Privacy Policy

1. Introduction

This Privacy Policy explains how CaptchaLoot ("CaptchaLoot", "we", "us", or "our") collects, uses, shares, and protects information in connection with the CaptchaLoot mobile application (the "App") and this website. By using the App or this website, you agree to the collection and use of information in accordance with this policy.

This policy describes our actual, current practices. Where a category of processing does not apply to the App (for example, a feature that has not yet launched), we say so rather than describing a practice we don't follow.

2. Information We Collect

We collect information in three broad categories: information you provide when creating and using an account, information collected automatically from your device, and information generated by your use of the App (such as challenge activity and transactions). Each category is described below.

3. Account Information

When you sign in, we receive basic account information from your chosen authentication provider (see "Authentication" below), such as your name, email address, and profile identifier, to the extent that provider makes it available and you authorize its use.

4. Device and Technical Information

• A randomly generated, per-install device identifier used to help identify your installation and support fraud prevention.
• Device model and operating system version.
• General technical information needed to operate the App reliably (for example, app version and locale).

5. Usage Information

We collect information about your activity within the App that is necessary to operate it — for example, challenge completions, Caps balances and transactions, redemption requests, and referral activity. We may also use analytics tools to understand how the App is used in aggregate (for example, which features are used most). [ANALYTICS PROVIDER(S), if any, to be listed here once finalized.]

6. How We Use Information

• To operate core App functionality, including authentication, challenges, Caps balances, and redemptions.
• To detect, investigate, and prevent fraud and abuse of the reward system.
• To provide customer support and respond to your requests.
• To maintain the security and integrity of the App.
• To comply with legal obligations.
• To improve the App based on aggregate usage patterns.

7. Authentication

CaptchaLoot uses Firebase Authentication, including Google Sign-In, to let you sign in securely. When you sign in, the authentication provider shares limited profile information with us as described above. We do not receive or store your account password.

8. Analytics

If and when CaptchaLoot uses a third-party analytics or crash-reporting service, that service's name will be listed here, along with the categories of information it processes. [ANALYTICS / CRASH-REPORTING PROVIDER(S), if any.] We do not claim to use analytics tools we have not actually integrated.

9. Advertising

The App may display advertising, which can include optional rewarded ads that let you choose to view an ad in exchange for additional Caps. If advertising is served through a third-party ad network [AD NETWORK(S), e.g. Google AdMob, to be confirmed and listed here], that network may process information such as device identifiers and general usage data to serve and measure ads, subject to applicable law and any consent required in your region.

10. Rewards and Transactions

We keep records of your Caps balance and transaction history (earning, redemption, referral, and adjustment events) so that we can operate the reward system accurately, resolve disputes, and meet our own record-keeping obligations. See our Reward Policy and Redemption Policy for how these transactions work.

11. Fraud Prevention

We use information such as device identifiers, activity patterns, and account signals to detect and prevent fraud, automated abuse, and violations of our Terms & Conditions, Acceptable Use Policy, and Community Guidelines. This may result in a transaction being reviewed, held, reversed, or declined.

12. Data Sharing

We do not sell your personal information. We may share information in the following limited circumstances:

• With service providers who process data on our behalf (see "Service Providers" below).
• With reward-method providers as needed to fulfill a redemption you request (for example, sending a payout).
• To comply with a legal obligation, enforce our policies, or protect the rights, safety, or property of CaptchaLoot or others.
• In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

13. Service Providers

We rely on infrastructure and service providers to operate the App — for example, Firebase (Google) for authentication and app infrastructure. We only use service providers that are actually integrated into the App, and this section will be updated if that list changes.

14. Data Retention

We retain account and transaction information for as long as your account is active, and for a limited period afterward as needed to resolve disputes, prevent fraud, meet legal and accounting obligations, and enforce our agreements. See "Account Deletion" below for what happens to your data when you delete your account.

15. Data Security

We use reasonable technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

16. Children's Privacy

CaptchaLoot is not directed to children under the age required by applicable law to consent to data processing on their own behalf (in most regions, 13, but see our Terms & Conditions for the App's own age-eligibility requirement, which may be higher). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

17. International Data Transfers

Your information may be processed and stored in countries other than your own, including countries where our service providers (such as Firebase/Google infrastructure) operate data centers. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.

18. User Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at the email address below. We will respond in accordance with applicable law.

19. Account Deletion

You can request account deletion at any time — see our Account Deletion page for instructions. Deleting your account removes your ability to sign in and use the App. Some information may be retained for a limited period afterward where necessary for fraud prevention, dispute resolution, or legal/accounting obligations, after which it is deleted or anonymized in accordance with our retention practices.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the App or website after a change becomes effective constitutes acceptance of the revised policy.

21. Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at privacy@innotechsolutions.org, or write to us at A-130, New Ashok Nagar, New Delhi, 110096, India.