Privacy Policy for Candlytics

Introduction

Welcome to Candlytics (“we,” “us,” or “our”), operated by RIPPPL LLC, doing business as Hibba Ventures. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Candlytics mobile application (“Candlytics” or “the App”).

By using Candlytics, you agree to the practices described in this policy. If you do not agree, please do not use Candlytics.

Information We Collect

Information You Provide

Profile Information: When you complete onboarding, you provide:

• Trading experience level (beginner, intermediate, advanced)
• Markets you trade (stocks, crypto, forex, options, futures, indices)
• Preferred timeframes (intraday, swing, position)
• What you want to use Candlytics for (learning, second opinion, journaling)

Chart Screenshots: You upload screenshots of charts you want analyzed. These images are used solely to generate pattern recognition and structure commentary.

Account Information: When you create an account, we collect your email address and a hashed password (or your Apple Sign-In identifier).

Notes and Annotations: Any notes you save alongside an analysis (your own thesis, invalidation level, follow-up observations).

What We Do NOT Collect

• We do not collect brokerage credentials, account numbers, or trading positions.
• We do not connect to any broker, exchange, or wallet.
• We do not receive your real-money holdings, balances, or order history.
• We do not collect government IDs or financial identifiers (SSN, EIN, etc.).

Information Collected Automatically

Usage Data: We collect anonymous usage statistics through Mixpanel, including:

• Features you use
• Time spent in the app
• App crash reports and performance data
• Approximate location (country-level only)

Device Information: We may collect:

• iOS version
• Device model
• App version
• Time zone

Subscription Information: Your subscription status and history are managed through Apple’s App Store and Superwall, our subscription management platform.

How We Use Your Information

We use your information to:

• Generate AI pattern recognition and chart commentary
• Save and sync your analyses across your devices
• Tailor onboarding-driven defaults (markets, timeframes) to your preferences
• Improve the App’s features and performance
• Process subscription payments through Apple
• Respond to support requests
• Send service-related communications (with your permission)

How Your Chart Screenshots Are Handled

Your chart screenshots are central to how Candlytics works. Here is exactly what happens to them:

Local Storage: Screenshots are saved to your device’s app sandbox storage. They are not stored in your photo library, camera roll, or anywhere else on your device that other apps can access.

AI Analysis: When you submit a chart, your screenshot is sent securely to Anthropic’s Claude API for analysis. Anthropic processes the image to generate pattern detection and structural commentary but does not store, train on, or retain your screenshots according to their data usage policy.

Cloud Sync: To sync your analyses across your devices, your chart screenshots and the generated commentary are uploaded to a private storage bucket on Supabase. The bucket is protected with row-level security so only your account can read or write to your own folder; the file path is scoped to your user ID.

Deletion: You can delete any analysis and its associated screenshot at any time from within the App. When you delete the App, all local copies are removed from your device.

Privacy by Design: Screenshots are transmitted only when you request analysis or when sync runs. They are not transmitted at any other time.

Account Deletion: From Settings → Delete account, you can permanently delete your Candlytics account. This immediately removes your authentication record, all saved analyses, notes, onboarding answers, and every chart screenshot from both the device and Supabase cloud storage. The action cannot be undone and does not cancel an Apple subscription — manage that separately in Settings → Apple Account → Subscriptions.

Third-Party Services

Candlytics uses the following third-party services to operate:

Anthropic (Claude API): Provides AI analysis of your chart screenshots. See Anthropic’s Privacy Policy at anthropic.com/legal/privacy.

Supabase: Provides authentication, user profile storage, and encrypted cloud storage for your analyses and chart screenshots. See supabase.com/privacy.

Mixpanel: Provides anonymous app analytics. We do not send personally identifying information to Mixpanel. See mixpanel.com/legal/privacy-policy.

Superwall: Manages our paywall and subscription experience. See superwall.com/privacy.

Apple (App Store): Processes all subscription payments. We do not see or store your payment information. See apple.com/legal/privacy.

Data Retention

• Chart screenshots: Stored on your device and in your private Supabase storage folder, until you delete the analysis, delete your account, or delete the App. Deleting your account removes all screenshots from Supabase immediately.
• Analyses and notes: Stored on your device and in your Supabase account, until you delete them, delete your account, or delete the App.
• Profile data: Stored on your device and in your Supabase account, until you delete your account or delete the App.
• Usage analytics: Retained by Mixpanel according to their data retention policies, typically 5 years.
• Subscription data: Retained as required by Apple and applicable law.

Your Rights

All Users

You have the right to:

• Delete your data by deleting individual analyses, deleting your account, or deleting the App
• Opt out of analytics tracking through your iOS Settings
• Contact us about privacy concerns

EU/UK Residents (GDPR)

If you are in the European Union or United Kingdom, you have additional rights:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise these rights, email privacy@hibbaventures.com.

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of sale of personal information (note: we do not sell personal information)
• Non-discrimination for exercising your rights

To exercise these rights, email privacy@hibbaventures.com.

Children’s Privacy

Candlytics is not intended for users under the age of 18. Trading and investing involve legal and financial decisions reserved for adults, and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has used Candlytics, please contact us at privacy@hibbaventures.com and we will delete any associated information.

Data Security

We take reasonable measures to protect your information:

• Screenshots on-device are stored in the iOS app sandbox with system-level protections
• Cloud-synced screenshots are stored in a private Supabase bucket protected by row-level security, with paths scoped to your user ID so no other account can read or write to your folder
• Network transmissions to Anthropic, Supabase, and other services use HTTPS encryption
• Passwords are hashed; we never see your plaintext password
• Access to our development and Supabase admin systems is restricted to authorized personnel

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

International Data Transfers

If you access Candlytics from outside the United States, your information may be transferred to and processed in the United States, where our service providers are located. By using Candlytics, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last Updated” date. Your continued use of Candlytics after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or how Candlytics handles your data, contact us:

Email: privacy@hibbaventures.com
Company: RIPPPL LLC (doing business as Hibba Ventures)
Website: hibbaventures.com