Candle Shelf
Candle Shelf (the "App") keeps a record of the candles you collect (the scents you own, how many you have, when you burn them, your ratings, your wishlist and scents you only sniffed in a store), together with photos, on your own device. This policy explains how the App handles information.
The App does not need an account, and we do not run our own server. The candles and photos you add are never sent to us.
By using the App, you agree to the handling described in this policy.
The following is stored in the App's private storage (a database on your device and the App's own folder for photos), which other apps cannot read.
The App only receives photos you take with the camera or choose yourself on your device's own screens. It never reads your photo library on its own.
The App connects to the internet only in these cases.
| Purchase | Google Play processes the purchase of Pro (section 6A). The App may ask Google Play at launch whether you own Pro. |
|---|---|
| Backup | Only with Pro and only if you turn it on, to your own Google Drive (section 5). |
| In-app review | When the App asks you to rate it, the request goes through Google Play (section 6A). |
| Links | Opening the Terms, this policy or the store page from the App opens your browser or Google Play. |
| Barcode scanner | Google ML Kit may send technical information to Google (section 6D). Barcode values and camera images are not sent. |
Adding, viewing and searching candles, scanning barcodes and checking for duplicates, burn records and stats all work offline. The barcode check only compares against the candles you have recorded in the App; barcodes are not sent anywhere.
Google Drive backup is optional and included in Pro. You sign in to Google only for this. When you turn it on, your data is stored in a private area of your own Google Drive that only this App can use (the app data folder). The App uses the permission limited to that area (drive.appdata) and cannot read any other files in your Drive.
Backups are encrypted (AES-256-GCM) with a key made from a passphrase you choose, before they leave your device. The key is not stored in the backup; it stays in your device's secure storage. We cannot access your Drive and we do not know your passphrase.
Only photos that are not already in your Drive are uploaded. The latest 5 backups are kept, and photos that no remaining backup uses are deleted from your Drive.
Exporting a backup file (ZIP, encrypted with your passphrase) and exporting a CSV file are free. Where an exported file is kept is up to you.
Handles downloads, updates and payment for Pro. Google handles payment details; we never receive them. In-app review requests also use Google Play.
Used with your own account, only if you turn on Google Drive backup (section 5).
Android may collect diagnostic data depending on your device settings. We do not control or receive it.
The App reads barcodes with Google ML Kit. Barcodes are read on your device, and the barcode value and the camera image are not sent to us or to Google. According to Google, ML Kit may send technical information, such as device and app details and performance figures, to Google. See Google's ML Kit data disclosure for details.
| Camera | Only to scan barcodes and to take photos of your candles. Images seen while scanning are not saved. A photo is saved on your device only when you choose to keep it. |
|---|---|
| Internet | Only for the cases in section 4. |
Choosing photos uses your device's standard screens, and the App receives only the photo you choose. The App does not ask for location or contacts permissions.
The App is not directed at children and does not collect personal information from anyone.
No system is perfectly secure. Please protect your device against loss and theft.
We do not run a server, so no data is transferred through us. Google Drive backups are stored in your own Google account under Google's terms, and may be stored outside your country.
You can see, correct and delete everything the App keeps, inside the App. Because we hold none of your personal data, there is nothing for us to disclose or delete on request.
We may update this policy. We will announce important changes through an app update.
For questions about this policy, please use the contact page or the support contact on the store listing.