This policy explains what personal data the App collects, why we collect it, who we share it with, and the rights you have over it. It applies to the Cashy Stars mobile application and its backend services.
The App is intended for users aged 18 or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete the account and its data. If you believe a minor has registered, contact us at info@cashystars.app.
| Category | What exactly | Why |
|---|---|---|
| Google account | Email address, display name, profile picture, Google account identifier | Signing you in and creating your account. Google Sign-In is the only login method. |
| Advertising ID | Your device’s advertising identifier | Serving ads and detecting duplicate or fraudulent accounts. |
| Network data | IP address, derived country, VPN/proxy status, and whether your device reports an active VPN | Fraud prevention and regional eligibility for rewards. |
| Ad activity | How many ads were shown to you, confirmations from Google that a rewarded ad was watched, and whether ads are being blocked on your device | Paying rewards only for ads actually watched, and detecting reward fraud. |
| Device data | Device model, operating system, app version, push notification token | Delivering notifications and diagnosing problems. |
| Installed apps | Whether known auto-clicker or tap-automation apps are installed — only apps that use an Android accessibility service, plus a short list of known tools | Detecting and preventing fraud. Checked on your device only; the result is never sent to us or stored. Asked with your permission. |
| Payout details | PayPal email address (only if you request a reward) | Paying out rewards you have earned and preventing one person claiming rewards on multiple accounts. |
| Activity in the App | Quiz answers, scores, coin balance, spins, ads watched, referral code, reward requests | Running the game and awarding coins. |
| Support chat | Messages you write to us, screenshots you choose to attach, and any reward request you link to a message | Answering your support requests. Messages are automatically translated between your language and Arabic so our team can read them and you receive replies in your language. |
We do not collect precise GPS location, contacts, photos, microphone or camera data.
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:
Because the App awards rewards with real-world value, we operate anti-fraud checks:
Installed apps. To detect and prevent reward fraud, the App checks — on your device, with your permission — whether auto-clicker or tap-automation tools are installed. It only looks at apps that use an Android accessibility service, plus a short list of known tools, and compares their package names with a blocklist. This check runs entirely on your device: we do not send, store, sell, or use this information for advertising. If such a tool is found, you cannot use the App until you uninstall it. If you decline the permission, the App cannot be used.
Accounts showing signs of fraud may be restricted or suspended, and pending rewards may be withheld. These checks are partly automated. You have the right to request human review of any decision that restricts your account — write to info@cashystars.app and a person will review your case.
| Recipient | Purpose | Their policy |
|---|---|---|
| Google (Sign-In, Firebase Cloud Messaging, Firebase Analytics) | Authentication, push notifications, usage analytics | policies.google.com/privacy |
| Google Cloud Translation | Translating the text of support chat messages. Only the message text is sent — not your name, email address or screenshots. | cloud.google.com/translate/data-usage |
| Google AdMob | Displaying rewarded advertising | policies.google.com/technologies/ads |
| PayPal | Paying out rewards you request | paypal.com/privacy |
| Our hosting provider | Running our servers and database | Servers located in Germany (Frankfurt) |
We do not sell your personal data, and we do not share it with data brokers.
Some of the providers above process data outside your country, including in the United States. Where data leaves the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.
Depending on where you live, you may have the right to: access the data we hold about you; correct inaccurate data; delete your data; restrict or object to processing; receive your data in a portable format; and withdraw consent. To exercise any of these, email info@cashystars.app. We respond within 30 days.
You can delete your account and its data directly in the App under Settings → Account → Delete account. Deletion is immediate and does not need our approval; section 7 explains the little we must keep. Step-by-step instructions: cashystars.app/delete-account. If you are in the EEA or UK and believe we have mishandled your data, you may also lodge a complaint with your national data protection authority.
The App shows rewarded ads through Google AdMob. You can reset or delete your advertising identifier at any time in your device settings under Settings → Privacy → Ads, which limits ad personalisation. Doing so does not stop ads from appearing, and does not affect coins you have already earned.
Data is transmitted over encrypted HTTPS connections and stored on access-controlled servers. We never ask for your Google password — sign-in is handled entirely by Google. No system is perfectly secure, but we take reasonable measures to protect your information.
If we make material changes we will update the date at the top of this page and, where the change significantly affects you, notify you in the App. Continuing to use the App after a change means you accept the updated policy.
Questions, requests, or complaints: info@cashystars.app
Data controller
Adam Shawi
Storgatan 42, 111 51 Stockholm, Sweden
info@cashystars.app