This Policy explains how Candor, operated by Valdrex Philippe ("Candor", "we", "us"), collects, uses, shares, and deletes personal information. It applies to the Candor mobile app and related support. Candor is an adults-only dating service.
Account data: email address or phone number, authentication records, account ID, and consent records. Profile data: display name, birth date, sex, who you are seeking, dating intention, bio, photos, optional video, prompts, interests, lifestyle answers, city, age and distance preferences, availability, and visibility or notification choices. Verification and safety data: a private verification selfie, face-comparison result, photo moderation and duplicate signals, blocks, reports, appeals, and enforcement decisions. Activity and communications: swipes, openers, matches, messages, read and activity timestamps, push token and device platform, and optional date-outcome responses. Date-safety details are composed on your device and sent only through the sharing action you choose; Candor does not store those details or your friend's contact information. Location: an approximate coordinate rounded on the device and again when stored; Candor does not ask for background location or keep a precise-location history.
We use the data to create and secure accounts; enforce the 18+ and photo-verification gates; build intent-compatible discovery and distance results; publish profiles you choose to make discoverable; deliver openers, matches, messages, email or SMS codes, and push notifications; prevent fraud, impersonation, nudity, abuse, and duplicate accounts; investigate reports and appeals; provide export, deletion, support, and safety features; debug and maintain the service; and comply with law. Candor does not sell personal information, serve behavioral advertising, or use profile content to train an advertising model.
Dating intention, sex, and who you seek may reveal sex-life or sexual-orientation information. Where EU or UK data-protection law applies, we process this special-category data only with the separate, explicit consent collected during onboarding. We process other data as needed to perform our contract with you, for legitimate interests in operating and securing the service, to meet legal obligations, and to protect vital interests in an emergency. You may withdraw sensitive-data consent by deleting your account. Because matching depends on that data, Candor cannot provide the service after withdrawal.
Your verification selfie is stored in a private bucket and is not shown on your profile. Candor sends the selfie and selected profile photos to Amazon Web Services Rekognition to compare faces, and sends profile photos to Rekognition to screen for sexual or nude content. Candor stores the submitted image, review status, similarity or moderation outcome needed to make a decision, and timestamps; it does not collect a government ID. An automated approval may be reviewed or reversed by a human moderator. You can appeal an adverse decision by contacting Candor support at valdrexphi@gmail.com. After verification is resolved, the selfie becomes eligible for deletion after 24 hours and is removed through retention cleanup. Pending selfies remain available for review. Candor removes any remaining selfie and verification record when you delete your account.
Other users receive the profile information you publish, approximate distance, availability, openers, and messages you send them. Service providers process data only to provide their services: Supabase for authentication, database, storage, realtime, email delivery, and server functions; Amazon Web Services for face comparison and image moderation; Expo and Google Firebase for mobile push delivery; and Twilio for SMS sign-in codes. We may disclose information when reasonably needed to comply with law, respond to lawful process, investigate fraud or abuse, protect a person's safety, or complete a business reorganization with equivalent privacy protections. We do not disclose your verification selfie to other users. Messages are shared with participants in the conversation.
Account, profile, verification, match, message, report, consent, and push-token data is kept while your account exists, subject to the selfie cleanup described above. An unmatched opener expires after 24 hours; date-safety details are shared from your device without being stored by Candor. Copies received by a friend are outside Candor's control. Silent conversations may close after 21 days without deleting their history. When you delete your account in Settings, Candor deletes the authentication identity, database records, profile photos, verification selfie, and video intro from active systems. Routine provider backups may persist for a limited recovery cycle before being overwritten. We may retain only information that law requires or that is strictly necessary to establish, exercise, or defend legal claims, and will isolate it from ordinary product use.
You can edit profile and preference data, pause discovery, control notification categories, block users, export your data, or delete your account from Settings. Depending on where you live, you may also have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a data-protection authority. California residents may request the categories and specific pieces of personal information collected, correction, deletion, and equal treatment for exercising a right. Candor does not sell or share personal information for cross-context behavioral advertising, so no sale/share opt-out is required. Email valdrexphi@gmail.com with "Candor privacy request" in the subject. We may verify that the requester controls the account.
The JSON export includes account and profile records, consent history, your messages and received messages in your conversations, and your associated activity and safety records. The export is scoped to your account and conversations. On mobile, Candor creates a temporary file for the share sheet and removes that app-owned copy afterward. Files you save or share remain under your control.
Candor uses access controls, row-level database policies, private selfie storage, encrypted transport, least-privilege service credentials, and account authentication. No system can guarantee absolute security. Service providers may process data in the United States and other countries where they operate. Where required, Candor relies on recognized transfer mechanisms and provider contractual safeguards for international transfers.
Candor is not directed to anyone under 18 and does not knowingly allow minors to create profiles. If you believe a minor has provided information, report the profile or email us so we can investigate and delete it.
Material changes will receive a new effective date and, when appropriate, an in-app notice or renewed consent before the change applies. The data controller is Valdrex Philippe, operating Candor. Contact valdrexphi@gmail.com for privacy questions, requests, or complaints and include "Candor" in the subject.
Candor