Privacy Policy
How Kandyb Studio handles your data.
1. Data controller
The data controller is Kandyb Studio, contact email: hello@kandyb-studio.eu.
2. Data we collect
Depending on the App we may process:
- Account data: email, display name (if you create an account).
- User content: investment strategies, learning progress, favourites — stored locally on device; in the cloud only if you enable optional sync.
- Diagnostics: anonymous crash reports and analytics (opt-in / opt-out in settings).
- Server logs: IP address, device type, request timestamp — for security and abuse prevention.
We do not collect biometrics, location data or payment data beyond what Apple App Store and Google Play handle.
3. Legal basis and purposes
- Service delivery (GDPR art. 6(1)(b)) — to provide you with the App.
- Legitimate interest (GDPR art. 6(1)(f)) — security and product quality.
- Consent (GDPR art. 6(1)(a)) — optional analytics and crash reporting.
4. Sub-processors
We use processors strictly required for App functionality:
- Hosting & database: Google Firebase / Cloud Platform (EU/US — SCC).
- AI provider (ThesisEdge): OpenAI (US — SCC).
- Stores: Apple App Store, Google Play (their respective policies).
We do not sell data to third parties and do not use it for ad profiling.
5. Retention
Account data is kept until you delete your account. Anonymous analytics is retained up to 12 months. Server logs — up to 30 days.
6. Your rights
You have the right to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection and to lodge a complaint with the supervisory authority. Account and all data can be deleted within 30 days — see Delete account.
7. Children
The Studio's Apps are not directed at children under 13 (US — COPPA) or under 16 in the EU without guardian consent. We do not knowingly collect data from such users.
8. Contact
For GDPR / privacy matters: hello@kandyb-studio.eu.