Privacy Notice

Who we are

Kandl operates Kandl and is the data controller for the personal data described here. Contact us at support@kandl.app.

What we collect and why

• Account data (email address, login credentials, Google account identifier if you sign in with Google) — to create and secure your account. Legal basis: performance of our contract with you.
• Learning data (quiz answers and scores, pattern progress and review schedule, study days and streaks, trade plans, notes, settings) — to provide the training features and sync them across your devices. Legal basis: contract.
• Uploaded chart screenshots — sent to our AI provider to generate practice questions for you. Legal basis: contract.
• Security and usage records (AI request logs with outcome and timestamp, IP address, device/browser information, error reports) — to prevent abuse, enforce usage limits and fix faults. Legal basis: legitimate interests in keeping the Service secure and working.
• Support messages — to answer you. Legal basis: legitimate interests.

Who we share data with

• Hosting, database and authentication providers that run the Service;
• Our AI provider, for the screenshots and prompts you submit to AI features;
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, invoicing and tax compliance;
• Professional advisers (legal, accounting) where needed;
• Authorities where required by law.

We do not sell your personal data and we do not use it for advertising.

Retention

We keep account and learning data for as long as your account exists. When you delete your account we delete your personal data, apart from records we must keep for legal or accounting reasons (billing records held by Paddle). Security logs are kept for a short period and then removed or anonymised.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Your rights

Depending on where you live you may have the right to access, correct, erase, restrict or port your data, to object to processing, and to withdraw consent. You can export your data and delete your account yourself from the account page, or email support@kandl.app and we will respond within one month. If you are in the UK/EEA you can also complain to your supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, per-user access rules on the database, and server-side checks on paid and AI features.

Cookies and local storage

Kandl uses only essential storage: a login session token, your theme and accessibility preferences, and locally-stored practice data such as trade plans and checklists. We do not use advertising or cross-site tracking cookies. Clearing your browser storage removes local data and signs you out.