Privacy Policy

This Privacy Policy explains what information Kandlit collects, how it's used, and your choices around it. Kandlit is operated by an individual based in Tlemcen, Algeria. If you have questions, reach out at hello@kandlit.site.

1. Information we collect

When you create an account, we collect:

• Your email address (for email/password sign-up), or your name and email as provided by Google (for Google sign-in);
• Your subscription tier and billing status, so we know whether your account is Free or Pro;
• A timestamp each time you export a puzzle book, used only to enforce the free-tier daily export limit.

We do not store the contents of your puzzle books (words, grids, titles, layouts) on our servers. That content lives in your browser while you work, and export happens locally on your device — nothing is uploaded to us when you generate a PDF or image.

2. Payment information

Subscription payments are handled entirely by Lemon Squeezy, our merchant of record. We receive confirmation of your subscription status from Lemon Squeezy, but we never see or store your card number or other full payment details.

3. Cookies and local storage

Kandlit doesn't use tracking cookies or third-party analytics. We use your browser's local storage to remember your theme preference (light/dark), keep you signed in, and temporarily preserve an in-progress book so you don't lose your work if you navigate to another page within the app. This data stays on your device.

4. How we use your information

We use the information above to:

• Authenticate you and keep your account secure;
• Provide the correct features and limits based on your subscription tier;
• Enforce free-tier export limits;
• Respond to support requests you send us.

5. Who we share information with

We share the minimum information necessary with the service providers that make Kandlit work:

• Supabase — hosts our authentication system and database (account email, tier, export timestamps).
• Lemon Squeezy — handles subscription billing and payment processing.
• Google — if you choose to sign in with Google, Google handles that authentication step.

We don't sell your information, and we don't share it with advertisers.

6. Data retention

We keep your account information for as long as your account is active. If you delete your account, your account data is removed from our systems, aside from records we're required to keep for legal or accounting purposes (such as billing history retained by Lemon Squeezy).

7. Your choices

You can update your account details, change your password, or delete your account at any time from Settings. You can also contact us at hello@kandlit.site with any privacy request, including access to or deletion of your data.

8. Children's privacy

Kandlit is not intended for children under 13, and we don't knowingly collect information from anyone under that age.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.

10. Contact

Questions about this Privacy Policy or how your data is handled? Reach us at hello@kandlit.site.