Effective Date: July 9, 2026
Last Updated: July 9, 2026
Spin5X ("we," "our," or "us") operates the Spin5X mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this Privacy Policy carefully. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
1. INFORMATION WE COLLECT
We collect information that you provide directly to us, information that is collected automatically when you use the App, and information from third-party services integrated into the App.
1.1 Information You Provide Directly
- Account Information: When you register for an account, we collect your email address, display name, and password. If you sign in using Google Sign-In, we receive your Google account email address, display name, and profile photo URL from Google.
- Payment and Withdrawal Information: When you request a withdrawal of earned rewards, we collect your UPI ID (for users in India) or PayPal email address or username (for users outside India). This information is necessary to process your reward payments.
- Referral Information: If you enter a referral code during registration, we collect the referral code you provide. If you share your own referral code with others, we record referral relationships including your user ID, the referred user's ID, and the referred user's email address.
- Chat and Support Messages: When you use the in-app live chat feature to communicate with our support team, we collect and store the messages you send, including any text content and timestamps.
- Profile Information: You may optionally update your display name and profile photo. We store any profile information you choose to provide.
- Survey and Quiz Responses: When you participate in surveys or quizzes within the App, we collect your answers and responses.
1.2 Information Collected Automatically
- Device and Usage Information: We automatically collect certain information when you use the App, including your device type, operating system version, unique device identifiers, IP address, and general usage patterns within the App.
- Activity and Engagement Data: We track your in-app activities including tasks completed, quizzes taken, surveys answered, games played, daily check-ins, login streaks, reward streaks, spin wheel results, scratch card results, weekly challenge progress, achievements earned, and points earned or redeemed.
- Transaction Records: We automatically log all point transactions within the App, including the type of transaction (task completion, quiz completion, survey completion, ad viewing, daily check-in, referral bonus, withdrawal), the number of points involved, timestamps, and associated task, quiz, or survey identifiers.
- Analytics Data: We use Firebase Analytics to collect anonymized usage statistics, including session duration, screen views, user engagement metrics, and app performance data.
- Crash and Performance Data: We use Firebase Crashlytics to automatically collect crash reports, error logs, and performance diagnostics. This data may include device state at the time of a crash, device model, operating system version, and stack traces. This information does not contain personally identifiable information and is used solely to improve App stability and performance.
- Advertising Data: When you view advertisements within the App, our advertising partners (Google AdMob and Unity Ads) may collect device advertising identifiers, IP addresses, and interaction data related to ad impressions and clicks.
- Push Notification Tokens: We collect Firebase Cloud Messaging (FCM) device tokens to send you push notifications. You can opt out of push notifications through your device settings at any time.
1.3 Information from Third-Party Services
- Google Sign-In: If you choose to sign in with Google, we receive your Google account email, display name, and profile photo URL. We do not receive your Google account password.
- Firebase Services: We use Google Firebase for authentication, database storage, file storage, analytics, crash reporting, push notifications, and remote configuration. Firebase may collect device identifiers and usage data as described in Google's Privacy Policy.
- Advertising Networks: Google AdMob and Unity Ads may collect device advertising identifiers, usage data, and interaction data to serve personalized or contextual advertisements. Please refer to Google's Advertising Privacy Policy and Unity's Privacy Policy for details on their data practices.
2. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
- Account Management: To create, maintain, and manage your user account, authenticate your identity, and provide you with access to App features.
- Reward Processing: To track your points balance, process reward transactions, manage daily check-ins, streaks, achievements, and process withdrawal requests to your UPI ID or PayPal account.
- App Functionality: To operate and provide the core features of the App, including spin wheel, scratch cards, quizzes, surveys, tasks, games, weekly challenges, leaderboards, and referral programs.
- Communication: To send you push notifications about reward updates, daily reminders, promotional offers, and important App announcements. To facilitate live chat support between you and our support team.
- Advertising: To display advertisements within the App through Google AdMob and Unity Ads. Ad views may earn you reward points within the App.
- Analytics and Improvement: To analyze usage patterns, understand user preferences, monitor App performance, diagnose technical issues, and improve the overall user experience.
- Fraud Prevention and Security: To detect and prevent fraudulent activity, enforce our terms of service, verify referral legitimacy, and protect the security and integrity of the App and its reward system.
- Compliance: To comply with applicable laws, regulations, and legal processes.
3. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: We share data with Google Firebase (for authentication, database, storage, analytics, crash reporting, messaging, and remote configuration), Google AdMob (for advertising), and Unity Ads (for advertising). These service providers process data on our behalf and are bound by their own privacy policies and data processing agreements.
- Payment Processing: When you request a withdrawal, your UPI ID or PayPal email is used solely to process your payment. We do not share this payment information with any parties other than the payment processor necessary to complete the transaction.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice within the App of any change in ownership or uses of your personal information.
- With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
- Aggregated or De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for analytics, research, or other purposes.
4. DATA STORAGE AND SECURITY
4.1 Data Storage
Your data is stored on Google Firebase servers, which are hosted on Google Cloud Platform infrastructure. Firebase stores data in secure data centers with industry-standard physical and digital security measures. Data may be stored and processed in any country where Google maintains facilities.
4.2 Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Firebase Authentication for secure user identity verification
- Firestore Security Rules that restrict data access based on user authentication and authorization levels
- Server-side validation of all data writes to prevent unauthorized modifications to sensitive fields such as point balances and admin privileges
- Separation of user data so that each user can only access their own personal data
- Admin-only access controls for sensitive operations and configurations
4.3 Security Limitations
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100 percent secure. We cannot guarantee absolute security of your data.
5. DATA RETENTION
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
- Account data is retained for the duration of your account's existence.
- Transaction records and withdrawal history are retained indefinitely for audit and fraud prevention purposes.
- Chat messages are retained for the duration of your account's existence.
- Analytics and crash data are retained according to Google Firebase's default retention policies (typically 14 months for analytics data).
- Advertising data is retained by our advertising partners according to their respective retention policies.
If you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes.
6. YOUR RIGHTS AND CHOICES
6.1 Account Information
You can review and update your account information, including your display name and profile photo, through the App's profile settings at any time.
6.2 Account Deletion
You can request deletion of your account and associated personal data by contacting us at the email address provided in the Contact Us section below. Upon receiving your request, we will delete your account and personal data within 30 days, except for data we are legally required to retain.
6.3 Push Notifications
You can opt out of receiving push notifications by disabling notifications for the Spin5X app in your device's notification settings.
6.4 Advertising Preferences
You can opt out of personalized advertising by adjusting your device's advertising settings:
- On Android: Go to Settings, then Privacy, then Ads, and enable "Opt out of Ads Personalization" or "Delete advertising ID."
You can also limit ad tracking through the privacy settings provided by Google and Unity within their respective platforms.
6.5 Data Access and Portability
You have the right to request access to the personal data we hold about you. You may also request a copy of your data in a portable format. To exercise these rights, please contact us at the email address provided below.
6.6 Data Correction
If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most of your information directly through the App, or contact us for assistance.
7. CHILDREN'S PRIVACY
The App is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information promptly. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at the email address provided below.
8. THIRD-PARTY LINKS AND SERVICES
The App may contain links to third-party websites, games, or services that are not owned or controlled by us. This Privacy Policy does not apply to third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services that you visit or interact with through our App. We are not responsible for the privacy practices of third-party websites or services.
The App integrates the following third-party services, each of which has its own privacy policy:
- Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Analytics, Crashlytics, Cloud Messaging, Remote Config): https://firebase.google.com/support/privacy
- Google AdMob: https://policies.google.com/privacy
- Unity Ads: https://unity.com/legal/privacy-policy
- Google Sign-In: https://policies.google.com/privacy
9. ADVERTISING
The App displays advertisements provided by Google AdMob and Unity Ads. These advertising partners may use cookies, device identifiers, and similar technologies to collect information about your device and your interaction with advertisements. This information may be used to provide targeted or contextual advertising.
You earn reward points for viewing certain advertisements within the App. The number of points earned per ad view is configured by the App administrator and may change from time to time.
For more information about how Google uses data from apps that use their services, please visit: https://policies.google.com/technologies/partner-sites
10. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where Google's servers are located. By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than those of your country. We ensure that any such transfers comply with applicable data protection laws and that your information remains protected to the standards described in this Privacy Policy.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy. If we make material changes, we will notify you by posting a prominent notice within the App or by sending you a push notification. Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.
12. CALIFORNIA PRIVACY RIGHTS
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect, use, disclose, and sell.
- The right to request deletion of your personal information.
- The right to opt out of the sale of your personal information. We do not sell your personal information.
- The right to non-discrimination for exercising your privacy rights.
To exercise your California privacy rights, please contact us using the information provided in the Contact Us section below.
13. EUROPEAN ECONOMIC AREA (EEA) USERS
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including:
- The right to access your personal data.
- The right to rectification of inaccurate personal data.
- The right to erasure of your personal data.
- The right to restrict processing of your personal data.
- The right to data portability.
- The right to object to processing of your personal data.
- The right to withdraw consent at any time.
Our legal bases for processing your personal data include: your consent, the performance of our contract with you (providing the App services), our legitimate interests (improving the App, preventing fraud), and compliance with legal obligations.
To exercise your GDPR rights, please contact us using the information provided in the Contact Us section below.
14. INDIAN USERS
If you are located in India, we process your data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), where applicable. You have the right to:
- Access your personal data.
- Correct inaccurate personal data.
- Request erasure of your personal data.
- Withdraw your consent for data processing.
- Nominate another individual to exercise your rights in case of death or incapacity.
UPI IDs collected for withdrawal processing are used solely for the purpose of processing your reward payments and are not shared with any parties other than the payment processor.
15. PERMISSIONS
The App requests the following device permissions:
- Internet Access: Required for all App functionality, including authentication, data synchronization, ad loading, and communication with our servers.
- Push Notifications (POST_NOTIFICATIONS): Used to send you reward updates, daily reminders, and important announcements. You can disable this permission at any time through your device settings.
The App does not access your camera, microphone, contacts, location, phone state, or any other sensitive device permissions unless explicitly stated.
16. DATA COLLECTED BY FEATURE
To provide full transparency, below is a summary of data collected by each major App feature:
- Registration and Login: Email address, password (hashed and managed by Firebase Authentication), display name, profile photo URL, Google account information (if using Google Sign-In).
- Spin Wheel: Spin results, points earned, spin history.
- Scratch Cards: Scratch card results, points earned, scratch card history.
- Daily Check-In: Check-in dates, check-in streaks, streak freeze usage.
- Daily Rewards: Reward claim dates, reward streaks, reward amounts.
- Tasks: Task completion status, points earned per task.
- Quizzes: Quiz answers, scores, points earned.
- Surveys: Survey responses, completion status, points earned.
- Games: Game scores, play history.
- Weekly Challenges: Challenge progress, completion status.
- Achievements: Achievement unlock status and dates.
- Leaderboard: Display name and points (visible to other users).
- Referral Program: Referral code, referrer and referred user relationship, referral status, referral bonus points.
- Wallet and Withdrawals: Points balance, withdrawal history, UPI ID or PayPal email, withdrawal amounts, withdrawal status (pending, approved, or rejected), currency preference.
- Live Chat: Chat messages, timestamps, sender identification.
- Advertisements: Ad view history, ad interaction data (collected by Google AdMob and Unity Ads).
17. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: drillmovies@gmail.com
We will respond to your inquiry within a reasonable timeframe and no later than 30 days from receipt of your request.
By using the Spin5X App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.