Privacy Policy
This policy explains what personal data the PlayNexa app and website (playnexa.eu) process, why, and what rights you have.
1. Who is responsible
The operator of PlayNexa, named in the Imprint (https://playnexa.eu/impressum.html). Contact for privacy questions: contact@playnexa.eu.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| A user ID, the display name you choose, your language and a profile picture choice | to run your account and the app in your language | contract (art. 6(1)(b)) |
| Activity data: your answers, levels, videos watched, missions, Activity Progress, rewards, Wallet balance and history | to run the app, check that activities are real, and credit rewards | contract; legitimate interest in fair rewards (art. 6(1)(f)) |
| Device data: a hashed device identifier, device model, app version, the country from your mobile network or SIM, and your IP address | to keep one cash-paying account per phone, stop fraud, and show the right content | legitimate interest in preventing fraud (art. 6(1)(f)) |
| Notification token (Firebase Cloud Messaging) | to send reminders and withdrawal messages | contract; your consent in your phone settings |
| Withdrawal data: the PayPal e-mail you give, amount, status | to pay you and keep payment records | contract; legal duty (art. 6(1)(c)) |
| Survey and offer data: your user ID sent to the partner, the partner’s confirmation and amount | to credit the reward | contract |
| Advertising data: the advertising ID of your phone and ad interaction data, handled by ad partners | to show and measure ads | your consent (art. 6(1)(a)) where the law requires it, otherwise legitimate interest |
| Messages you send us | to answer you | legitimate interest; contract |
We do not ask for your real e-mail address to create an account. We do not use fingerprinting to track you across other apps.
3. Ads and your consent
In the European Economic Area and the UK the app asks for your consent before ads use personal data (through Google’s consent tool). You may refuse, and you will still see ads, but not personalised ones. You can change your choice in Settings and in your phone settings (reset the advertising ID).
4. Who receives data
- Hosting: our servers are in Frankfurt, Germany.
- Google (Firebase Cloud Messaging, AdMob) and other ad networks that we add. We list them in the app settings and update this policy when we add one.
- Survey partners (for example CPX Research) get your user ID. The survey list is shown by the partner inside the app, so the partner also receives what any web page receives (your IP address and device details) and the answers you give on its pages. Their own privacy policies apply there.
- PayPal receives the e-mail and amount of a withdrawal.
- Embedded video players (YouTube) can set cookies and receive your IP address when you play a video. Google’s policy applies.
- Authorities, if the law forces us to.
We do not sell your data.
5. Transfers outside the EEA
Some partners (for example Google) may process data outside the EEA. We rely on the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission where they apply.
6. How long we keep data
- Account and activity data: until you delete your account. Activity records are removed with the account.
- Payment and withdrawal records: 7 years, because Austrian tax and commercial law require it. They are kept without your name where possible.
- A hashed device identifier (without the IP address): kept after deletion for up to 12 months to stop abuse, such as opening a new account to get rewards again.
- Server logs and IP addresses: up to 90 days.
- Login logs of our admin panel: 12 months.
7. Your rights
You may ask us for access, correction, deletion, restriction, a copy of your data (portability), and you may object to processing based on legitimate interest. Where processing is based on consent you can withdraw it at any time. Write to contact@playnexa.eu; we answer within one month. You may also complain to the Austrian data protection authority (Datenschutzbehörde, dsb.gv.at) or to the authority in your country.
8. Children
PlayNexa is for adults only (18+). If we learn that a minor has an account, we delete it.
9. Security
We use encrypted connections (HTTPS), limit who can open our systems, protect the admin panel with login limits and optional two-factor login, and keep access logs.
10. Automated decisions
Our systems check activity automatically to find cheating. If a check blocks a reward or an account, you can ask a person to review it at contact@playnexa.eu.
11. Changes
We tell you in the app before an important change takes effect.