Privacy Policy

Welcome to RewardNest ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

RewardNest is a free-to-play rewards application where users earn virtual coins through daily activities such as spinning wheels, quizzes, scratch cards, picture puzzles, skill mini-games (Tic-Tac-Toe, Coin Toss, Memory, Word Puzzle), daily login streaks, paid surveys and referring friends. Users may optionally watch rewarded ads to earn bonus coins, extra moves or a daily mystery box — this is always user-initiated and never required to use the app.

We collect the following information when you use RewardNest:

• ✓Email AddressFor account creation and login via Google Sign-In
• ✓Display NameOptional, from your Google profile or chosen by you
• ✓Date of Birth & CountryRequired at onboarding to verify the 18+ age requirement and to show rewards available in your country
• ✓Device Information & Advertising IDFor app performance, crash reporting, and ads. Google AdMob may use your device's advertising identifier and approximate (country-level) location to serve and measure ads. Where required (e.g. EEA/UK), we request consent first via Google's UMP form. You can reset or limit the Advertising ID in Android settings.
• ✓A Hashed Device IdentifierUsed only to detect multiple reward-earning accounts on one device. It is hashed before it leaves your device.
• ✓Push Notification TokenTo deliver account and reward notifications. Only collected if you allow notifications.
• ✓Usage DataNeeded to operate rewards and prevent abuse — for example quizzes answered, spins performed and coins earned
• ✓Gift Voucher & Giveaway ActivityWhich brands you selected, which vouchers were sent to you and whether you opened them, and which giveaways you entered
• ✓Redemption Details You ProvideUPI ID, or the phone number linked to your bank account, or a PayPal email, or bank account and IFSC. Used solely to process the payout you request. You may save payout destinations in advance and delete them at any time from Wallet → Payout details.
• ✓Phone Number, Where You Provide OneFor UPI you may identify yourself by UPI ID or by the phone number linked to your bank account, whichever you know; a separate phone number is optional for UPI and required for Bank Transfer. Where provided it is stored on that withdrawal request rather than your profile, used only for payout verification and support, masked in our admin interface, excluded from analytics and application logs, and retained with the withdrawal audit record. PayPal does not require a phone number because the PayPal email is the payout destination.

Where data protection law requires us to name a legal basis, ours are:

• ✓Performance of a contractRunning your account, tracking your coin balance and paying out redemptions. Without this data there is no way to operate the app for you.
• ✓ConsentPush notifications, personalised advertising where the consent prompt applies, and paid surveys. Each is optional and you may withdraw consent at any time, in the app or in your Android settings.
• ✓Legitimate interestsPreventing fraud, detecting duplicate reward-earning accounts, and keeping the app secure and working. We use the least data that achieves this and you can object (see section 11).
• ✓Legal obligationRetaining payout records where we are required to.

Redemption requests are processed manually by our team within 7–14 business days and are subject to verification. We reserve the right to reject redemption requests that appear fraudulent or violate our Terms of Service.

We use the following third-party services:

• SSupabaseDatabase & authentication — supabase.com/privacy
• GGoogle AdMobBanner, interstitial & optional rewarded ads (uses advertising ID & approximate location) — policies.google.com/privacy
• GGoogle Sign-InOptional login method — policies.google.com/privacy
• FFirebase Cloud MessagingPush notifications — firebase.google.com/support/privacy
• CCPX Research / MakeOpinion GmbHPaid surveys — cpx-research.com/main/en/privacy
• TTheoremReach, Inc.Paid surveys — theoremreach.com/privacy-policy
• SSentryCrash reporting — sentry.io/privacy

About paid surveys

Paid surveys are entirely optional. If you open a survey we pass the survey provider a random account identifier — never your name, email address or phone number — so the reward reaches the right account. Your answers go to the survey provider and the research company that commissioned the survey; we never see them. The provider may ask demographic questions (for example age group or interests) and may record your IP address and device details to detect fraud. When a survey is credited, the provider sends us the reward amount and the IP address the survey was taken from, which we keep to check for duplicate accounts. All of that is governed by the provider's own privacy policy. If you never open a survey, none of your data reaches them.

WhatsApp

The app may invite you to open our WhatsApp channel. That invitation is optional and rewards nothing. If you open it, WhatsApp opens outside this app and anything you do there is governed by WhatsApp's own privacy policy. We cannot see whether you followed the channel — we only record that you tapped the button, so we stop showing the invitation.

Each service has its own privacy policy. We are not responsible for their data practices.

Your account data is stored on Supabase servers in Mumbai, India. We use industry-standard encryption for data in transit. No method of transmission over the internet is 100% secure, so please keep your Google account secure.

Some services in section 5 are outside India and receive data internationally:

• •CPX Research / MakeOpinion GmbH — Germany (European Union)
• •TheoremReach, Inc. — United States
• •Google (AdMob, Sign-In, Firebase Cloud Messaging) — United States and other countries where Google operates
• •Sentry — United States

Where a transfer leaves the European Economic Area or the UK it relies on the receiving provider's own transfer safeguards, such as the European Commission's Standard Contractual Clauses. Each provider's privacy policy, linked in section 5, describes the safeguards it uses.

We share it only:

• •With the service providers listed in section 5, as necessary to operate the app
• •When required by law or legal process
• •To protect our rights or prevent fraud

We do not keep operational data indefinitely. Automatic clean-up jobs run nightly and delete:

• ⏱Push notification delivery recordsDeleted after 7 days
• ⏱Records of which reminders were sent to youDeleted after 7 days
• ⏱Messages you have already read, collected gifts, used scratch cardsDeleted after 30 days. Unread messages are kept longer, up to 90 days, because an unread message is still owed to you
• ⏱Records of zero-prize game roundsDeleted after 30 days
• ⏱Rewarded-ad records used to stop double-creditingDeleted after 90 days
• ⏱Survey-open recordsDeleted after 90 days
• ⏱Individual game reward entriesCollapsed into daily totals after 60 days, so your lifetime earnings stay correct without keeping every row

Kept for as long as your account exists, because they are your balance or your proof of payment: your profile and coin balance, your withdrawal history, vouchers you own, and coins or gifts you have not yet collected.

When you delete your account, your profile, balance, login and everything linked to them are removed immediately. Withdrawal records already paid may be retained where we are legally required to keep them.

One process makes an automated decision about you. To stop one person creating many accounts to claim the same signup and referral rewards, we compare a hashed device identifier across accounts. If several reward-earning accounts are found on one device, signup and referral coins on the newer account may be reversed automatically and its referral cancelled.

You have the right to a human review of any such decision. Contact us using the details in section 15 and we will look at it ourselves and tell you the outcome.

RewardNest is intended only for users aged 18 and above. Account creation requires date-of-birth verification and users under 18 cannot proceed past onboarding. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal information, contact us immediately so we can remove it.

Wherever you live, you can ask us to:

• ✓Access the personal data we hold about you, and get a copy of it
• ✓Correct anything inaccurate
• ✓Delete your account and its data
• ✓Withdraw consent you gave for notifications, personalised ads or surveys, at any time, without losing access to the rest of the app
• ✓Receive your data in a portable, machine-readable form
• ✓Object to processing we base on legitimate interests, including our fraud and duplicate-account checks
• ✓Restrict processing while a dispute about your data is open
• ✓Have a human review any automated decision described in section 9

For anything else, email us using the details in section 15. We reply within 30 days and never charge for a request.

If you are in the European Economic Area or the UK and are not satisfied with how we handled your request, you may complain to your national data protection authority. That right is in addition to contacting us, not instead of it.

This section applies if you live in California.

The categories of personal information we collect, why, and who receives them are in sections 2, 3 and 5. We collect them from you directly and from your use of the app.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising beyond the advertising identifier used by Google AdMob to serve and measure ads. You can switch that off at any time in Android: Settings → Privacy → Ads → Delete advertising ID. Doing so does not reduce your access to the app or your ability to earn or withdraw.

You have the right to know what we collect, to delete it, to correct it, and to opt out of sharing for advertising as described above. Exercise any of them through Menu → Delete My Account or by emailing us.

The app uses local storage for preferences such as theme and sound settings. We use analytics to understand app usage in aggregate.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of the app after changes constitutes acceptance.

RewardNest is operated by Faiz Marketing. We are the data controller for the personal data described in this policy, and the single point of contact for any question or request about it.

If you have questions about this policy, or want to exercise any right in section 11 or 12, contact us at:

We aim to reply within 30 days.