Privacy Policy
How the ThesisEdge app processes your data.
1. Data controller
The data controller is Kandyb Studio, contact: support@kandyb-studio.eu.
2. What data we collect
The app does not require an account or sign-in.
- Strategy prompts entered by the user — sent to the kandyb-studio.eu server solely for AI parsing (GPT-4o-mini); stored in an anonymous parsing history on a Hetzner server (Germany, EU)
- Backtest results (CAGR, final value, transaction list) — logged anonymously to the Hetzner server for diagnostics after the session ends
- App error logs (error/warn level, screen name, app version) — sent to the Hetzner server, without personal identifiers
- Session identifier (random UUID generated at startup, not linked to user identity)
- Platform and app version — included with every diagnostic request
- IDFA advertising identifier (only if the user consents via Apple ATT) — used by Google AdMob for ad personalization; refusal is possible, ads will be shown without personalization
3. Who we share data with
- Google AdMob (USA (Google LLC, SCCs certificate)) — Displaying ads in the application.
- OpenAI (GPT-4o-mini) (USA (OpenAI LLC, SCCs certificate) — request proxied via kandyb-studio.eu server on Hetzner DE) — AI strategy parsing: converting text to strategy DSL.
- Serwer kandyb-studio.eu (Hetzner Cloud) (Germany, EU (Hetzner Online GmbH, Nuremberg)) — AI parsing (/v1/parse), data bundle serving (/v1/bundle), diagnostic error logs (/v1/log-client).
We do not sell your data. Each subprocessor processes data only to the extent necessary for the app to work.
4. Advertising
The app shows ads. A third-party SDK may read the device advertising identifier (IDFA on iOS — with your consent via App Tracking Transparency; GAID on Android — opt-out available in Google settings).
5. Data retention
Local data (bundle, backtest results, session history): until the app is uninstalled. Anonymous logs on the Hetzner server: 90 days. Parsing history (prompts): 12 months, without association with user identity.
6. Your rights (GDPR)
You have the right to access, rectification, erasure (the “right to be forgotten”), restriction, data portability, objection, and to lodge a complaint with a supervisory authority. To delete your data/account see Data / account deletion.
7. Children
The app is not directed at children under 13 years of age.
8. Additional information
The entire backtesting engine runs offline on the device — historical S&P 500 data is downloaded once as an encrypted bundle (~175 MB). A network connection is required only for: (1) downloading/updating the bundle, (2) AI strategy parsing. Backtesting works fully offline after the bundle is downloaded.
Contact
For privacy matters: support@kandyb-studio.eu.