Privacy Policy

1. Who is responsible for your data

Rewario operates the rewards website at rewario.lovable.app and is the controller of the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have. It applies to the website and to member accounts, and it forms part of our Terms of Service.

2. Data we collect

We only collect what the service needs to run:

• Account data from Google Sign-In: your email address, name and profile picture. We never receive your Google password.
• Profile data you provide: the country you select and any details you add to your account.
• Earning and balance data: your points ledger, survey completion and reversal records, streaks, levels, achievements and redeemed bonus codes.
• Referral data: who referred you, who you referred, your referral code and commission entries.
• Redemption data: the reward you claimed, the amount, and the payout destination you entered (such as a PayPal email).
• Support data: the messages and contact details you send us through Help & Support.
• Technical data: sign-in session records and the metadata contained in survey partner callbacks, used for fraud prevention and auditing.

3. Why we use it, and our legal bases

We use your data to create and operate your account, credit and audit points, apply reversals, process and pay redemptions, run referrals and bonuses, answer support requests, prevent duplicate accounts and fraud, and keep required financial records.

Where the GDPR or similar law applies, our legal bases are: performance of our contract with you (running your account, crediting points, paying redemptions); our legitimate interests (fraud prevention, service security, product improvement); your consent, where we ask for it (for example optional emails); and legal obligation, where record-keeping is required.

We do not sell your personal data and we do not use it for advertising profiling.

4. Survey research partners

To match you with studies we pass a pseudonymous member identifier — and, where required for targeting, coarse details such as your country — to our survey research partner. We do not send your name, email address or payout details to survey partners.

Inside a partner's survey wall, that partner and its research clients may collect the profiling and survey answers you choose to give (for example age bracket, household or interests) and technical data such as your IP address and device details for quality and fraud checks. That processing is governed by the partner's own privacy policy, and they act as an independent controller for it.

The partner returns completion, reward, screen-out and reversal information to us so we can credit or adjust your balance.

5. Other recipients

We use a small number of service providers who process data on our behalf under contract and only on our instructions: authentication and database hosting, application hosting, and the payment or gift-card providers used to deliver a reward you claim. Some of these providers operate outside your country; where personal data is transferred internationally we rely on the safeguards offered by the provider, such as standard contractual clauses.

We may also disclose data where the law requires it, or to establish, exercise or defend legal claims — including investigating fraudulent activity on the platform.

6. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, protect the session and remember interface preferences. We do not use advertising or cross-site tracking cookies. Blocking necessary storage will prevent sign-in from working.

7. How long we keep data

Account, points-ledger and completion records are kept while your account is open. After you close your account we delete or anonymise your profile, and keep only what is needed for fraud prevention, accounting and legal obligations — typically limited redemption and ledger records, and a hashed identifier used to prevent duplicate re-registration.

Support messages are kept for as long as needed to resolve your request and for a reasonable period afterwards for reference.

8. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to certain processing, withdraw consent, and receive your data in a portable format. You can also complain to your local data protection authority.

To exercise any of these rights, contact us through the Help & Support page in your account. We will verify the request and respond within 30 days. Please note that deleting your account forfeits any unredeemed points, and that we may need to keep some records for the reasons described in section 7.

9. Security

Data is stored in a managed, access-controlled database with row-level security so members can only read their own records; administrative access is limited to authorised accounts. Provider callbacks that change balances are cryptographically signed and verified, and transaction identifiers are checked to prevent duplicate crediting. Traffic to the site is encrypted in transit.

No service can guarantee absolute security. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as required by law.

10. Children

Rewario is for adults only and is not directed at anyone under 18. We do not knowingly collect data from children. If we learn that a minor has registered, we close the account and delete the associated data.

11. Changes to this policy

We may update this policy as the service changes. The date at the top of this page shows the current version, and we will announce material changes in the app or by email before they take effect.

12. Contact

Privacy questions, data requests and complaints can be sent through the Help & Support page inside your account, and we will reply by email.