Privacy Policy

APPTASTIC TECH Sp. z o.o., Marsz. Józefa Piłsudskiego 74 / 320, 50-020 Wrocław, Polska, VAT PL8971890288, is the controller of personal data processed for Play for Pay. Contact us at hello@playforpay.mobi.

This Policy is effective from 2 October 2026 and applies to the Play for Pay app, website, account, quest, wallet, redemption and support services.

We collect account and eligibility data such as email address, nickname, age confirmation, country, consent records and internal user ID; device and technical data such as installation identifier, platform, app version, IP address and security logs; advertising identifiers (Apple IDFA only if you allow tracking, and the Google advertising ID on Android); the separate player ID we create for each offer provider; and activity data such as quest starts, click IDs, milestones, provider confirmations and app interactions.

We also process wallet and redemption records, gift-card transaction status, support messages and evidence you choose to provide. Payment-card details entered only on a Branded Currency Solutions hosted page are not accessible to Play for Pay.

We receive data from you and your device, and from advertisers, the offer networks AdGem and Swaarm and other attribution or quest providers when they report starts, verified milestones, reversals and fraud signals. Tremendous and Branded Currency Solutions report redemption and payout status. If you join through Whop, Whop shares your Whop username and email address with us. Hosting, security, analytics and support providers may generate operational data.

We process data to create and secure accounts, provide quests, verify milestones, maintain the wallet, fulfil redemptions, prevent fraud, provide support and enforce the Terms. These activities are necessary to perform our contract with you or serve our legitimate interests in operating and protecting the service.

We process records where needed to comply with legal, accounting and regulatory obligations. Optional notifications and optional advertising measurement are based on consent; you may withdraw consent without losing quest eligibility or reward value.

We share only the data needed with: offer networks AdGem (https://adgem.com/privacy-policy/) and Swaarm, and the advertisers and attribution providers behind each quest, which receive your provider-specific player ID, quest start and click IDs, device and platform data, IP address and, where permitted, your advertising identifier; reward and payout providers Tremendous (https://www.tremendous.com/privacy/) and Branded Currency Solutions, which receive the details needed to deliver a redemption you request; Whop, when you use Play for Pay through Whop; and vendors that provide hosting, database, analytics, security and support services. Providers act under contract or their own disclosed terms as applicable.

We may disclose data to authorities when legally required, or in a business reorganization subject to appropriate safeguards. We do not sell personal data for money.

Offer networks and advertisers use tracking links, click IDs and, where available, advertising identifiers to confirm that you installed a game as a new player and reached a milestone. On iOS we access the IDFA only if you allow tracking in the App Tracking Transparency prompt. On Android you can reset or delete your advertising ID in device settings.

Some quests require an advertising identifier to verify completion; if you limit tracking, those quests may be unavailable or unable to confirm your reward. We never sell your personal data, and each offer network processes data under its own privacy policy.

A clearly labelled catalog preview opens an official App Store product page. Opening a catalog preview does not create a Play for Pay quest, milestone or reward record. Apple and the game publisher may process information under their own privacy notices when you use their services.

Our users, providers and infrastructure may be located in different countries. Where GDPR-protected data is transferred outside the European Economic Area without an adequacy decision, we use an approved safeguard such as the European Commission standard contractual clauses and supplementary measures where appropriate.

Account and quest records are retained while the account is active. After deletion or closure, ordinary profile data is deleted or de-identified within 30 days. Support records are normally retained for 24 months and security logs for up to 12 months.

Wallet, redemption, fraud-prevention, dispute and accounting records may be retained for up to five years, or longer when a legal claim or binding law requires it. When a period ends, data is deleted or irreversibly de-identified.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Send a request to hello@playforpay.mobi; we may verify identity before responding. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).

Account deletion is available in Profile. It deletes the account and personal data that we are not legally required to retain. We will explain any retained records and complete the request within 30 days unless a lawful exception applies.

We use access controls, encryption in transit, credential protection, logging and operational safeguards proportionate to the data and risk. No internet service can guarantee absolute security; report suspected account misuse promptly.

Play for Pay is for adults aged 18 or older. We do not knowingly permit people under 18 to create accounts. If we learn that an under-18 person submitted data, we will restrict the account and delete the data unless retention is legally required.

We may update this Policy when our service, providers or legal obligations change. We will update the effective date and give appropriate notice before material changes take effect.