1. What This Notice Covers
Candyll is a local marketplace, so knowing roughly where you are makes it more useful — but device location is optional, and this Notice explains exactly what it does, what it never does, and how you stay in control. It also explains, in Section 7, a separate kind of information — your Deal activity (visits and categories) — and how that is isolated. This Notice is the detailed companion to Section 13 of the Privacy Policy.
"Candyll", "we", and "us" mean Boryne Labs Ltd. (operating as 'Candyll'), operator of the candyll.com website and the Candyll mobile app (together, the "Platform"). Capitalized terms not defined here have the meanings given in the Terms of Service.
This Notice is one of the Policies incorporated into the Terms of Service. On the subject of device location, this Notice prevails over the Terms of Service; the Terms of Service govern everything else. Nothing in this Notice limits any right you have under applicable law that cannot be waived; if anything here conflicts with such a right, the right prevails.
2. What Device Location Powers
If — and only if — you grant permission, we use your device location to:
- show Deals and Merchants near you;
- show distances from you to a Merchant;
- centre the map view on your area;
- help with directions to a Merchant's address when you go to redeem a Deal Pass.
That is the complete list. Device location is used to show you things; it is never used to make decisions about you, to build a profile of you, or for advertising.
3. How Device Location Works on Your Device
- Permission first. Your phone's operating system, or your web browser, asks you before Candyll can access location. Until you say yes, we have no access.
- Only while you use the app. Location is used in the foreground — while you are actively using the Platform. We do not run background location tracking.
- Precision is your choice. Where your device offers it, you can grant approximate rather than precise location; the nearby-Deals experience works with either.
- No location history. We use your device location to answer the question "what is nearby right now?" We do not build or store a history of your device's coordinates or your movements.
4. What We Never Do With Device Location
- We never sell your device-location data.
- We never share your live device location with Merchants — a Merchant sees your Deal or Deal Pass, not where your device is.
- We never use device location for advertising or share it with advertising networks.
- We never track you in the background or when the app is closed.
5. Your Choices and Controls
- Say no, and the Platform still works. If you decline location, you can still browse, search, Pledge, Final Confirm, and redeem Deal Passes — you set or search the area you want to look in yourself, and distance-based features (like "near me" sorting) are simply unavailable.
- Change your mind any time:
- iOS — Settings → Privacy & Security → Location Services → Candyll;
- Android — Settings → Apps → Candyll → Permissions → Location;
- Web browser — your browser's site-permission settings for candyll.com.
- Revoking permission takes effect right away: from that moment we no longer receive your device location.
6. Retention of Device Location
We do not keep a device-location history, so there is nothing to retain: your coordinates are used transiently to produce nearby results and directions. The general rules for every other kind of record, including the Deal-activity data in Section 7, are in the Data Retention & Account Deletion Policy.
7. Deal Activity (Visits and Categories) Is Separate From Device Location
Device location (Sections 2–6) is one thing; your Deal activity is a different, and separately governed, kind of information. To be clear about what this activity data is and how tightly it is contained:
7.1 What it is. In the course of using the Platform you generate discrete Deal-activity records — for example, that you redeemed a Deal Pass at a particular Merchant (an offline visit event, recorded at Redemption), and the Deal categories you interact with. This is not continuous location tracking and is not built from your device's GPS coordinates; it is a record of Platform actions (redemptions and category interactions), not a trail of where your device has physically been.
7.2 What it is used for, and only for. We may collect and use this Deal-activity data only for these defined internal purposes:
- operating Deals and Redemption (unlocking group prices, issuing and verifying Deal Passes, and recording that a Deal Pass was used — see the Privacy Policy, Section 7);
- fraud and abuse prevention (including the lightweight reliability limits described in the Platform Access & Suspension Policy); and
- internal record-keeping (Candyll's own internal record-keeping and reconciliation of its own records — not the settlement of any customer↔Merchant payment, which Candyll never processes).
We do not use this Deal-activity data for advertising, for profiling you beyond these purposes, or for any purpose outside this list without asking you first.
7.3 It is isolated per Merchant. Deal-activity data is isolated per Merchant. It is never shared between Merchants and is never exposed publicly. One Merchant cannot see your activity with another Merchant, and no Merchant receives a cross-Merchant view of you. Access to these records is restricted to authorized Candyll personnel and the defined internal purposes above.
7.4 What Merchants do and don't see. A Merchant you visit can see the Deal Pass you redeem with it and the Deal that relates to — that is how you get the Final Locked Price. A Merchant does not receive your live location, your activity with other Merchants, or any cross-Merchant profile.
8. Merchant Locations Are Different
The addresses and map pins you see on the Platform are Merchants' business locations, published by the Merchants so customers can find them. Showing you a Merchant's address involves the Merchant's business information, not your personal information.
9. Changes to This Notice
We may update this Notice as the law, our features, or our practices change. We will post the updated version with a new version number and effective date, and for material changes we will give reasonable advance notice by email or in-app message. Each version applies from its stated effective date.
10. Contact
Questions about location or Deal-activity data: Privacy Officer, Candyll, privacy@candyll.com. If you are not satisfied with our response, the complaint routes in the Privacy Policy apply.