Privacy Policy

Last Updated: June 2, 2026

1. Information We Collect

1.1 Account Information

When you create a PaidByAds account, we collect:

• Email address: For account creation and communication
• Name: For payment processing and account identification
• Payment information: PayPal account details for receiving payouts
• Date of birth: To verify age requirements (18+)

1.2 Identity Verification Data

To prevent fraud and ensure fair earning opportunities, we collect:

• Government ID verification: Driver's license or state ID, via KYC integration (completed before your first cashout)
• Liveness check data: A brief on-device liveness check at KYC (we do not match your selfie against your ID)
• Device fingerprints: To detect multi-account fraud
• On-device attention data: Face presence and movement during ad viewing (processed locally on your device, not uploaded)

1.3 Ad Viewing Data

To verify genuine engagement and calculate payments, we collect:

• Attention tracking: On-device verification that you're watching ads (face presence and head/face movement — no gaze or eye tracking)
• Session duration: Time spent watching advertisements
• Ad interaction data: Completion rates, skips, and engagement metrics
• Multiple devices: Whether you've registered more than one device (up to 5) to earn in parallel. There are no earning tiers — every user earns the same 80% share

1.4 Technical Information

• Device information: Device model, operating system, Android version
• App usage data: Features used, crash reports, performance metrics
• IP address and location: General location for fraud prevention (not precise GPS)
• Network information: Connection type, carrier information

1.5 Google Account Data (OAuth)

When you sign in with Google, we receive:

• Basic profile information: Name, email address, profile picture
• OAuth access tokens: Securely stored and used only for authentication

We do NOT access: Your Gmail, Google Drive, Calendar, or any other Google services beyond basic authentication.

1.6 Receipt Data

When you upload receipts (used to qualify for bonus-pot eligibility and to waive payout fees), we collect:

• Receipt images: The photo you submit
• Extracted details: Merchant, date, amount, and category derived from the receipt

2. How We Use Your Information

2.1 Core Platform Operations

• Payment processing: Calculating and distributing earnings (80% revenue share)
• Fraud prevention: Detecting multi-account abuse, bot activity, and fake engagement
• Account management: Authenticating users, password resets, account security
• Platform improvements: Analyzing usage patterns to enhance user experience
• Ad targeting metrics: Aggregated, anonymized metrics shared with ad network partners

2.2 Attention Verification

We use AI-powered attention detection to ensure advertisers receive genuine engagement:

• Face detection confirms you're present during ad viewing (ML Kit, processed locally)
• Gesture verification requires gesture to start ad play.
• External AI witness system detects attempts to fool attention tracking
• Privacy protection: Attention processing (face presence and movement) happens on your device and is never uploaded. Note: your KYC liveness selfie and profile photo are stored — see Sections 3 and 4

2.3 Revenue Transparency

• Real-time dashboard showing platform revenue
• Your individual earnings and payment history
• Bonus pool distributions when platform revenue exceeds $10M/month owner cap

3. Data Sharing and Disclosure

3.1 What We Share

We only share your information in these limited circumstances:

• Payment processor: PayPal receives the information needed to process your payouts
• Identity verification services: KYC providers verify your identity (one-time verification)
• Ad network partners: Aggregated, anonymized engagement and targeting metrics (via Google AdMob and the networks served through AdMob mediation)
• Firebase/Google Cloud: Authentication and database services (covered by Google's privacy policies)

3.2 What We NEVER Share

• Your email or phone number with advertisers
• On-device attention data (face presence and movement never leaves your device)
• Your KYC liveness selfie or profile photo with advertisers or merchants — unless you explicitly opt in to share it

3.3 Legal Requirements

We may disclose information if required by law, including:

• Valid legal process (subpoena, court order)
• Protection of our legal rights
• Investigation of fraud or illegal activity
• Protection of user safety

4. Data Security

4.1 Security Measures

• Encryption: All data in transit uses TLS/SSL encryption
• Firebase Security: Firestore security rules prevent unauthorized data access
• Access controls: Strict internal access policies with audit logging
• Local processing: Attention data (face presence and movement) processed on-device, never transmitted

4.2 Data Retention

• Financial records: Payment history retained for 7 years (legal requirement)
• Fraud prevention data: Device fingerprints retained for 2 years
• Receipt data: Retained for compliance and fraud prevention
• KYC and liveness data: Retained as required for identity verification and compliance

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access your data: Request a copy of all data we hold about you
• Correct inaccuracies: Update incorrect personal information
• Export data: Receive your data in machine-readable format
• Opt-out of data collection: Discontinue using the service (required for app functionality)

5.2 Communication Preferences

• Manage email notification settings in the app
• Opt-out of promotional communications (transactional emails still sent)
• Control push notification preferences

6. Children's Privacy

Age Requirement: PaidByAds is only available to users 18 years or older. We do not knowingly collect information from minors. If we discover a user is under 18, we will immediately terminate their account and delete their data.

7. Third-Party Services

7.1 Advertising Networks

We use Google AdMob as our advertising provider:

• Google AdMob: Subject to Google's Privacy Policy. AdMob mediation may serve ads from other networks; those ads are governed by their respective providers' privacy policies

These networks may use cookies and tracking technologies. Review their privacy policies for details on their data practices.

7.2 Analytics Services

• Firebase Analytics: App usage and performance monitoring
• Google Analytics: Website traffic analysis (if applicable)

8. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. By using PaidByAds, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know: What personal information we collect and how we use it
• Non-discrimination: We won't discriminate against you for exercising your rights

10. European Privacy Rights (GDPR)

If you're in the European Economic Area, you have rights under GDPR:

• Legal basis for processing: Contractual necessity and legitimate interests
• Right to access: Request a copy of your data
• Right to rectification: Correct inaccurate data
• Right to data portability: Receive your data in structured format
• Right to withdraw consent: Where consent is the legal basis

11. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will:

• Notify you via email of material changes
• Display a prominent notice in the app
• Update the "Last Updated" date
• Provide 30 days notice before changes take effect

12. Contact Information

13. Transparency Dashboard

In keeping with our commitment to radical transparency, all users can view:

• Total platform revenue (real-time)
• Your personal earnings and payment history
• Revenue distribution breakdown (80% to users, 10% monthly bonus pot, 10% Paid By Ads platform)
• Bonus pool status when platform exceeds $10M monthly owner cap
• Number of active users receiving payments