Privacy Policy

CandleMind ("we", "us", or "our") is a software by 360INT Media Co. Ltd. It operates a multi-layer cognitive observation system for digital asset markets. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using CandleMind, you agree to the practices described in this policy. This policy applies to the CandleMind web application and the CandleMind mobile app available on Google Play.

CandleMind is a software operated by 360INT Media Co. Ltd., which is responsible for your personal data in connection with this service. For any privacy-related questions or requests, contact us at support@candlemind.io.

Account data: When you register, we collect your email address and full name. This is required to create and manage your account.

Profile & preferences: Your selected risk profile, watchlist assets, notification preferences, and onboarding completion status are stored to personalize your experience.

User-generated content: Entries you create in the Decision Journal, positions you log in the Position Monitor, and alerts you configure are stored linked to your account.

Subscription data: If you subscribe to a paid tier, we store your subscription tier, billing cycle, and the PayPal subscription identifier. We do not store your credit card or PayPal account details — payments are processed entirely by PayPal.

Usage & technical data: We automatically collect basic device and usage information such as app version, language preference, and crash/performance data necessary to keep the service running.

We never connect to your exchange accounts or wallets. CandleMind does not access your trading accounts, private keys, or wallet balances.

We do not collect or store payment card numbers, bank account details, or full PayPal credentials — all payment data stays with PayPal.

We do not request sensitive personal data such as government IDs, biometric data, or health data.

To create and manage your account and authenticate your sessions.

To deliver the market interpretation, journal, position monitoring, and alert features you request.

To process subscriptions and deliver subscription-related notifications (confirmations, payment failures, cancellations).

To send optional email notifications you have enabled in your preferences (daily news digest, position alerts, high-impact news).

To operate our affiliate program — tracking referrals and calculating commission — for users who are affiliate partners.

To analyze usage in aggregate to improve the product, fix bugs, and prevent abuse.

PayPal: Processes all subscription payments. PayPal's own privacy policy governs any payment information you submit to them. We only receive a subscription identifier and payment status.

Binance public API: Live market prices are fetched from Binance's public REST API. No personal data is sent to Binance.

Email delivery: Transactional and notification emails are sent through our email provider. Only the information needed to deliver the message is shared.

Google Play: For the mobile app, Google Play services may collect standard install and crash diagnostics data under Google's privacy policy.

We do not sell your personal data to any third party.

For users in the European Economic Area, our legal bases for processing are: (a) performance of a contract (account, subscription, and requested features), (b) legitimate interests in operating, securing, and improving the service, and (c) consent for optional marketing and notification emails — which you can withdraw anytime.

We retain your account data and user-generated content for as long as your account is active. If you delete your account, your journal entries, positions, alerts, preferences, and subscription records are permanently removed within a short period, except where retention is required by law (e.g., financial records).

You can delete your account at any time from Settings → Danger Zone → Delete Account.

Authentication is handled securely with encrypted tokens and sessions. Your journal entries, positions, alerts, and preferences are stored with row-level security — only your account can access your own data.

Payment data never touches our servers; it is handled directly by PayPal's secure infrastructure.

While we apply industry-standard safeguards, no system is perfectly secure. We will notify affected users in the event of a data breach as required by applicable law.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you, request correction or deletion, restrict or object to processing, request data portability, and withdraw consent for optional processing.

To exercise any of these rights, email support@candlemind.io. We will respond within 30 days.

CandleMind is not directed at children under 18, and we do not knowingly collect personal data from anyone under 18. Digital asset markets carry significant risk and are not suitable for minors. If you believe we have collected data from a minor, contact us and we will delete it.

Your data may be processed in countries other than your own (including the United States and Thailand). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date below reflects the most recent revision.