Privacy Policy

Effective April 27, 2026 · Last updated October 2, 2026

This Privacy Policy explains how Candor (the "App") handles information.

1. Who We Are

Provider / Developer: Markus Levi
Contact Email: support@candorjournal.com
Support Page: https://candorjournal.com/support

If you have questions about this Privacy Policy or the App’s privacy practices, you may contact the developer using the email address above or through the support page.

2. Overview

The App is designed as a private personal logging tool for sensitive health-related and personal data.

The App does not require user accounts.

The App is designed so that user-entered information is stored locally on the user’s device rather than collected by the developer through a developer-operated backend.

3. Information Processed in the App

Depending on how you use the App, you may choose to enter sensitive health-related and personal information, such as notes, dates, reminders, medication-related logs, and other private records that you decide to store in the App.

This information is used only to provide the App’s user-requested functionality, including recording, organizing, viewing, protecting, and managing your private entries inside the App.

The developer does not automatically receive your private entries simply because you store them in the App.

4. No Developer-Operated Backend Collection

The App does not use a developer-operated backend to collect or store your private logs.

The developer does not sell your private entries and does not use them for advertising, marketing profiling, or cross-app tracking.

5. On-Device Storage and Optional iCloud Sync

Information entered into the App is stored locally on your device.

If you enable iCloud or related Apple sync features on your device, certain App data may sync using Apple infrastructure associated with your Apple Account, including between your iPhone, iPad and Mac.

This synchronization is provided through Apple services rather than a separate developer-operated cloud backend.

If you use the Apple Watch app, your iPhone sends the information the Watch displays, such as doses, reminders and upcoming tests or vaccinations, directly to your paired Apple Watch using Apple’s device-to-device connection, and the Watch sends dose marks and quick entries back to your iPhone. This exchange does not pass through a developer-operated server.

6. Notifications

The App may request permission to send local notifications for reminders and similar App functions.

These notifications are generated on your device.

The App allows you to choose among different notification display modes, including a mode without sensitive information, a mode that may display sensitive information, and a badge-only mode.

Because notification content may appear on the lock screen or other visible device surfaces depending on your settings, you are responsible for choosing the notification mode that best fits your privacy needs.

The same applies to widgets, Live Activities, Control Center controls and Apple Watch complications, if you choose to add them. They use neutral labels by default; names and other details are shown there only if you enable that in the App’s settings.

7. Face ID / Touch ID

The App may offer Face ID or Touch ID as an optional device-level access protection feature.

This feature relies on Apple’s local authentication framework on your device.

The developer does not receive your underlying biometric templates through standard use of Face ID or Touch ID in the App.

8. Analytics

The App does not use third-party analytics SDKs, ad SDKs, or third-party crash reporting SDKs.

The developer may review analytics made available by Apple through App Store Connect or similar Apple-provided reporting tools.

Where analytics are collected only by Apple, Apple states that apps do not need to declare such Apple-collected information as developer-collected app data for App Privacy Details.

9. Feedback Emails

The App may include a Feedback option that opens your email application with a draft message to the developer.

Any email sent through that workflow is sent voluntarily by you outside the App.

If you choose to send an email, the developer may receive your email address and any information you voluntarily include in the message.

That information is used only to review, respond to, and manage your support or feedback request.

You should avoid including unnecessary sensitive health-related or personal information in support emails unless needed to describe a technical issue.

10. Subscription

The App requires an active paid subscription ("Candor+") to access its features.

A 14-day free trial is available for new users.

Pricing: US$19.99 per year, billed annually.

The subscription automatically renews at the end of each billing period unless canceled at least 24 hours before the end of the current period.

The free trial converts to a paid subscription upon expiration unless canceled beforehand.

If the subscription is not renewed, adding and editing records will be suspended until the subscription is reactivated. Your existing records remain available to view, export and delete.

Subscriptions do not create any entitlement to medical advice, personalized services, priority support, ownership rights, or guaranteed future features beyond those explicitly available at the time of purchase.

All subscriptions are processed and managed by Apple through your Apple Account.

Billing, renewal, cancellation, and refund policies are governed by Apple's terms and conditions.

You can manage or cancel your subscription at any time in Settings → your name → Subscriptions on iPhone or iPad, or in the App Store → your account → Subscriptions on Mac.

Because the App does not use a developer-operated backend for private logs, the developer does not disclose those private logs to third parties through a developer-run cloud service.

If you choose to use Apple services such as iCloud, Apple Health, App Store billing, or Apple-provided analytics, related information may be processed by Apple under Apple’s own terms and privacy policies.

If you voluntarily send feedback by email, your email provider and Apple Mail or other mail services may process that communication under their own policies.

If you export or share information from the App as described in Section 13, it is handled by the app, service or person you choose to send it to.

12. User Controls and Deletion

You can manage your entries directly within the App.

The App includes a delete-all function with confirmation so that you can erase your locally stored data. If iCloud sync is enabled, this function also deletes your App data from iCloud.

The App also includes an emergency data deletion feature intended to allow fast removal of locally stored data in urgent situations.

If you delete the App from your device, locally stored data may also be removed, subject to your device, backup, and iCloud settings. Copies synced to iCloud or to your other devices are not removed by deleting the App from one device.

The App lets you export your information when you choose to: CSV files, a PDF report (for example, to share with your clinician), and a full backup file that you can optionally protect with a password. Password-protected backups are encrypted on your device before the file is created.

The App can also prepare a message for you to send to a partner after a positive test. It opens the system share sheet; the App does not send messages automatically.

Exported files and shared messages are created only at your request and go only where you send or save them. Once they leave the App, they are no longer protected by the App’s lock, and the developer does not receive them.

Outside of these user-initiated exports, optional iCloud synchronization and Apple Health integration through Apple services, the Apple Watch connection described in Section 5, and any feedback email you voluntarily send, the App is not designed to transmit your private entries out of the App.

14. Other Permissions

In addition to local notifications and optional Face ID / Touch ID protection, the App may request permission to write to Apple Health on devices that support it. Apple Health is not available in the Mac app.

Apple Health integration is optional and off until you enable it. When enabled, the App writes reflection ratings, selected feelings, and sexual activity, including whether a condom was used, to Apple Health. The App does not read data from Apple Health. Written reflections, partners, practices and notes are not written to Apple Health.

Information written to Apple Health is not used for advertising, marketing or data mining, and is not sold or shared with third parties by the developer. You can turn off the integration in the App or revoke access at any time in the Health app or system settings.

If the App’s permissions change in a future version, this Privacy Policy may be updated accordingly.

15. Washington Consumer Health Data Notice

The App may process information that could be considered consumer health data or other sensitive health-related information under applicable U.S. state privacy laws, including Washington’s My Health My Data Act.

To the extent such laws apply, the intended purpose of processing is to provide the user-requested functionality of the App, including private on-device logging, reminders, access protection, optional Apple-based synchronization, optional Apple Health integration, user-initiated exports, and user-controlled deletion features.

The developer does not intend to sell consumer health data and does not operate a separate backend to collect private user logs through the App.

16. Children

The App is not intended for children.

17. Security

The App is designed to reduce exposure of private entries by keeping data on device instead of transmitting it to a developer-operated backend.

However, no method of electronic storage, synchronization, or communication can be guaranteed to be absolutely secure.

You remain responsible for securing your device, screen lock, Apple Account, iCloud settings, email communications, and any files you export from the App.

18. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the App, legal requirements, or privacy practices.

The most current version should be made available through the App or the support page.

19. Website Cookies

This section concerns the website at candorjournal.com, not the App. The two are separate systems and behave differently: the website is an ordinary website and uses a small number of cookies, while the App has no analytics, no third-party SDKs, and no developer-operated server.

Essential cookies

The website is hosted on the Tilda platform, which sets a small number of technical cookies needed for pages to load, for security, and for basic site operation. Your choice in the cookie banner is also stored so that you are not asked again on every page. These cookies cannot be switched off, and they are not used to identify you.

Analytics cookies

If you accept them, the website may set analytics cookies that produce anonymous statistics about which pages are visited. These are used only to understand which content is read. They are not linked to your identity, are not shared with advertising networks, and are never combined with anything from the App. If you decline, they are not set.

Advertising cookies

The website does not use advertising, retargeting, or cross-site tracking cookies.

Fonts

Pages load typefaces from Google Fonts. Loading a font means your browser contacts Google’s servers, and Google receives your IP address as part of that request. No cookie is set by this, but it is a transfer of technical data to a third party and is disclosed here for completeness.

Changing your choice

The cookie banner appears on your first visit. You can change your decision at any time through the Cookie settings link in the footer of any page. Clearing your browser’s cookies also resets the choice, and the banner will appear again.

20. Language

This Privacy Policy may be made available in languages other than English for convenience. In the event of any inconsistency between the English version and a translation, the English version governs, except where mandatory law provides otherwise.

21. Contact

For privacy questions or requests, please contact:

Provider: Markus Levi
Contact email: support@candorjournal.com
Support page https://candorjournal.com/support