Candor makes unusual choices on purpose. If one of them bugs you, the reasoning is below. If it still bugs you after that, that's allowed too. This app isn't for everyone; it's for people who want this.
Because it decides which app you're using. The two pools are completely separate. Someone browsing long-term will never be shown to someone browsing short-term, and the reverse holds too. "Open to both" sounds flexible, but in practice it lets people farm attention in a pool they never intended to take seriously.
You can switch later, once every 14 days. Pending openers clear in both directions when you do; conversations you've already matched in survive.
Free unlimited swipes make attention worthless on the sending side and worthless on the receiving side too, since everyone knows any given like could be spray. Requiring at least 80 characters of real writing fixes that: your words arrive before the decision does.
The floor is enforced server-side and rejects padding tricks like repeated characters or words. It applies to openers and each person's first reply only. Once you've both said something real, short messages like "7pm works" send fine.
It lapses after 24 hours. Lapsing is not declining: the record is removed entirely, so both of you are freed up and can cross paths again later. A decline is a different thing. It's deliberate, mutual, permanent, and silent, meaning you won't get a notification whose entire content is rejection.
The recipient's feed blocks past 5 unread openers, so nobody accumulates an inbox they're afraid to open.
A verification gate with a side door isn't a gate. If unverified accounts could see others while waiting, catfish accounts would live there forever. Everyone waits the same way. Most reviews are quick, and anything the automation can't confirm goes to a human.
Candor is currently free. Seeing who wrote to you is free, with no blur and no counter to buy off. All filters are free. There are no boosts, no super-likes, no ranked desirability, and nothing expires behind a payment wall.
If paid features ever get introduced, price and terms will be shown before payment, and they'll never include selling visibility over other people's attention.
Candor asks for coarse location only, and fine location permission is actively blocked. Your coordinate is rounded on your device and rounded again before storage to reduce location precision. There's no background location and no history of precise coordinates.
It lives in private storage and never appears on your profile. After verification is resolved, the selfie becomes eligible for deletion after 24 hours and is removed through our retention cleanup. Pending selfies remain available for review. Account deletion also removes it. Government IDs are never collected.
A moderator reviews the report and decides: ban, warn, or no action. You can track the outcome of every report you've filed under "My reports" in the app. Enforcement decisions come with a reason where doing so is safe and lawful, and you can contact support by email to appeal. There are no shadowbans.
Export your data as JSON in one tap from Settings. Deleting your account takes two taps. There's no retention offer, no survey, and no "are you sure you'd rather pause?" screen. Deletion removes your authentication identity, profile records, photos, verification selfie, and video from active systems.
Rather stay but disappear? Pausing keeps everything and hides your profile.
No, deliberately. Camera-based verification and the video intro can't work properly on the web, and gating on verification would lock web users out entirely. Candor is native iOS and Android only. This website exists so you can read about the thing.
Candor is operated by Valdrex Philippe. Questions, complaints, appeals, and privacy requests go to valdrexphi@gmail.com. Include "Candor" in the subject line.
Intent, likes, triage, presence, and what happens when someone ignores you.