Privacy Policy

Welcome to Pointcoin! This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the application.

1. Information We Collect

We collect information that you provide directly to us when you use our Service, including:

• Account information (email address, username, password)
• Profile information (name, profile picture, location)
• Content you submit (surveys, feedback, comments)
• Transaction and payment information
• Identity verification data (government-issued ID, video selfie) for reward redemption

Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Device Identifiers: Device type, operating system, unique device identifiers, mobile advertising identifiers (IDFA for iOS devices, Google Advertising ID for Android devices)
• Network and Connection Data: IP address, browser type, internet service provider, referring/exit pages
• Usage and Behavioral Data: Features used, time spent in app, search queries, click patterns, interaction sequences, session duration, and app performance metrics
• Location Data: Precise geolocation data (with your explicit consent), general location derived from IP address, time zone information
• Tracking Identifiers: Unique UUID for unregistered users, unique user ID for registered accounts, session identifiers

Third-Party Data Collection

We work with third-party analytics and attribution partners who may collect additional information:

• Attribution Data: App installation source, conversion tracking, campaign performance metrics
• Analytics Data: User engagement patterns, feature usage statistics, crash reports, performance data
• Advertising Data: Ad interaction data, targeting preferences, cross-app behavioral patterns (where permitted)

2. How We Use Your Information

We may use the information we collect for various purposes, including to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Respond to your comments, questions, and requests
• Send you technical notices, updates, and support messages
• Monitor and analyze trends, usage, and activities in connection with our Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities

3. Sharing of Information

We share your information with third parties in the following situations:

Analytics and Attribution Partners

We share data with analytics and attribution service providers to improve our Service and measure performance:

• Singular (Attribution/Measurement): Device identifiers (IDFA/Google Advertising ID), IP addresses, app installation data, conversion events, user engagement metrics, and behavioral data for attribution tracking and campaign measurement
• Appizer (Analytics): Usage patterns, feature interactions, session data, device information, crash reports, and performance metrics for app analytics and optimization
• Rudderstack (Analytics): User behavior data, event tracking, demographic information, device identifiers, and usage statistics for data analytics and business intelligence

Advertising and Marketing Partners

We may share certain data for advertising and marketing purposes:

• Advertising Networks: Device identifiers, behavioral data, location data (with consent), and demographic information for targeted advertising and campaign optimization
• Marketing Partners: Aggregated and anonymized usage data, demographic trends, and engagement metrics for marketing research and campaign development

Important Note: Under various US state privacy laws, sharing behavioral data, location data, and advertising identifiers with these partners may constitute a "sale" or "sharing" of personal information for targeted advertising purposes. You have the right to opt out of such data sharing as described in the "Your Privacy Rights" section below.

Other Information Sharing

We may also share your information in the following situations:

• With Service Providers: We share information with third-party vendors and service providers that perform services on our behalf, including payment processing, customer support, and technical infrastructure
• For Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities
• With Your Consent: We may share your information with third parties when you provide explicit consent for such sharing

4. Security of Your Information

We implement comprehensive security measures to protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

Technical Safeguards

• Data at Rest Encryption: All personal information stored in our databases is encrypted by default using industry-standard encryption protocols
• Data in Transit Protection: All data transmitted between your device and our servers is protected using SSL (Secure Socket Layer) encryption
• Access Controls: We implement strict access controls and authentication mechanisms to limit access to personal information to authorized personnel only
• Regular Security Assessments: We conduct regular security reviews and assessments of our systems and processes

Third-Party Security

We employ best-effort practices to work with third-party partners who maintain SOC 2 compliance or equivalent security standards. While we cannot guarantee the security practices of all partners, we prioritize working with vendors who demonstrate strong security commitments.

Data Breach Notification

In the event of a data security incident that may affect your personal information:

• Immediate Notification: We will notify affected users via email or SMS within 24 hours of discovering the breach
• Follow-Up Communication: Within 72 hours, we will provide a follow-up communication including:
• Root cause analysis of the incident
• Assessment of data potentially affected
• Steps we are taking to address the breach
• Recommended actions for affected users
• Regulatory Compliance: We will comply with all applicable breach notification laws and regulations

Limitations

While we implement robust security measures, no internet or email transmission is ever fully secure or error-free. We cannot guarantee the absolute security of information transmitted to or from our Service. You use our Service at your own risk.

5. Your Choices

You have the following choices regarding your information:

• Account Information: You may update, correct, or delete your account information at any time by logging into your account.
• Location Data: You can control location data collection through your device settings or within the Pointcoin app. You may:
  • Opt-in to location tracking for location-based rewards and features
  • Opt-out of location tracking at any time through app settings
  • Manage precise location vs. approximate location permissions
• Account Deletion: You may request complete account deletion by:
  • Contacting our support team at privacy@pointcoin.com
  • Using the account deletion feature in your account settings
  • Note: Account deletion will permanently remove all your data, including Pointcoin balance and transaction history
• Cookies and Tracking: Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies. You may also opt-out of tracking through device advertising settings.
• Promotional Communications: You may opt out of receiving promotional emails from us by following the instructions in those emails or by updating your communication preferences in your account settings.
• Third-Party Data Sharing: You can opt-out of data sharing with our analytics and marketing partners by contacting us at privacy@pointcoin.com or through your account privacy settings.

6. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete that information.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

8. Pointcoin Rewards Program Data

As part of our Pointcoin rewards program, we collect and process specific information to enable point earning, tracking, and redemption:

Pointcoin Earning Activities

We collect information about your activities to calculate and credit Pointcoins, including:

• Survey Participation: Responses, completion rates, and demographic information provided to survey partners
• App Usage Patterns: Time spent, features accessed, and engagement metrics that determine bonus Pointcoins
• Purchase Verification: Transaction details when earning Pointcoins through partner purchases
• Referral Activities: Information about users you refer and their Pointcoin earning activities

Pointcoin Balance and Transaction History

We maintain detailed records of your Pointcoin activities:

• Current Pointcoin balance and earning history
• Redemption transactions for gift cards and rewards
• Pointcoin expiration dates and forfeiture records
• Fraud prevention flags and suspicious activity logs

Third-Party Reward Partners

When redeeming Pointcoins, we share necessary information with our reward partners:

• Amazon, Starbucks, Visa, Walmart: Only your email address and gift card denomination for digital delivery
• Survey Providers: Demographic and response data to qualify you for higher-paying surveys
• Marketing Partners: Aggregated, non-identifiable data for campaign optimization

9. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Our retention periods are as follows:

Account and Profile Data

• Active Account Information: Retained for the duration of your active account
• Dormant Account Activity Data: If your account is inactive for 180 days, we automatically delete activity data while keeping your account profile open
• Account Closure: Upon account deletion, profile information is permanently deleted within 48 hours

Transaction and Financial Data

• Pointcoin Transaction History: Retained for 3 years from the date of transaction for loyalty program management, fraud prevention, and customer support purposes
• Reward Redemption Records: Retained for 1 year for gift card fulfillment, customer support, and compliance with loyalty program regulations

Third-Party Data Sharing

• Analytics and Attribution Data: Data shared with third-party partners (Singular, Appizer, Rudderstack) is retained by us for 1 year from collection
• Partner Data Retention: Third-party partners have their own retention policies; we require deletion upon our request

Identity Verification Data

• AI-Powered Verification: Video selfies and government ID data collected during reward redemption are retained for 30 days for audit purposes, then automatically deleted
• Age Verification Records: Age information derived from identity verification is retained for 30 days only

Other Data Types

• Survey Response Data: Retained for 2 years from collection to improve survey matching algorithms
• Device Identifiers and Usage Data: Retained for 12 months from collection for security and fraud prevention purposes
• Marketing Communications Data: Retained until you opt out or for 2 years from last interaction
• Customer Support Records: Retained for 3 years from the date of inquiry

Your Right to Deletion

You have the right to request deletion of your personal information at any time. To request deletion:

• Visit our dedicated deletion page at https://pointcoin.co/delete-my-info.html
• Provide your email address and/or phone number associated with your Pointcoin account
• We will verify your identity and process your request within 48 hours
• You will receive a confirmation email once the deletion is complete
• Note: Unredeemed Pointcoins will be forfeited upon account deletion

Important Notes: Data deletion is irreversible. Once deleted, your data cannot be recovered and you will need to create a new account if you wish to use Pointcoin again. Some information may be retained for legal or regulatory compliance purposes as required by applicable law.

10. User Rights and Controls

You have specific rights regarding your personal information and Pointcoin rewards data:

Access and Portability Rights

• Pointcoin Statement: Request a complete history of Pointcoins earned, redeemed, and expired
• Data Export: Download your account data, including survey responses and reward history
• Partner Data: Request information about what data has been shared with specific reward partners

Marketing and Communication Controls

• Promotional Opt-out: Opt out of targeted reward offers and partner promotions
• Survey Matching: Control whether your demographic data is used for survey qualification
• Push Notifications: Manage location-based reward alerts and earning opportunities

11. Your Privacy Rights Under US State Laws

Residents of certain US states have additional privacy rights under applicable state laws, including the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (CDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).

Right to Know/Access

You have the right to request details about the personal information we've collected about you, including:

• Categories of personal information collected about you
• Categories of sources from which the information is collected
• Business or commercial purpose for collecting the information
• Categories of third parties with whom we share the information
• Specific pieces of personal information we have collected about you

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions under applicable law. You can request account deletion through your profile settings or by contacting us at privacy@pointcoin.co.

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you. You can update most information through your account settings or by contacting us.

Right to Opt-Out of Sale/Sharing

Important: Under various state privacy laws, our sharing of behavioral data, location data, and advertising identifiers with analytics and attribution partners (Singular, Appizer, Rudderstack) may constitute a "sale" or "sharing" of personal information for targeted advertising purposes.

You have the right to opt out of such data sharing. To exercise this right:

• Email us at privacy@pointcoin.co with "Opt-Out Request" in the subject line
• Include your account email or unique identifier
• Specify which data sharing you want to opt out of

Location Data and Mobile Advertising

When you grant permission, this application collects precise location data from your mobile device as well as your mobile advertising ID and/or similar pseudonymous IDs, including when you are not using the app. We share that data with third party ad companies such as InMarket to use for tailored advertising, ad campaign measurement and attribution, and analytics. To learn more about these digital advertising practices, please visit the digital advertising alliance code. If you'd like to review or update your choices regarding the use of precise location data by third parties, you may do so via your device settings and/or the settings of this app, or by visiting our opt-out page to submit a request. Mobile applications that collect precise location information generally offer consumers choice mechanisms. A helpful description of many leading mobile platform choice mechanisms is available here.

Right to Opt-Out of Targeted Advertising

You can opt out of targeted advertising by:

• Adjusting your device's advertising settings (iOS: Limit Ad Tracking, Android: Opt out of Ads Personalization)
• Contacting us at privacy@pointcoin.co to opt out of our advertising data sharing

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights, including by denying services, charging different prices, or providing different quality of service.

How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@pointcoin.co or through your account settings. We will verify your identity before processing your request and respond within the timeframes required by applicable law (typically 45 days, with possible 45-day extension).

Authorized Agents

You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization and you may be required to verify your identity directly with us.

12. Geographic Scope and International Users

Current Operations

Pointcoin currently operates primarily in the United States. Our services are designed to comply with US federal and state privacy laws, including CCPA, CPRA, CDPA, CPA, CTDPA, and UCPA.

Service Availability and Restrictions

European Union Restriction: Pointcoin services are not available to users located in the European Union (EU), European Economic Area (EEA), or any EU member states. We do not permit usage of our services from these jurisdictions and have no obligations to users in these regions.

13. Contact Us

If you have any questions about this Privacy Policy, your data rights, or our Pointcoin rewards program, please contact us at:

Email: help@pointcoin.co

Privacy Inquiries: privacy@pointcoin.co

Mailing Address: 14425 Falcon Head Blvd, Bldg e, Austin, TX 78738