Privacy Policy

Last updated: October 16, 2026

1. Introduction

Candle Shelf (the "App") keeps a record of the candles you collect (the scents you own, how many you have, when you burn them, your ratings, your wishlist and scents you only sniffed in a store), together with photos, on your own device. This policy explains how the App handles information.

The App does not need an account, and we do not run our own server. The candles and photos you add are never sent to us.

By using the App, you agree to the handling described in this policy.

2. Information we do not collect

The App contains no SDKs for advertising, analytics or crash reporting. Barcode scanning uses Google ML Kit, which runs on your device (see section 6D). This is the same in the free version and in Pro.

3. Data stored on your device

The following is stored in the App's private storage (a database on your device and the App's own folder for photos), which other apps cannot read.

The App only receives photos you take with the camera or choose yourself on your device's own screens. It never reads your photo library on its own.

4. When the App connects to the internet

The App connects to the internet only in these cases.

PurchaseGoogle Play processes the purchase of Pro (section 6A). The App may ask Google Play at launch whether you own Pro.
BackupOnly with Pro and only if you turn it on, to your own Google Drive (section 5).
In-app reviewWhen the App asks you to rate it, the request goes through Google Play (section 6A).
LinksOpening the Terms, this policy or the store page from the App opens your browser or Google Play.
Barcode scannerGoogle ML Kit may send technical information to Google (section 6D). Barcode values and camera images are not sent.

Adding, viewing and searching candles, scanning barcodes and checking for duplicates, burn records and stats all work offline. The barcode check only compares against the candles you have recorded in the App; barcodes are not sent anywhere.

5. Google Drive backup

Google Drive backup is optional and included in Pro. You sign in to Google only for this. When you turn it on, your data is stored in a private area of your own Google Drive that only this App can use (the app data folder). The App uses the permission limited to that area (drive.appdata) and cannot read any other files in your Drive.

Backups are encrypted (AES-256-GCM) with a key made from a passphrase you choose, before they leave your device. The key is not stored in the backup; it stays in your device's secure storage. We cannot access your Drive and we do not know your passphrase.

Only photos that are not already in your Drive are uploaded. The latest 5 backups are kept, and photos that no remaining backup uses are deleted from your Drive.

Exporting a backup file (ZIP, encrypted with your passphrase) and exporting a CSV file are free. Where an exported file is kept is up to you.

Please note: if you forget your passphrase, you cannot restore the backup on another device, and we cannot recover it for you.

6. Third-party services

A. Google Play

Handles downloads, updates and payment for Pro. Google handles payment details; we never receive them. In-app review requests also use Google Play.

B. Google Drive and Google sign-in

Used with your own account, only if you turn on Google Drive backup (section 5).

C. Your device's operating system

Android may collect diagnostic data depending on your device settings. We do not control or receive it.

D. Google ML Kit (barcode scanning)

The App reads barcodes with Google ML Kit. Barcodes are read on your device, and the barcode value and the camera image are not sent to us or to Google. According to Google, ML Kit may send technical information, such as device and app details and performance figures, to Google. See Google's ML Kit data disclosure for details.

7. Permissions

CameraOnly to scan barcodes and to take photos of your candles. Images seen while scanning are not saved. A photo is saved on your device only when you choose to keep it.
InternetOnly for the cases in section 4.

Choosing photos uses your device's standard screens, and the App receives only the photo you choose. The App does not ask for location or contacts permissions.

8. Children's privacy

The App is not directed at children and does not collect personal information from anyone.

9. Keeping and deleting data

Important: uninstalling the App deletes the data on your device. To keep it, make a backup or export it to a file first.

10. Security

No system is perfectly secure. Please protect your device against loss and theft.

11. International transfers

We do not run a server, so no data is transferred through us. Google Drive backups are stored in your own Google account under Google's terms, and may be stored outside your country.

12. Your rights

You can see, correct and delete everything the App keeps, inside the App. Because we hold none of your personal data, there is nothing for us to disclose or delete on request.

13. Changes to this policy

We may update this policy. We will announce important changes through an app update.

14. Contact

For questions about this policy, please use the contact page or the support contact on the store listing.