Privacy Policy
Your privacy, physical safety, and personal data control are foundational to CANDY Instant Dating.
1. Overview & Scope
This Privacy Policy explains how CANDY Dating Inc. ("CANDY", "we", "us", or "our") collects, uses, protects, and discloses personal information when you use our mobile application (CANDY — Instant Dating, package name com.nextagent.candy) and related website (candydating.in).
CANDY is designed for spontaneous, real-world meetups between verified adults. Our technical architecture is engineered around data minimization and privacy-by-design. We collect only what is strictly necessary to discover nearby daters and ensure platform integrity.
2. Location Data & The Live Radar (Prominent Disclosure)
CANDY uses device location services (ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION) to power our signature live Radar, connecting verified candidates within walking proximity.
- Your exact GPS coordinates are NEVER displayed, published, or transmitted to any other user.
- Your street address, building, or pinpoint location is NEVER exposed.
- Other users only see broad meet-in estimates (such as "Meet in 10m" or "Within 500m").
- A server-side pseudo-random spatial jitter is applied to prevent geolocation triangulation or stalking.
How Location is Processed
- Foreground Scanning: While you actively browse the live Radar, device coordinates are transmitted securely over TLS/HTTPS to compute approximate candidate distances.
- Background Updates: When the app is in the background, periodic sync updates your rough discovery sector so nearby singles can send spontaneous meetup invites. You can disable background radar at any time via in-app Settings.
- Zero Geofenced Tracking: We do not track your historical movement trails, frequent routes, or daily routines. Current coordinates overwrite previous coordinates in volatile memory.
3. Information We Collect & Why
| Data Category | Specific Items | Purpose |
|---|---|---|
| Account & Identity | Verified phone number (+91), display name, age/birthdate, gender, bio, and dating preferences ("Looking For"). | Account creation, age verification (18+), profile presentation, and matching. |
| Photos & Media | Profile photos and thumbnail avatars selected by you via the Android System Photo Picker. | Displaying your verified profile to candidates on the Radar. (We do NOT request broad device storage or gallery permissions). |
| Location Coordinates | Approximate latitude and longitude while active on Radar. | Hyper-local distance calculations and real-time candidate discovery. |
| In-App Messages | Text chat messages exchanged after a mutual meetup invitation is accepted. | Facilitating spontaneous meetup communication. (Chat is exclusively text-based to prevent unsolicited explicit imagery). |
| In-App Billing | Google Play Order IDs (GPA.xxxx), subscription status, Sugar Rush token balance. | Managing VIP subscriptions and boost entitlements via Google Play In-App Billing v7. (We never access your bank or card details). |
| Technical & Analytics | Device model, OS version, FCM push token, Firebase Crashlytics logs, Google Advertising ID (AD_ID). | App reliability, push notifications for meetup invites, crash resolution, and attribution. |
4. Data Sharing & Third-Party Service Providers
We NEVER sell, rent, or trade your personal data or location coordinates to third-party data brokers, marketers, or advertisers.
We share data strictly with trusted infrastructure partners essential for operating the CANDY service:
- Google Firebase (Google LLC): Cloud Firestore, Firebase Authentication (SMS OTP verification), Firebase Cloud Messaging (FCM push notifications), and Crashlytics diagnostics.
- Google Play Billing (Google LLC): Processing in-app subscriptions and consumable Sugar Rush boosts securely via Google Play.
- Meta Platforms (Facebook SDK): Aggregated installation attribution and marketing performance measurement.
- Cloudflare Inc.: DDoS protection, SSL/TLS encryption, and secure API reverse proxy routing.
5. Dating Safety, Content Moderation & Abuse Reporting
CANDY maintains a strict Zero-Tolerance Policy for harassment, non-consensual behavior, fraud, and illicit activity:
- In-App Reporting: Every profile card, radar sheet, and chat screen contains an instant "Report User" button communicating directly with our trust and safety moderation queue.
- Instant In-App Blocking: Tapping "Block" instantly severs all contact. Blocked users can never see your radar profile, view your meetup status, or contact you.
- Text-Only Messaging: CANDY direct messaging is text-only. Photos, videos, and external media files cannot be transmitted in chat, eliminating unsolicited explicit images.
- Automated & Human Moderation: Reported accounts and inappropriate profile media undergo prompt automated screening and human administrative review. Violations result in immediate permanent device and phone blacklisting.
6. Your Rights & Account Deletion (Google Play Compliance)
You have complete ownership and control over your personal data:
- Right to Rectification: Edit your name, bio, preferences, and photos at any time in the Profile section.
- Right to Withdraw Consent: Revoke location permission at any time in Android System Settings.
- Right to Complete Erasure (Account Deletion):
- In-App Path: Navigate to Settings > Delete Account > Confirm. Your profile, photos, chat threads, and location data are instantly and permanently purged from active production servers.
- Public Web Path: If you have uninstalled the application or cannot access your phone, you can submit an instant deletion request at our dedicated portal: candydating.in/delete-account.html.
Retention Schedule
When you delete your account, your profile, photographs, location history, chat messages, and push notification tokens are deleted immediately (0 days). Non-personal transaction metadata (Google Play GPA purchase tokens) is retained solely where strictly mandated by statutory accounting and anti-fraud regulations.
7. Data Security Practices
We implement industry-standard technical safeguards to protect your information:
- Encryption in Transit: All client-to-server communications use modern TLS/HTTPS encryption protocols. Cleartext (HTTP) traffic is strictly forbidden in production.
- Ephemeral Coordinates: Location coordinates are stored only in volatile cache and are continuously overwritten with randomized spatial jitter.
- Restricted Access: Backend databases and administrative consoles operate under strict principle-of-least-privilege access controls with multi-factor authentication.
8. Contact & Privacy Inquiries
If you have questions regarding this Privacy Policy, your personal data, or wish to exercise your privacy rights, contact our Data Protection Team:
Email: [email protected]
Website: https://candydating.in
Data Deletion Portal: https://candydating.in/delete-account.html