Privacy Policy

Last updated: 8 October 2026

The short version

CandleRecon (formerly ChartGrade) has no accounts or sign-in. We do not ask for your name, email address or phone number. Saved readings, watchlists and manual broker-purchase records are stored on your device. Anonymous device identifiers are used for subscriptions, quotas and product analytics.

What happens when you read a chart

When you analyse a chart, the image is sent to our server, which passes it to Google’s Gemini API to be read. The resulting analysis is returned to your device and saved there.

We keep a copy of the analysis result, keyed to a one-way fingerprint (hash) of the image, for up to 30 days. This is what lets the same chart always produce the same reading rather than a different answer each time. The fingerprint cannot be turned back into the image. Personal chart images are processed for the request; shared sample charts and their readings may be stored on our server.

Images sent to Google are processed to produce your analysis. Google’s handling of that data is governed by their own terms and privacy policy.

Subscriptions

Subscriptions are handled by the store you bought through — Apple’s App Store or Google Play — and by RevenueCat, our subscription provider. To check whether your subscription is active, the app sends an anonymous identifier generated on your device. It is not linked to your name, your email, or your store account, and we never receive your payment details.

We use that same anonymous identifier to limit how many analyses can be requested in a given period, to prevent abuse of the service.

Analytics, diagnostics and advertising measurement

PostHog records actions such as opening the app, starting or completing a reading, viewing an offer, purchase outcomes and notification preferences. Events include anonymous identifiers, app version, platform and coarse network-derived location. A hashed subscription identifier helps reconcile purchases. We do not enable session replay or UI autocapture, and chart images, reading text, ticker symbols and manual purchase amounts are not deliberately sent in product-analytics events.

Sentry receives error reports and diagnostic logs. These may contain text, instrument names and details associated with a failure. AppsFlyer measures advertising attribution, subject to platform permissions and consent. These services process network/device information under their own privacy terms.

Optional notifications

When you enable Daily Recon, your Expo push token, anonymous subscription identifier hash, language and registration date are stored for up to 30 days and used to send a daily notification through Expo, Apple or Google. Turning notifications off unregisters the token. A notification opens a shared dated chart reading; your watchlist and broker-purchase record remain local.

Our data practices

Your data, and deleting it

Deleting the app removes its local data, subject to your device backup settings. Cached readings and push registrations expire within 30 days. Subscription records are handled by RevenueCat and the app stores; cancelling a subscription and uninstalling the app are separate actions. Contact us about server data or diagnostics using the address below.

Note that this also means your readings are not backed up by us. On Android, your device may include app data in Google’s automatic backup to your own Google Drive; that copy belongs to you and is governed by your device settings, not by us. Your subscription is unaffected and can be restored through the store you bought it from.

Children

CandleRecon is intended for adults and is not directed at children.

Changes

If this policy changes, the date at the top changes with it.

Contact

Questions about this policy: privacy@twiddlethumbstudio.com