Account details
When Google sign-in is enabled and you choose to use it, CandleTutor receives your Google account identifier, email address, and display name to create and manage your account. We do not receive your Google password.
Chart images and AI reports
When you request an analysis, the chart image and any context you provide are sent to OpenAI to generate a report. They are not automatically added to your journal. If you are signed in, you can choose “Save to my journal” after the report appears. Only after you choose to save do we store the chart image, submitted context, and report in your private account until you delete the saved item or your account. Do not upload screenshots containing passwords, private keys, account numbers, or other sensitive personal information.
When you request a lesson-tutor answer, the question and relevant lesson text are sent to OpenAI to generate the response. Do not send information you would not want processed by an AI service.
Payments
Stripe handles Premium checkout and billing. CandleTutor stores Stripe customer and subscription identifiers and the current subscription status so it can unlock or remove Premium access. Card details are handled by Stripe and are not stored by CandleTutor.
Access and deletion
Your journal is limited to your signed-in account. You can delete individual saved analyses from the journal or delete your account from the account page. Account deletion removes saved charts, reports, and account records from the application database. If a subscription is active, deleting the account cancels it through Stripe first.
Operational storage
Account sessions and saved chart data are stored in the application’s configured PostgreSQL database. The service needs a properly configured persistent database to enable these account features. Access to the database and application secrets is limited to service operators.
Questions
For privacy questions, contact the site operator using the contact details published by the operator. This product information is not a legal privacy notice for every jurisdiction; the operator should confirm the final policy and business contact details before opening paid accounts.