Privacy Policy

Account data — your email address, display name, password (stored only as a secure hash by our authentication provider), and account country. Sign-in with Google — if you choose Google to sign in, Google shares your name and email address with us; we use them only to create and operate your account, and we do not receive or store your Google password. Location — at signup we derive your country from your network connection to match you with offers that pay in your region; we store the country code, not a precise location. Activity data — offers you start and complete, your reward ledger (earnings, bonuses, withdrawals), streak and level progress, and settings such as language and display currency. Payout data — the wallet address or payment details you provide when cashing out. Device data — your device and browser type, used to show only tasks that work on your device. Partner data — confirmations (“postbacks”) our offer partners send when you complete a task, tied to a pseudonymous tracking id. Support data — messages you send our support team. Referral data — if you join through an invite link, the code that referred you.

We use your data to operate your account and credit rewards; to process payouts and, where required, verify identity; to prevent fraud and abuse (including multi-accounting and bot detection); to send essential service emails such as verification and payout notices; to provide support; and to improve the service. Our legal bases under the GDPR are performance of our contract with you, your consent where we ask for it (for example marketing emails, which you can switch off in your profile), our legitimate interest in a fair and secure platform, and compliance with legal obligations such as accounting rules.

We share limited data with: offer partners (a pseudonymous tracking id plus your country and device type, so tasks can be offered and completions attributed — offer partners never receive your name from us; survey partners may additionally receive your email address, used only to prevent duplicate survey accounts and improve survey matching); payment and cryptocurrency networks (the payout details you provide; note that blockchain transactions are public by design); identity-verification providers where a payout requires it; Google, if you use Sign-in with Google; our email delivery provider, to send service emails; and infrastructure providers that host our database and application. Each processes data only to provide their service to us. We do not sell your personal data, and our use of data received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

We use only essential cookies (sign-in and session security) and preference cookies (such as your language). We do not currently use advertising or analytics cookies; if that changes we will update this policy and ask for consent where required. See our Cookie Policy for details.

We keep account and activity data while your account is open. Financial records — such as the reward ledger and payout history — are retained as required for accounting, tax, and fraud-prevention purposes even after account closure. When you delete your account we anonymise personal identifiers while preserving these immutable financial records.

Subject to law, you may request access to your data, correction, deletion, a portable copy, or object to or restrict certain processing, and you may withdraw consent at any time where processing is based on consent. To exercise these rights, contact us at support@boinzo.com. You may also lodge a complaint with your local data-protection supervisory authority.

We protect your data with encryption in transit, access controls, and least-privilege data access. Our core infrastructure is hosted in the European Union. Some partners may process data outside your region; where that happens we rely on appropriate safeguards such as standard contractual clauses. No system is perfectly secure, so please use a strong, unique password and enable the protections your Google account offers if you sign in with Google.

Boinzo is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has registered, contact us and we will remove the account.

We may update this policy; material changes will be notified in-app or by email, and the date above always shows the current version. For any privacy question or request, contact support@boinzo.com.