🔒 Privacy Hub

Privacy Policy

Effective Date: July 19, 2026

TEA
💅

TL;DR — The Vibe Check on Your Data

Okay, so here is the absolute tea: we need some of your data so you can secure the bag (cashback, coins, and daily rewards). To give you money for your Magic Bills and surveys, we have to make sure you are an actual living human and not a bot army trying to game the system. We collect your basic profile, your receipt uploads, and device info. If you opt-in, we use location data to unlock premium local quests (surveys). To keep the app safe, our security matrix (FindRisk) briefly checks your phone’s motion sensors to verify authentic human interaction. We share this with trusted networks (like BitLabs, PostHog, and AdMob) because that's literally how the reward system runs. We don't sell your soul, and if you ever want to nuke your account and bounce, you can delete everything in two taps straight from the app settings.

The Data Itinerary

A transparent map of everything happening behind the scenes.

Active Protection Enabled
What We Grab 📥 Why It's Lowkey Needed 🎯 Who's In On It 👥 Vibe Status ✅
Profile Matrix Name, Email, UID To build your identity dashboard, track your daily streaks, and sync your coins safely. Secure Go Backend Essential
Magic Bills Logs Uploaded Receipt Photos Extracted store details, item logs, and purchase dates to validate your instant cashback points. Internal Processing User Opt-In
Geo-Coordinates Precise & Approx Location Matches your device context with high-paying local survey opportunities and region-locked offers. Survey Frameworks User Opt-In
Anti-Bot Metrics Gyroscope & Accelerometer Scans structural hardware sensors instantly to establish that a genuine human user is handling the app. FindRisk SDK Security Only
App Interactions Taps, Clicks & Flow Logs Measures analytics properties to optimize UI/UX and catch system errors before they drop your app performance. PostHog Platform Anonymous
Ad Infrastructure Google Advertising ID Fires up optional rewarded video mechanics so you can compound and multiply your current point balances. Google AdMob User Opt-In

1 Introduction

Welcome to RewardExpress! Your privacy is of paramount importance to us. This Privacy Policy outlines how we collect, utilize, process, and safeguard your personal information across our operational architecture when you access our mobile application ("App"). By downloading, registering, or interacting with RewardExpress, you explicitly consent to the data collection protocols and structural processing mechanics outlined systematically throughout this legal framework.

2 Information We Collect

To maintain core application performance, handle continuous reward ledger accounting, and facilitate data attribution, we partition data accumulation protocols into three categories:

A. Information You Provide Explicitly: Personal profile metadata completed at registration including your legal name, functional email address, verified phone number, structural access password, and tracking configurations (such as standard digital payment endpoints or PayPal addresses necessary to compile external reward distribution activities). This also includes physical document scanning files (e.g., store receipt photographs uploaded into our dynamic Magic Bills rewards feature, where we index items purchased, exact seller identification parameters, date trackers, and corresponding net transactional amounts).

B. Information Processed Electronically: Structural application activity parameters recorded automatically upon system execution, tracking diagnostic records, session performance metrics, unique installation strings, hardware platform tags, and device network layers. When intentionally authorized via structural device permission interfaces, our background location matrix registers precise or approximate geo-positioning telemetry to filter localized partner tasks and geographical reward targets.

C. Sensor and System Safeguard Attributes: To actively defend our cloud networks against automated attack vectors, emulate engines, custom bot scripts, or malicious account farms, our application architecture implements specialized protective software modules (FindRisk SDK). This framework evaluates device integrity by capturing short intervals of hardware sensor data (specifically physical accelerometer displacement and localized gyroscope orientation metrics) alongside standard device indicators to verify organic user interactions.

3 How We Use Your Information

All gathered properties are restricted to high-priority operational workflows. Processing occurs based on user consent tokens, explicit execution of contractual reward delivery actions, legal data compliance demands, or verified structural platform security goals:

  • Executing application operations (crediting internal coin ledgers, validating daily streaks, distributing payouts).
  • Analyzing device safety conditions and blocking mechanical exploits or fake traffic structures.
  • Rendering authorized survey inventory selections matched to your geographical region or usage profile.
  • Processing diagnostic app feedback and debugging architectural system components.

4 Third-Party Data Sharing (SDKs)

RewardExpress coordinates data exchange events with external service frameworks to supply survey tasks, maintain safety integrity, and deliver advertising monetization features. These integrated network operators function as independent system data controllers:

  • Survey Platform Integrations: Persistent analytical tags, advertising profiles, unique identifiers, and permitted geographical context arrays are distributed to partner survey environments including TapResearch, InBrain, TheoremReach, BitLabs, AyetStudios, SaySo, and Pollfish to query matching external consumer survey blocks. (Consult specific operator terms, such as the Pollfish Respondent Agreement, for localized downstream policies).
  • Advertising Networks: We deploy Google AdMob engines to structure rewarded video assets, processing anonymized device metrics and collecting preferences through localized consent handling tools (User Messaging Platform / UMP).
  • Diagnostic & System Protection Tools: We pipe layout interactions anonymously to PostHog analytical infrastructure, and direct low-level sensor metrics directly to the FindRisk processing network to monitor hardware authentication layers.

5 Data Retention

We keep your raw information profiles active only as long as needed to satisfy our ongoing reward platform operations. Specifically, document assets uploaded through the Magic Bills catalog are retained for a standard duration of six (6) months before removal processes begin, while base transaction history records are held consistently to enforce security terms and control payment dispute records.

6 Data Deletion & Your Rights (GDPR)

Pursuant to the General Data Protection Regulation (GDPR) and Google Play Developer distribution regulations, you possess comprehensive rights to verify, adjust, block, or completely terminate your personal information balances:

In-App Account Termination 📱

Navigate inside application dashboard settings directly to: Settings > Account > Delete Account to trigger immediate database removal queues.

Web Removal Requests 🌐

If the native application has been removed from your active device platform, file an explicit deletion request by navigating to our support index webpage: rewardexpress.net/delete.

7 COPPA Compliance (Children's Privacy)

RewardExpress does not systematically target or knowingly collect data sets from child users under thirteen (13) years of age, fulfilling requirements under the Children's Online Privacy Protection Act (COPPA). If you discover that a dependent under your legal care has created an undocumented profile, contact our administration teams immediately at [email protected] to initiate instant database clearing cycles.

8 US State Privacy Rights (CCPA & More)

If you reside in California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), or other US states with enacted comprehensive privacy laws, you possess specific state-granted rights regarding your personal information:

  • »
    Right to Know & Access: You can request a breakdown of the specific pieces and categories of personal data we have collected about you over the past 12 months.
  • »
    Right to Opt-Out of "Sale" or "Sharing": Because we partner with third-party ad networks (Google AdMob) and survey providers, transmitting your device ID or location to them may be legally classified as "selling" or "sharing" data for cross-context behavioral advertising. You can opt out of this at any time using your device's native ad-tracking settings or via our in-app privacy consent manager (UMP).
  • »
    Right to Non-Discrimination: We will never lower your reward payouts, restrict your account, or deny you service for exercising your privacy rights.

To Exercise These Rights:

Email us at [email protected] with the subject line "State Privacy Rights Request".

9 Data Security

Our engineering architecture handles data processing by applying modern security protections, including system-wide cryptographic data encryption protocols covering assets in transit. While we apply robust industry-standard safeguards to shelter all assets, no digital communication structure can yield absolute total data immunity.

10 Changes to This Privacy Policy

We maintain regular updates across this legal privacy statement to keep up with shifting system modifications or legislative changes. When structural modifications become active, the operational "Effective Date" markers visible above will reflect the updated timing status. Continuous use of the application ecosystem following updates confirms clear acceptance of all active parameters.

11 Contact Us

To exercise your data processing rights, request clarifications regarding these technical parameters, or file infrastructure queries, route your communications directly to our systems via:

Administrative Mailbox [email protected]