Política de Privacidade

Get RBX: Gift Card Rewards · Data de vigência: 2026-10-01

Este documento está disponível em inglês e polonês. A versão em inglês é exibida abaixo e é a que se aplica.

1. Who is responsible

This Privacy Policy explains how personal data is processed in the Get RBX: Gift Card Rewards mobile application (the "App") and on the website getrbx.app.

The controller of your personal data is PRESSWAY Bartłomiej Paluch, Zarzecze 268, 38-220 Dębowiec, Poland, Tax ID (NIP): PL6852340178 (the "Controller"). Contact for all privacy matters: support@getrbx.app.

Accounts, points and rewards in the App are handled by the Controller's rewards platform, which also serves other services operated by the Controller. One account may be used across these services, and the rules in this Policy apply to all of them.

Data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Polish data protection law.

2. What data we process

a) Data you give us

• Email address, username and password (stored as a hash), or your Google / Apple account identifier if you sign in with them.
• Referral code you enter, messages you send to our support, and optional newsletter consent.
• Photos you choose to upload as proof of completing a task. The App asks for camera or photo access only when you choose to add such a photo.
• If you choose a reward delivered through a Roblox Game Pass: your public Roblox username and, optionally, a link to your Game Pass. We use them only to find your public Roblox account and Game Pass and to complete that order. We never ask for your Roblox password.

b) Data collected automatically

• Device and app data: device model, brand, operating system version, app version, language, and technical identifiers generated by the App (installation ID, device ID) used to keep your account secure and to prevent multiple accounts.
• IP address and approximate location derived from it (country), used to show offers available in your region and to prevent fraud.
• Activity data: tasks, surveys and offers you start or complete, points history, reward redemptions, daily check-ins.
• Advertising identifier (Google Advertising ID on Android, IDFA on iOS - only if you allow tracking), collected by advertising partners described in section 4.
• Push notification token, if you allow notifications, used only to send notifications about your account, tasks and rewards.
• App usage statistics collected with Google Analytics for Firebase (e.g. screens opened, app version, crashes), used to improve the App.

3. Why we process data and on what legal basis

• Creating and running your account, awarding points and delivering rewards - performance of a contract (Art. 6(1)(b) GDPR).
• Verifying tasks with partners (offerwalls, survey providers) and crediting points - Art. 6(1)(b) GDPR.
• Security, preventing multiple accounts, fraud and abuse of the points system - our legitimate interest (Art. 6(1)(f) GDPR).
• Support, complaints and communication about your account - Art. 6(1)(b) and (f) GDPR.
• App statistics and diagnostics - Art. 6(1)(f) GDPR.
• Personalised advertising, newsletter and push notifications - your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Establishing or defending legal claims and meeting legal obligations (e.g. accounting) - Art. 6(1)(c) and (f) GDPR.

We use automated checks to detect fraud (for example multiple accounts or unusual activity). Decisions to block an account or cancel a reward are always reviewed by a person.

4. Advertising, consent and tracking

The App shows optional rewarded ads through Google AdMob with mediation partners: Meta Audience Network, Unity Ads, Liftoff (Vungle), Pangle and AppLovin. These partners may collect your advertising identifier, device data and IP address to show and measure ads, acting under their own privacy policies.

• In the EEA, the UK and Switzerland the App asks for your consent with Google's consent form before personalised ads are shown. You can change your choice at any time in the App: Profile, Settings, Manage ad consent.
• On iOS the App asks for permission to track through Apple's App Tracking Transparency. If you decline, you only see non-personalised ads.
• If you tell us at the age check that you are under 16, the App shows only non-personalised ads: every ad request is marked as coming from a user below the age of consent and the consent form is not shown.
• You can also reset or limit your advertising ID in your device settings.

When you watch a rewarded ad, Google confirms the view to our server so we can credit your points. This confirmation contains only a transaction ID, the reward and your internal user ID.

5. Who receives data

• Task and survey partners (offerwalls and survey providers, for example AyetStudios, Torox, MyChips, AdscendMedia, TimeWall, CPX Research, Pollmatic, TheoremReach) - your internal user ID and technical data needed to track and confirm completed tasks. When you open a partner's offer wall, that partner processes data under its own privacy policy.
• Advertising partners listed in section 4.
• Google (Firebase) - analytics and notification delivery; Apple - notification delivery on iOS; Expo - push notification service.
• Hosting, email and IT service providers acting on our instructions.
• Reward suppliers - only the data needed to deliver the reward you chose.
• Roblox Corporation - only if you choose a reward delivered through a Game Pass: we look up your public username and Game Pass using Roblox's public services and buy that Game Pass from our Roblox account. Roblox processes this data under its own privacy policy.
• Public authorities, where required by law.

Some partners are located outside the European Economic Area. Such transfers rely on European Commission adequacy decisions or Standard Contractual Clauses.

We do not sell your personal data.

6. How long we keep data

• Account data: while your account exists.
• After account deletion: data needed to establish or defend claims, for accounting and to prevent abuse (e.g. re-registration after a ban) - up to 6 years.
• Technical data (IP address, device identifiers): up to 12 months from your last activity, unless needed longer for the reasons above.
• Data processed on the basis of consent: until you withdraw consent.
• Task proof photos: until the task is verified and any complaint period ends.

7. Your rights

You have the right to access your data, to rectify it, to have it erased, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting earlier processing). To exercise your rights, contact support@getrbx.app. We reply within 30 days.

You can delete your account in the App (Profile, Settings, Delete account) or as described at https://getrbx.app/pt/delete-account.

You also have the right to lodge a complaint with a supervisory authority - in Poland: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

8. Age requirements

The App is intended for users aged 13 and over. We ask for your age when you first open the App and do not allow younger users to continue. We do not knowingly collect personal data from children under 13; if we learn that we have, we will delete it.

If you are under 18, please use the App with the knowledge and consent of a parent or legal guardian. We do not ask users under 16 for consent to personalised ads - they see only non-personalised ads. Where any other processing is based on consent and you are below the age of digital consent in your country (16 in Poland), that consent must be given or approved by your parent or legal guardian.

9. Security and changes

We use appropriate technical and organisational measures, including encrypted connections (TLS), access control and regular backups. If a personal data breach is likely to put you at high risk, we will inform you without undue delay.

We may update this Policy. We will inform you about material changes in the App or by email. This version is effective from 2026-10-01.