Effective Date: August 19, 2026
Last Updated: August 19, 2026
Candra ("Candra," "we," "us," or "our") operates a mobile application and related services that connect people around shared hobbies and interests, including yoga, drawing, hiking, and many others, and that allow users to book and attend live one-on-one or group video sessions with independent professionals and instructors (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the Service.
The Service is intended solely for individuals who are 18 years of age or older. By creating an account or otherwise using the Service, you confirm that you meet this age requirement and that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not access or use the Service.
This Policy applies to all users of the Candra mobile application, our website (if applicable), and any related services, features, or content offered by Candra, regardless of how you access them (the "Service"). It applies globally to users in all countries and regions where the Service is available, subject to region-specific sections below.
This Policy does not apply to third-party websites, applications, or services that may be linked from within Candra, including payment processors, video conferencing infrastructure providers, or social media platforms. Those third parties maintain their own privacy policies, and we encourage you to review them.
This Privacy Policy should be read together with our Terms of Service. In the event of a direct conflict between the two documents regarding data practices, this Privacy Policy shall govern.
When you create a Candra account, we collect information such as your name or display name, email address, phone number (optional), date of birth (used solely to verify you are 18 or older), gender (optional), password, and profile photo.
We collect the hobbies, interests, skill levels, and preferences you choose to add to your profile (for example, "intermediate yoga," "landscape painting," "weekend hiking") so that we can connect you with relevant communities, other users, and professionals.
We collect the content of messages, comments, and other communications you send through the Service, including direct messages to other users or to professionals, group chat messages, and customer support inquiries.
When you purchase a subscription, book a paid video session, or make an in-app purchase, our third-party payment processors collect your payment card details or other payment method information. Candra itself does not store full payment card numbers; we retain only limited transaction metadata such as purchase history, amount, and date.
Where required, particularly for users applying to become verified professionals or instructors on Candra, we may collect government-issued identification, professional certifications, or other credentials to confirm identity and qualifications.
We automatically collect information about the device you use to access Candra, including device model, operating system and version, unique device identifiers, mobile network information, browser type, and language settings.
We collect information about how you interact with the Service, including features used, screens viewed, search queries within the app, buttons tapped, session duration, crash logs, and referral source.
We collect your IP address, which may be used to infer your approximate geographic location (such as city or region) for purposes including localization, fraud prevention, and content relevance.
If you participate in a live video session or upload photos or videos, the Service will request access to your device camera and microphone. This access is used only for the specific feature you activate and only with your permission, which can be withdrawn at any time in your device settings.
With your explicit permission, we may collect precise GPS location data to help you discover nearby interest-based meetups, local hiking groups, or in-person community events organized through Candra.
You may enable or disable precise location sharing at any time through your device's operating system settings. Disabling location access may limit certain features, such as location-based group discovery, but will not prevent you from using the core Service.
Precise location data is retained only for as long as necessary to provide location-based features and is not used to build a persistent historical location profile beyond what is needed for those features, unless you have separately consented to additional uses.
UGC includes photos, videos, text posts, comments, reviews of professionals, community discussion posts, livestream recordings you choose to save, and any other content you upload, post, or transmit through the Service.
We store UGC on our servers and infrastructure hosted by third-party cloud providers. UGC may be visible to other users depending on the privacy settings and community context in which it is posted (for example, a public interest group versus a private message).
By posting UGC, you grant Candra a worldwide, non-exclusive, royalty-free, sublicensable license to host, store, reproduce, display, and distribute that content solely for the purposes of operating, promoting, and improving the Service, in accordance with your applicable privacy settings.
You retain ownership of your UGC. You represent that you own or have the necessary rights to post the content you share and that it does not infringe the intellectual property or other rights of any third party. We respond to valid copyright infringement notices in accordance with applicable law, including takedown procedures such as the DMCA where applicable.
We reserve the right to review, moderate, restrict, or remove UGC that violates our Community Guidelines, Terms of Service, or applicable law, including content that is abusive, sexually explicit, harassing, or otherwise harmful. See Section 20 for further detail on content moderation.
When you book a video session with a professional or instructor, we collect the session date, time, duration, category (for example, "beginner yoga session"), price, and any notes or goals you share with the professional prior to the session.
Live video sessions are transmitted through encrypted third-party video infrastructure. We do not routinely record video sessions. If a session recording feature is offered, it will only be activated with the explicit consent of all participants and will be clearly indicated within the app.
Information you provide when rating or reviewing a professional, including written feedback, may be shared with the professional and, where you choose to make it public, with other users considering that professional.
If you register as a professional or instructor on Candra, we additionally collect your professional biography, certifications, areas of expertise, availability, payout account details, and client session history, in order to operate the booking marketplace.
If you choose to register or log in using a third-party account (such as Google or Apple Sign-In), we receive basic profile information from that provider, such as your name, email address, and profile picture, as permitted by your settings with that provider.
We may receive information from analytics providers and, where applicable, advertising partners who help us understand app performance and measure the effectiveness of promotional campaigns.
Our payment processors and fraud prevention vendors may share limited information with us, such as transaction status or risk indicators, to help secure the Service.
We use your information to create and maintain your account, enable you to connect with other users who share your interests, facilitate the booking and hosting of video sessions with professionals, and process payments.
We use your interests, activity, and engagement data to recommend relevant interest groups, community members, content, and professionals, and to tailor the app's home feed to your preferences.
We use your contact information to send transactional messages such as booking confirmations, session reminders, security alerts, and customer support responses, as well as optional marketing communications where permitted.
We use information, including UGC and behavioral signals, to detect and prevent fraud, abuse, harassment, impersonation, and violations of our Community Guidelines, and to protect the safety of our users, including minors who may attempt to access the Service in violation of our age requirements.
We analyze aggregated and de-identified usage data to understand how features are used, identify bugs, and inform the design of new features and improvements to matching and recommendation algorithms.
We use and retain information as necessary to comply with applicable laws, regulations, legal process, or governmental requests, including tax and financial reporting obligations related to payments made to professionals.
We process certain information because it is necessary to provide the Service you have requested, such as processing a booking with a professional.
Where required, we rely on your consent to process certain categories of data, such as precise location or camera and microphone access, and to send marketing communications. You may withdraw consent at any time.
We process certain information based on our legitimate interests in operating, securing, and improving the Service, provided those interests are not overridden by your data protection interests or fundamental rights.
We process certain information where necessary to comply with a legal obligation to which we are subject.
Your public profile information, posts, comments, and interest-group activity are visible to other users in accordance with your privacy settings. Messages you send are visible to the recipients.
When you book a session, we share relevant booking details, your display name, and any notes you provide with the professional so that they can prepare for and conduct the session.
We share information with third-party vendors who perform services on our behalf, including cloud hosting providers, payment processors, video conferencing infrastructure providers, customer support tools, analytics providers, and email or push notification delivery services. These providers are contractually bound to protect your information and use it only for the purposes we specify.
We may disclose information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Candra, our users, or the public, including to law enforcement regarding suspected child sexual abuse or exploitation.
If Candra is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your information.
We may share aggregated or de-identified information that cannot reasonably be used to identify you with partners, researchers, or the public, for example in the form of general usage statistics.
Candra does not sell your personal information to third parties for monetary consideration. To the extent certain data-sharing arrangements with analytics or advertising partners may be considered a "sale" or "share" under applicable law such as the CCPA, you may opt out as described in Section 17.
We and our partners use cookies, mobile software development kits (SDKs), pixels, and similar technologies to recognize your device, remember your preferences, and understand app performance.
These technologies are used for purposes including authentication, security, analytics, remembering your settings, and, where applicable, measuring the performance of advertising campaigns.
You can manage certain tracking preferences through your device's operating system settings, including limiting ad tracking identifiers, and where applicable through in-app privacy settings.
We may send push notifications regarding session reminders, new messages, activity in your interest groups, and other service-related updates. You can disable push notifications at any time through your device settings.
We may send you promotional emails about new features, professionals, or community events. You may opt out of marketing emails at any time by using the unsubscribe link included in each email, without affecting transactional communications.
We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Policy, and comply with our legal obligations.
Account information is generally retained for as long as your account remains active and for a limited period thereafter to allow for account recovery and to comply with legal, accounting, or reporting obligations.
Posts, messages, and other UGC may be retained even after account deletion if they have been shared with or are still visible to other users, unless removed pursuant to your deletion request, applicable law, or our content moderation policies.
Records of payments and bookings with professionals are retained for the period required by applicable tax, accounting, and financial regulations.
We implement administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit, access controls, and regular security assessments.
Live video sessions are transmitted using encrypted connections through our video infrastructure providers.
You are responsible for maintaining the confidentiality of your account password and for restricting access to your device. Please notify us immediately at the contact information in Section 26 if you suspect unauthorized use of your account.
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.
Candra operates globally, and your information may be transferred to, stored, and processed in countries other than the one in which you reside, including countries that may have different data protection laws than your home country.
Where we transfer personal information from the European Economic Area, United Kingdom, or Switzerland to a country not deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to protect your information.
You may request a copy of the personal information we hold about you, including account information, UGC, and booking history, in a structured and commonly used format.
You may update most of your account and profile information directly within the app settings, or request correction of inaccurate information by contacting us.
You may request deletion of your account and associated personal information by using the in-app account deletion feature or by contacting us at the email address in Section 26. Certain information may be retained as described in Section 13 where required by law or legitimate business needs.
Where our processing is based on your consent, such as location or camera access, you may withdraw that consent at any time through your device settings or in-app privacy controls, without affecting the lawfulness of processing carried out before withdrawal.
Where applicable under your local law, you may object to or request restriction of certain processing of your personal information, including processing for direct marketing purposes.
You may exercise the rights described in this section by using the relevant in-app settings or by submitting a request to privacy@candra.app. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling certain requests.
This section applies to residents of California and provides disclosures required under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").
In the preceding twelve months, we have collected the categories of personal information described in Sections 2 through 7 of this Policy, including identifiers, commercial information, internet and network activity, geolocation data, audio and visual information, and inferences drawn from your interests and activity.
California residents have the right to know what personal information is collected, to request deletion, to request correction, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and to not be discriminated against for exercising these rights.
To the extent Candra's use of analytics or advertising partners constitutes a "sale" or "share" as defined under the CCPA, you may opt out through your in-app privacy settings or by contacting us at privacy@candra.app.
You may designate an authorized agent to submit requests on your behalf, subject to our ability to verify the agent's authority and your identity.
For purposes of the General Data Protection Regulation ("GDPR") and the UK GDPR, Candra acts as the data controller of personal information processed through the Service.
In addition to the rights described in Section 16, EEA and UK users have the right to lodge a complaint with their local data protection supervisory authority if they believe their data protection rights have been violated.
Our interest and professional recommendation features involve automated processing but do not produce legal or similarly significant effects on you without the opportunity for human review upon request.
Candra is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will promptly suspend the account and delete the associated personal information.
If you are a parent or guardian and believe a minor has created an account or provided us with personal information, please contact us immediately at privacy@candra.app so that we can investigate and take appropriate action, including deletion of the account.
Candra maintains a strict zero-tolerance policy toward any content or conduct that sexualizes, exploits, or endangers minors, including child sexual abuse material (CSAM), grooming, sextortion, or any attempt to use the Service to harm minors, regardless of whether the perpetrator or victim is an actual user of the Service.
We use a combination of automated detection tools, human moderation, and user reporting to identify and remove content or accounts that violate our CSAE policy. Where legally required or appropriate, we report such content and associated account information to the National Center for Missing and Exploited Children (NCMEC) or other relevant law enforcement authorities.
Every user can report suspected CSAE content or behavior directly within the app through the report function on any profile, message, or piece of content, or by emailing safety@candra.app. Reports are reviewed on a priority basis.
Any account found to be in violation of our CSAE policy will be permanently banned from the Service, and all relevant information will be preserved and disclosed to law enforcement as required by applicable law.
We use a combination of automated systems and human review to monitor UGC and user conduct for compliance with our Community Guidelines and Terms of Service, including screening for harassment, hate speech, sexually explicit content, and content endangering minors.
Users may report content, messages, or other users directly within the app. Reported content is reviewed by our Trust and Safety team, and appropriate action may include content removal, warnings, temporary suspension, or permanent account termination.
To conduct moderation, we may review the content of reported posts and messages, associated account information, and behavioral signals such as reporting history and prior violations.
We use your stated interests, activity history, and engagement patterns to build a profile used to recommend interest groups, community members, content, and professionals that may be relevant to you.
You may adjust your listed interests at any time within your profile settings, which will influence the recommendations you receive. You may also provide feedback on individual recommendations to improve their relevance.
The Service may contain links to third-party websites or services, such as a professional's personal website or social media page. We are not responsible for the privacy practices of these third parties.
Live video sessions are powered by third-party video infrastructure providers who process audio and video data solely to enable the real-time transmission of your session and in accordance with their own security safeguards.
Payments are processed by third-party payment processors who maintain their own privacy policies governing the handling of your payment information.
Some browsers offer a "Do Not Track" signal. Because there is currently no industry-standard approach to responding to such signals, Candra does not currently respond to Do Not Track signals, but you may use the privacy controls described in Sections 11 and 16 to manage your preferences.
In the event of a data breach affecting your personal information that requires notification under applicable law, we will notify affected users and relevant regulatory authorities within the timeframes required by law.
Notifications will generally be sent via email to the address associated with your account and, where appropriate, through an in-app notice.
You may delete your account at any time through the app settings. Upon deletion, your profile will no longer be visible to other users, and we will delete or de-identify your personal information within the timeframe required by applicable law, subject to the retention exceptions described in Section 13.
We reserve the right to suspend or terminate accounts that violate our Terms of Service, Community Guidelines, or this Privacy Policy, and to retain relevant information as necessary for legal, safety, or fraud-prevention purposes, including in cases involving CSAE as described in Section 19.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
If we make material changes to this Policy, we will notify you through the app, by email, or through another prominent method before the changes take effect, and we will update the "Last Updated" date at the top of this Policy.
Your continued use of the Service after any changes to this Policy become effective constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Candra Privacy Team
Email: privacy@candra.app
Trust and Safety / CSAE Reports: safety@candra.app