installed and opened, and that a subscription or free trial started (the plan and its price), together with your device’s advertising identifier, device information and IP address. If you started a plan before answering, that event waits on your phone and is sent only if you allow tracking; if you tap Ask App Not to Track, it is deleted and nothing is sent. You can change your choice any time in Settings > Privacy & Security > Tracking.

On Android, the app sends Meta the same few app events to measure whether our ads work: that the app was installed and opened, and that a subscription or free trial started (the plan and its price). These events carry a random identifier the app creates for Meta, device information (such as device model, Android version, language and time zone) and your IP address. The Android app does not collect or send your device’s advertising ID. You can review and disconnect activity that apps share with Meta in your Facebook or Instagram settings under “Your activity off Meta technologies”.

Onboarding answers, scan results, camera images, device names, network addresses and Bluetooth identifiers are never sent to Meta. Meta’s use of this data is covered by the Meta Privacy Policy.

Purchases

Subscriptions are sold and processed by Google Play on Android and by Apple through the App Store on iPhone. We do not receive your payment card details. Google or Apple tells the app whether you have an active subscription so it can unlock Premium. Their handling of your payment information is covered by the Google Privacy Policy and the Apple Privacy Policy.

Support email

If you email us, we receive your email address and whatever you write, and use it only to reply.

4. How we use data and who we share it with

We use usage events and onboarding answers only to operate, fix, and improve Candor and to measure how well its features and offers work. We share limited app events with Meta only to measure our own ads, as described above. We do not sell personal information and do not share it with third parties except the service providers named above (PostHog for analytics, Meta for ad measurement, Google and Apple for purchases) acting on our behalf, or where the law requires it.

5. Security and retention

Data sent by the app is encrypted in transit (HTTPS). Usage events are kept only as long as they are useful for understanding and improving the app, and are deleted on request where we can identify them.

6. Your choices

• You can deny camera, Bluetooth, Local Network, or location permissions; the related check will not run.
• Uninstalling the app deletes everything it stored on your phone.
• You can manage or cancel subscriptions in Google Play > Payments & subscriptions on Android, or in Settings > your name > Subscriptions on iPhone.

7. Children

Candor is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

8. Privacy requests and contact

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection for personal information controlled by Tag Tracker LLC or Astralab Studios, Inc.. Email support@tagtracker.tech. Include only the information needed to find the relevant record; do not email passwords or payment-card details.

9. Changes to this policy

We may update this policy when app features, providers, or legal requirements change. We will update the date at the top and give additional notice when required.