Privacy Policy

1. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from anyone under 13. If you are under 13, do not use or provide any information on the Service. If we learn we have collected personal information from a child under 13 without appropriate consent, we will delete that information promptly. If you believe we may have collected information from a child under 13, contact us at dpo@fuplus.cc.

If you are between 13 and 18 years of age (or the age of majority in your jurisdiction), a parent or legal guardian must have reviewed and agreed to our Terms of Service and this Policy on your behalf before you use the Service.

2. Information We Collect

Account & Registration Data: When you register, we collect your email address and display name. We store your account credentials (as a hashed password), Coin balance, transaction history, and stated preferences. A phone number is optional and may be requested for verification or two-factor authentication.

Identity Verification (KYC) Data: Before certain payouts, we may require identity verification. This is performed by our identity-verification processor, Veriff, and may include a selfie, a government-issued ID document, extracted fields from that document (name, date of birth, document number, issuing country, validity), and a verification outcome (pass/fail, risk signals). Veriff processes this data on our behalf under its own security and confidentiality obligations to us; see Section 6 for how this data is shared.

Offer & Reward Attribution Data: To credit your Coins correctly, we generate a unique per-user identifier shared with offerwall and advertising partners when you engage with their offers. When a partner confirms you have completed a qualifying offer, they return this identifier to us so we can credit your account. This may include a hashed or anonymized device signal used solely for fraud verification.

Survey Data, Including Sensitive Categories: If you choose to participate in surveys, we may ask you to answer profile questions (for example, gender, date of birth, postal code, or household income) so that survey partners can determine whether you qualify for a given survey. Some survey partners' qualification screens may ask additional questions that touch on sensitive categories, such as health, racial or ethnic origin, religious or philosophical beliefs, political opinions, or sexual orientation. Where this occurs, we collect and relay this information only with your explicit, opt-in consent, given at the time you choose to participate in surveys, and we use it solely to identify, match, and enable surveys for you, never for advertising, profiling, or any other purpose. You may withdraw this consent at any time in your account settings, after which surveys will no longer be shown to you.

Device & Usage Data: We automatically collect technical information as you use the Service, including your IP address, device type, browser type and version, operating system, referring URL, pages viewed, features used, session duration, and timestamps. We may also generate a fraud-prevention device signal from technical characteristics of your device (such as screen resolution, time zone, and browser configuration). This data is used to operate, secure, and improve the Service, and to detect and prevent fraud.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and maintain your logged-in session. Session cookies are essential and are required for login and basic functionality; disabling them will prevent you from using the Service.

We also use the following third-party analytics and advertising technologies, which may set their own cookies or collect data about your use of the Service and other sites Google Analytics, Meta (Facebook) Pixel, TikTok Pixel, and Microsoft Clarity. These tools help us understand how the Service is used and measure the performance of our advertising. We do not control these providers' own data practices; see their respective privacy policies for more information. Where required by applicable law, we present a cookie consent mechanism before setting non-essential cookies.

4. How We Use Your Information

To create, maintain, and secure your account, and to authenticate you.

To operate the Service's core functionality, including crediting Coins when offers, surveys, or other earning activities are completed.

To process withdrawal requests, including verifying your identity where required.

To detect, investigate, and prevent fraud, abuse, and unauthorized access.

To send you transactional communications (account confirmations, reward credits, security alerts) and, with your consent, promotional communications, which you may opt out of at any time.

To identify, match, and enable surveys for you where you have given explicit, opt-in consent, as described in Section 2.

We do not make automated decisions that produce legal or similarly significant effects about you based on our analysis of aggregated, de-identified usage data used to improve the Service.

To comply with legal obligations and enforce our Terms of Service.

5. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases: performance of our contract with you under Article 6(1)(b) GDPR (operating your account and the Service); our legitimate interests under Article 6(1)(f) GDPR (fraud prevention, security, service improvement), balanced against your rights; your consent under Article 6(1)(a) GDPR (promotional communications, non-essential cookies, and survey participation); and compliance with our legal obligations under Article 6(1)(c) GDPR (recordkeeping, responding to lawful requests).

Where survey qualification questions touch on special categories of data (health, racial or ethnic origin, religious or philosophical beliefs, political opinions, or sexual orientation), we process that data only on the basis of your explicit consent under Article 9(2)(a) GDPR, and only for the purpose described in Section 2. You may withdraw any consent you have given us at any time, without providing a reason, with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal.

Where we process your data based on our legitimate interests, you have the right to object at any time under Article 21 GDPR, including to processing for direct marketing, which will cease upon notification without requiring any specific justification from you.

6. How We Share Your Information

Identity verification: We share the minimum necessary data with Veriff to verify your identity before certain payouts. Veriff is contractually bound to appropriate confidentiality, security, and cross-border transfer safeguards.

Offerwall and advertising partners: We share your unique per-user attribution identifier (and, where technically necessary for fraud verification, a hashed device signal) with our offerwall and advertising partners, solely to attribute completed offers to your account. These partners may not use this identifier to build independent profiles about you.

Survey partners: Where you have given consent as described in Section 2, we share the profile information necessary for a survey partner to determine your eligibility and relay any additional qualification answers you provide. Some surveys are conducted on the partner's own platform, in which case your responses there are governed by that partner's own privacy policy.

Payment and payout processors: We share the data necessary to process your withdrawal with the payment processors, payment networks, or gift card issuers relevant to your chosen withdrawal method.

Service providers: We engage hosting, email delivery, analytics, and security vendors who access your data only as necessary to perform services for us and are contractually bound to protect it.

Legal and safety: We may disclose information to comply with applicable law, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred to the successor entity, who will be bound to handle it consistently with this Policy, or you will be notified of any material change.

We do not sell your personal information. Any sharing with third parties for their own independent marketing purposes occurs only where you have given explicit consent, and such consent is not transferable.

7. Your Privacy Choices

Cookies: You can manage non-essential cookies through the cookie consent tool presented on the Service, or through your browser settings. Disabling essential cookies will prevent you from using core features.

Promotional communications: You can opt out of promotional emails at any time using the unsubscribe link in each message or through your account settings.

Survey participation and sensitive data: You can withdraw consent to survey participation at any time in your account settings; this does not affect the lawfulness of processing carried out before withdrawal.

Access, correction, and deletion: You can review and update your account information by logging in. You may request access to, correction of, or deletion of your personal information by contacting dpo@fuplus.cc. We cannot delete your personal information without also deleting your account.

8. Your Privacy Rights — US State Residents

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another US state with a comprehensive privacy law, you may have the right to: confirm whether we process your personal information; access and delete certain personal information; correct inaccuracies (California, Colorado, Connecticut, and Virginia); obtain a portable copy of your data; and opt out of the processing of your personal information for targeted advertising or sale. We do not sell personal information as that term is defined under these laws.

Nevada residents may submit a request to opt out of the sale of covered information under Nevada Revised Statutes Chapter 603A, although we do not currently sell such information.

To exercise any of these rights, contact us at dpo@fuplus.cc. We will verify your request and respond within the timeframe required by applicable law.

9. Your Privacy Rights — EU/UK Residents

If you are located in the European Economic Area or the United Kingdom, you have the following rights, subject to certain conditions and exceptions under the GDPR (or the UK GDPR, as applicable).

Access (Article 15): to obtain confirmation of and access to the personal data we hold about you.

Rectification (Article 16): to have inaccurate or incomplete personal data corrected.

Erasure (Article 17): to request deletion of your personal data ("right to be forgotten"), subject to our legal retention obligations described in Section 11.

Restriction of processing (Article 18): to request that we limit how we use your data in certain circumstances.

Data portability (Article 20): to receive your personal data in a structured, commonly used, machine-readable format.

Objection (Article 21): to object to processing based on our legitimate interests or carried out for direct marketing, as described in Section 5.

Withdrawal of consent: to withdraw any consent you have given at any time, without providing a reason, without affecting the lawfulness of processing before withdrawal.

Complaint (Article 77): to lodge a complaint with your local data protection supervisory authority, or with the UK Information Commissioner's Office if you are in the United Kingdom.

To exercise these rights, contact our Data Protection Officer at dpo@fuplus.cc. We will respond to verified requests within the timeframe required by applicable law.

10. International Data Transfers

We and our service providers may process and store your information in countries other than the one in which you reside, including the United Kingdom and other jurisdictions.

Where we transfer personal data from the European Economic Area, the United Kingdom, or other regions with data transfer restrictions, we rely on one or more of the following safeguards: an adequacy decision issued by the European Commission under Article 45 GDPR confirming the destination country provides an adequate level of protection; Standard Contractual Clauses approved by the European Commission; transfer to a recipient certified under the EU-U.S. Data Privacy Framework, where applicable; or another legally recognized transfer mechanism.

This applies in particular to identity-verification data shared with Veriff and any data shared with survey partners located outside your country of residence. You may request further details of the specific safeguard used for a given transfer by contacting dpo@fuplus.cc.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we retain personal information only for as long as necessary to comply with our legal obligations (such as financial recordkeeping and fraud-prevention requirements), resolve disputes, and demonstrate compliance with our contractual or legal obligations, or to assert and defend legal claims; we do not commit to a fixed retention period beyond what applicable law and these legitimate business needs require. Aggregated or de-identified data used for fraud-prevention modeling may be retained without a defined end date, as it no longer identifies you.

12. Data Security

We implement technical and organizational measures designed to protect your personal information against accidental loss, unauthorized access, disclosure, alteration, or destruction, including encryption of data in transit, hashed password storage, access controls, and regular security review. Access to personal data is limited to personnel and service providers who have a business need to know.

No method of transmission over the internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and any transmission of information to the Service is at your own risk.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will update the "Last updated" date at the top of this page and, where we make material changes, notify you by email or through a prominent notice within the Service. Your continued use of the Service after the effective date of any changes constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, or wish to reach our Data Protection Officer, contact us at:

Reward Junction LTD, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Data Protection Officer: dpo@fuplus.cc

We will respond to your inquiry within a reasonable timeframe and in any event within the timeframe required by applicable law.