Your footprint

Exactly what Candidfy holds on you.
No surprises. No fine print.

Messages sent

Opened

Reports

Verified clean -- no reports against your messages

What we store

Anonymous sender token

Random ID -- not linked to you

Yes

Encrypted message content

Deleted when opened; journeys auto-close at 60 days

Yes

Encrypted recipient contact

AES-256-GCM while active, then deleted

Yes

Anonymised safety signals

Content hash only -- trains our AI

Yes

What we never store

Your real name

Never

Location or device data

Never

Ad profiles or tracking

Never

Payment information

Never

AI training signal

Your messages contribute a content fingerprint only -- a one-way cryptographic hash. No human can reconstruct your words from it. It helps our AI learn what safe, honest messages look like so Candidfy gets better for everyone.

THE FOUNDING COVENANT

"No identity data will ever be shared with third parties or intermediaries. One-shot message content is deleted when the recipient opens it; journey threads are retained encrypted only while active. We will never run ads. We will never sell your data. This is not a policy -- it is a founding principle."