Candor

Privacy Policy

Vouched App, Inc. (d/b/a Candor)

1. Eligibility and age (18+)

Candor is intended only for adults. You must be at least 18 years old to create an account or use the Service. We ask for your date of birth at sign-up to confirm eligibility and do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, contact us at privacy@candortheapp.com.

2. Information we collect

2.1 Information you provide directly

• Account and identity: your real name, email address, and date of birth (used to confirm you are 18+).
• Profile information: photos, bio, city/general location, interests, and the connection intents you choose (friendship, pairing, and/or being a connector), including the level you set for each. Not every intent is set when you join — the Pairing intent in particular starts at its lowest setting and changes only when you move it yourself. See Section 4.4.
• Gender: if you choose to provide it, the gender you identify with. This is optional, you can change or clear it at any time, and you control whether it appears on your profile. See Section 4.
• Who you are interested in: if you use the Pairing track, you may choose to tell us who you are interested in connecting with romantically. This is optional, it is hidden by default, and it is shown on your profile only if you turn it on. Because this information can indicate sexual orientation, we treat it as sensitive — see Section 4.
• Personality / archetype data: your answers to our archetype questionnaires and the archetype results derived from them. See Section 3 for important context on how we treat this data and what it is — and is not.
• Vouches and nominations you create: the character vouches you write about other people, the traits you attribute to them, and the introductions you propose. This is information about other people that you choose to share — see Section 5.
• Content and communications: posts, comments, messages and direct messages, chat-room activity, calendar and event entries, and anything else you submit through the Service.
• Support and correspondence: information you provide when you contact us, respond to surveys, or report another user.

2.2 Information collected automatically

• Usage data: how you interact with the Service — screens viewed, features used, actions taken, and timestamps.
• Device and technical data: device type, operating system, app version, and similar diagnostic information.
• Crash and performance diagnostics: we use Sentry, a third-party error-monitoring service, to collect crash reports and performance data so we can find and fix problems. These reports may include your user identifier, the screen you were on, and technical details about the error. We use them only to diagnose and fix issues.
• Approximate location: we use the general location (such as the city) you provide or that is inferred from your device or network to power discovery and nearby connections. We do not collect precise GPS location.

2.3 Information from others about you

Because vouching and nominating are core to Candor, other users may submit information about you — for example, a vouch describing your character, or a nomination proposing to introduce you to someone. In some cases, a person may be nominated or referred before they have created an account. Section 5 describes how we handle this category of information, which is one of the more distinctive aspects of how Candor works.

3. Personality / archetype data — important context

Candor's archetype system is a personality and connection framework designed for social matching and self-reflection. It is not a psychological, psychiatric, or clinical assessment, is not a medical or mental-health diagnosis, and should not be relied upon as professional advice of any kind. Your archetype answers and results are used to personalize your experience, inform compatibility and discovery, and present reflective content.

We treat your archetype questionnaire answers and your connection intents with heightened care. You can edit your intents in settings, retake questionnaires, and delete your account (which removes this data — see Section 10).

4. Sensitive information and your explicit consent

Some information you may choose to share with us is treated as sensitive under privacy laws, including the California Consumer Privacy Act as amended (CCPA/CPRA) and, where it applies, the EU General Data Protection Regulation (GDPR). On Candor this means information about who you are interested in, because it can indicate sexual orientation.

4.1 It is optional, and it is your choice

We collect this information only if you choose to provide it. You are never required to provide it, no feature is withheld from you for declining, and you can change or clear it at any time from your profile settings. Where the law requires explicit consent to process this category of information, providing it in the app is that consent, and you can withdraw it at any time by clearing the field. Withdrawing does not affect anything else about your account.

4.2 How we limit its use

• It is hidden by default. It appears on your profile only if you turn on "Show who I'm interested in."
• We use it only to display it on your profile at your direction.
• We do not sell it, use it for advertising, use it for profiling or automated decision-making, or share it with third parties for their own purposes.

4.3 Gender

Gender is also optional. Unlike who you are interested in, gender is shown by default because it appears on your profile and helps people find each other. You can hide it at any time with the "Show my gender on my profile" control.

Gender is used to power discovery filters on the Pairing track. This filtering applies only among people who have opted into Pairing discovery by raising their Pairing intent above its lowest setting (Section 4.4). If you have not opted in, your gender is not used for Pairing discovery filtering.

Choosing "Prefer not to say," or leaving gender blank, does not remove you from discovery. Among people who have opted into Pairing discovery, those who have not stated a gender appear in Pairing discovery results regardless of the filters another person has set.

4.4 The Pairing intent level

Your Pairing intent level is the single control that determines whether you appear in Pairing discovery.

• It starts at its lowest setting for every new account. We do not set it for you, and it is not set as a side effect of anything else you do on Candor.
• While it is at its lowest setting, you do not appear in Pairing discovery results, and your gender is not used for Pairing discovery filtering.
• Raising it above the lowest setting is an affirmative choice you make in the app. You can lower it again at any time.
• Having a Pairing archetype is separate from this. Your archetype describes how you relate to people; it does not make you discoverable and does not indicate that you are looking for anything.

You can also control, separately, whether your Pairing archetype appears on your profile at all.

5. Information about other people (vouches, nominations, and non-users)

When one user submits information about another person — sometimes a person who is not yet a user — both the submitter and Candor take on responsibilities to the person the information is about.

5.1 When you submit information about someone else

When you write a vouch about another person, nominate someone, or otherwise share information about a third party, you represent that you have a good-faith basis to share that information and that it is truthful and not intended to harass, defame, or harm. You are responsible for the information you submit about others. Our Terms of Service set out these obligations in detail.

5.2 Information about people who are not yet users

A nomination or referral may name a person who has not joined Candor. If you are named by another user and are not a member, we use that information only to facilitate the introduction or invitation that the submitting user initiated, and to let you exercise the rights described below. We do not build advertising profiles of non-users.

5.3 Your rights over information others share about you

If you are the subject of a vouch, nomination, or other content another user submitted about you, you can:

• Review information others have shared about you that appears on your profile or is associated with your account;
• Decline a nomination, which removes it from the relevant views;
• Request removal of specific information about you by contacting privacy@candortheapp.com; and
• Report content about you that is false, harassing, or otherwise violates our policies.

5.4 Nominations that propose a romantic introduction

A nomination that proposes a romantic introduction can only be made by someone who is mutually connected to both people on Candor. A stranger cannot propose a romantic introduction involving you. You can decline any nomination, and declining removes it from the relevant views.

6. How we use your information

• To provide, operate, and improve the Service;
• To create and display your profile and identity, including your archetype and, where you have chosen to share them, your gender and who you are interested in;
• To power discovery, compatibility, and introductions;
• To enable vouches, nominations, messaging, and other connection features;
• To keep the Service safe — investigating reports, screening content, enforcing our Terms, and preventing abuse;
• To communicate with you about your account, features, and support requests; and
• To comply with legal obligations.

7. How we share your information

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. We share information only as described here:

• With other users, by design: your profile, real name, archetype, posts, vouches, and similar content are visible to others according to your visibility settings and the connection model. Gender and who you are interested in are visible only in accordance with the controls described in Section 4 and Section 8.
• Service providers: vendors who host and operate the Service on our behalf under contract — including our cloud database and infrastructure provider, our error-monitoring provider (Sentry), our email and communication tools, our subscription-management provider, and our e-signature service.
• Safety and legal: we may disclose information to respond to legal process, enforce our Terms, protect the rights, safety, and property of Candor, our users, or the public, and investigate suspected violations or harm.
• Business transfers: if Candor is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Gender and who you are interested in are never shared with advertisers or data brokers.

8. Visibility and your choices

• Profile visibility: you can set your profile to community (discoverable by members) or private (findable only as a limited, locked stub until you approve a follow request). Private profiles are not shown in discovery or search results to people you have not approved.
• Intent and archetype display: you control which intents and archetype information are shown publicly, for each track separately.
• Pairing intent level: controls whether you appear in Pairing discovery. It starts at its lowest setting and changes only when you move it. See Section 4.4.
• Gender display: "Show my gender on my profile" controls whether your gender is visible to others. It is on by default and you can turn it off at any time.
• Interested-in display: "Show who I'm interested in" controls whether this appears on your profile. It is off by default and appears only if you turn it on.
• Notifications: you can manage in-app and email notification preferences in settings.
• Access, correction, deletion: you can edit much of your information in the app, and you can delete your account and data (Section 10).

9. Content screening and moderation

To keep the Service safe, we screen content submitted to Candor — including posts, comments, vouches, profile text, and messages — against a list of prohibited terms. Content matching that list may be blocked at the point of submission or flagged for human review. We also review reports submitted by users, and we may remove content or restrict or suspend accounts that violate our Terms or Community Standards.

Moderation decisions are recorded so that we can review our own consistency and respond to appeals. If content you posted is removed, you will still be able to see that it was removed.

10. Data retention and deletion

You can delete your account and associated data at any time from within the app (Settings → account deletion). When you delete your account, we remove your profile and the personal information associated with your account, including content you authored and information others submitted that is about you, except as noted below.

10.1 Limited retention after deletion

• Safety reports: if another user has filed a safety or abuse report about you, that report may be retained after your account is deleted, in a form that is no longer linked to a live profile, so that we can maintain the integrity of our safety records. This prevents misuse of account deletion to erase abuse history.
• Moderation records: if we took a moderation action on your account or content, a record of that action may be retained for the same reason.
• Backups: deleted data may persist in routine, secured backups for a limited period until those backups age out on their normal cycle.
• Logs and legal records: limited technical logs and records we are required to keep may be retained for the applicable retention period.

When we remove an account for violating our Terms, we may keep content, reports, messages and records related to the violation to enforce our Terms, protect Candor and its members, and meet legal obligations.

Note on others' records: content you sent to another person (such as a direct message) is part of that person's record of the conversation; deleting your account removes your copy and the conversation as we store it, but we cannot retrieve material another user has independently saved, screenshotted, or exported.

11. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls and row-level security on our database. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

12. State privacy rights

Vouched App, Inc. is a Delaware corporation with its principal place of business in Illinois. Depending on where you live, state privacy laws may give you specific rights over your personal information.

12.1 Illinois residents

The Illinois Biometric Information Privacy Act (BIPA) regulates the collection of biometric identifiers such as fingerprints, retina scans, voiceprints, and face geometry. Candor does not collect, capture, store, or use biometric identifiers or biometric information. Photographs you upload are stored as images and are not used to derive face geometry or any other biometric identifier.

12.2 California residents

If you are a California resident, the California Consumer Privacy Act, as amended (CCPA/CPRA), may give you rights to know, access, correct, and delete personal information we hold about you, and to limit certain uses of sensitive personal information.

• Right to know and access the categories and specific pieces of personal information we have collected;
• Right to correct inaccurate personal information;
• Right to delete personal information, subject to exceptions (see Section 10);
• Right to limit use and disclosure of sensitive personal information; and
• Right not to receive discriminatory treatment for exercising these rights.

The sensitive personal information we may collect is described in Section 4. We use it only to display it on your profile at your direction, and we do not use or disclose it for any purpose that would require offering a separate right to limit beyond the controls already provided in the app.

We do not sell personal information or share it for cross-context behavioral advertising. To exercise these rights, contact us at privacy@candortheapp.com. We will verify your request as required by law.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means and update the "Effective" date above. Your continued use of the Service after an update means you accept the revised Policy.

14. Contact us