Privacy policy

What we never collect

No account, name, email address, contacts or location.

Microphone: the sound is analysed on your device only to tell when you blow. It is never recorded, stored or sent anywhere.

Candle sessions

When you blow out a candle we store the estimated grams of CO₂, how many seconds it was lit and how many times it was blown out, with no identifier attached. These records only feed the shared CO₂ total.

Cards, share links and messages

A card travels inside the link you share: your cake, the card design, the song, and the message and name you write. We do not store your message or name on our servers, and the website removes them from the address bar and from analytics.

Photo cards

If you send a photo card, the app first shrinks your photo and removes its hidden details (such as location and camera). It is then stored on Google Cloud for 30 days and deleted automatically. Only people with the card link can see it; it is not shown in link previews or anywhere else.

You can delete it sooner from the screen shown after sending. Anyone who receives a photo card can report it to us, and we remove photos that should not be there. Photos are not scanned or analysed. Only share photos you have permission to share.

Reminders, birthdays and your garden (app)

Reminders are scheduled on your phone and only arrive if you allow notifications. You can turn them off in the app's Settings at any time. To pick a good time for them, the app notes the hour you usually open it; this stays on your phone.

Birthdays you save (a name and a date, and a birth year if you add one) and your garden's progress are kept on your phone and in your own iCloud or Google backup, so a new phone or a reinstall picks up where you left off. We never receive them. Analytics only records that a reminder was opened or a birthday was saved, never names or dates.

Wishes (website)

Leaving a wish is optional. Wishes are stored anonymously and nobody can read them back through the app or the website.

Analytics and crash reports

We use Google Analytics for Firebase to understand how e-Candle is used (for example, candles lit, blown out and shared). On the website, analytics cookies are only used if you accept them; otherwise Google receives cookieless signals only.

The app sends crash reports through Firebase Crashlytics so we can fix bugs.

Ads (app)

The app shows ads from Google AdMob. In the EEA, the UK and Switzerland we ask for your consent with Google’s consent form, and you can change your choice at any time in Settings → Privacy options.

On iOS, ads are always non-personalised and we do not track you across other apps or websites.

Purchases (app)

Premium cards and Remove ads are one-time purchases made through the App Store or Google Play. Apple or Google handle the payment; we never see your card details, name or email.

We use RevenueCat to check what you have bought. It keeps an anonymous purchase ID and your store receipts, so your purchases can be restored on a new phone. We have no accounts, so nothing links these purchases to you.

Where data is processed

The services above are provided by Google (Firebase, Google Cloud, AdMob) and RevenueCat (purchases), which may process data in the United States. Analytics data is kept according to our Google Analytics retention settings; candle sessions and wishes contain nothing that identifies you.

Your rights

Because we do not hold data linked to you, we usually cannot find “your” records, but you can always write to hello@thecraftedcode.com and we will help. You also have the right to complain to your data protection authority.