Privacy Policy
This Privacy Policy explains how information is collected, used, stored, shared, and protected when you use the Spin To Win – Cash & Recharge Android application and related services. The Spin To Win App has been available since 2020.
Privacy at a glance
1. Scope and Acceptance
This Privacy Policy applies to the Spin To Win – Cash & Recharge Android application (the “App”), the website www.spintowins.in, and related support, reward, redemption, and communication services (collectively, the “Services”).
The App was first launched in 2020. This version of the Privacy Policy is effective from August 18, 2026 and replaces earlier published versions. The App, its features, service providers, and data practices may have changed over time; this Policy describes the practices applicable to the current version of the Services unless a different notice is presented for a specific feature.
By using the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent—such as for personalized advertising, device storage, or certain data processing—we request that consent separately. Merely using the App does not automatically mean that you consent to personalized advertising.
2. App Operator and Data Controller
The App is operated by Mahendra Prusty under the Spin To Win brand. For personal information collected directly for the operation of the App, Mahendra Prusty is the data controller or data fiduciary, as applicable under relevant law.
3. Information We Collect
3.1 Information you provide
- Registration and profile information: mobile number, name, and any optional profile information you submit.
- Reward and redemption information: reward selection, redemption method, payment or recharge details, UPI-linked mobile number or UPI ID where requested, voucher details, and redemption status.
- Support information: messages, email address, feedback, screenshots, complaint details, and other information you send to support.
- Community content: messages, reactions, or posts you choose to submit inside optional community features of the App.
- Deletion or privacy requests: identifying information needed to verify that a request relates to the correct account.
3.2 Account, gameplay, and reward activity
- Points, spins, scratch cards, daily check-ins, tasks, games, referral activity, tokens, levels, bonuses, and reward history.
- Redemption requests, verification decisions, processing status, failed or cancelled requests, and related timestamps.
- Security signals used to identify duplicate accounts, automation, unusual activity, multiple-device abuse, referral manipulation, or suspected fraud.
3.3 Information collected automatically
- Device model, operating system, language, app version, screen information, and network type.
- Internet Protocol (IP) address and approximate country or region inferred from technical signals.
- App installation identifiers, device or app identifiers, Google Advertising ID where available, and consent or privacy-choice signals.
- App interactions, session timestamps, feature usage, ad impressions, ad clicks, crash data, diagnostics, and performance information.
3.4 Information stored on your device
The App may use local storage, cache, or Android preferences to save login status, settings, points or activity state, consent status, cooldown timers, daily step counts, notification preferences, and other functionality. Clearing App data or uninstalling the App may delete locally stored information, but it may not delete information already submitted to our servers or service providers.
3.5 Information we do not intentionally request
We do not ask you to provide account passwords, card PINs, UPI PINs, OTPs intended for financial authentication, or full government identity numbers through ordinary App use. Never send such confidential credentials to us by email or support message.
3.6 Sensitive information we do not collect
We do not collect precise GPS location, contacts, call logs, SMS content, photos or media libraries, microphone audio, or biometric data. We do not use Google Health Connect and we do not collect health records, medical information, heart-rate, sleep, or any health metric other than the optional on-device daily step count described in Section 7.
4. How We Use Information
We may use information to:
- Create, maintain, and secure user accounts.
- Operate spins, scratch cards, tasks, games, levels, referrals, points, and other App features.
- Review, verify, process, deliver, or reject reward and redemption requests.
- Detect fraud, bots, automation, duplicate accounts, abuse, unauthorized access, and policy violations.
- Show your daily step count and award milestone rewards, only if you use the optional Walk & Earn feature.
- Send you in-app or system notifications about rewards, timers, and features you have enabled.
- Operate optional community features and moderate content for safety.
- Provide customer support, respond to complaints, and communicate service or security updates.
- Measure App performance, diagnose errors, improve features, and understand aggregate usage.
- Display, measure, personalize, or limit advertisements according to user choices and applicable law.
- Comply with legal obligations, resolve disputes, protect users, and enforce our policies.
5. Legal Bases for Processing
Depending on your location and the type of information, we rely on one or more of the following:
- Providing the Service: processing necessary to operate the App and respond to your requests.
- Consent: for personalized advertising, notifications, activity recognition, or other activities where consent is legally required. You may withdraw consent at any time through available privacy controls or Android system settings.
- Legitimate interests: improving the Services, preventing fraud, securing the App, measuring performance, and protecting our rights, provided those interests are not overridden by your rights.
- Legal obligations: maintaining records, responding to lawful requests, and meeting regulatory or tax requirements where applicable.
6. Advertising, Consent, and Privacy Choices
The App uses Google AdMob to display advertisements. Google and participating advertising partners may process information such as the Advertising ID, IP address, approximate location, device information, ad views, clicks, interactions, app activity, diagnostics, and consent signals.
6.1 Personalized, non-personalized, and limited ads
Depending on your location, settings, age eligibility, consent status, and Google’s policies, the App may show personalized ads, non-personalized ads, or limited ads. Declining personalized advertising does not necessarily remove all ads; it generally changes how ads are selected and how certain information may be used.
6.2 EEA, United Kingdom, and Switzerland
For eligible users in the European Economic Area (EEA), the United Kingdom, and Switzerland, the App may display a consent message using Google’s certified Consent Management Platform and User Messaging Platform (UMP) SDK. The message may allow users to:
- Consent to eligible personalized advertising purposes;
- Decline consent;
- Manage individual purposes, features, and advertising partners; and
- Change or withdraw choices later through a “Privacy Choices” or similar option when required.
Consent choices may be stored on the device and communicated through industry-standard consent signals, including the IAB Europe Transparency and Consent Framework where applicable.
6.3 United States state privacy choices
In certain U.S. states, some advertising disclosures or transfers may be treated as a “sale,” “sharing,” or targeted advertising under applicable law. Eligible users may receive a privacy message or a control to opt out of applicable activities. We do not directly sell personal information in exchange for money; however, advertising-related disclosures may have broader legal definitions in some states.
6.4 India and other regions
Privacy messages and advertising choices are shown according to applicable law, Google’s requirements, the App’s configuration, and location signals. A European-regulations message is intended primarily for eligible users in the EEA, the United Kingdom, and Switzerland and is not intended to be shown merely because a user is located in India.
6.5 Advertising and activity or step data
Step counts, activity-recognition data, and Walk & Earn progress are never used to select, target, personalize, or measure advertisements, and are never shared with advertising partners.
Learn more from Google’s Privacy Policy and Google’s advertising technologies information.
7. Activity Recognition and Step Data (Walk & Earn)
The App includes an optional fitness feature called Walk & Earn. If you choose to use it, the App reads the number of steps you walk during the day so that it can show your progress and award small milestone reward points.
7.1 Permission used
To read step data on Android 10 (API level 29) and above, Android requires the
android.permission.ACTIVITY_RECOGNITION permission. The App requests this permission only for the Walk & Earn feature. If the permission is not granted, or if your device has no step sensor, the feature is simply hidden and no step data is read.
7.2 What is read
- Only the cumulative daily step count reported by the device’s built-in hardware step counter sensor (
TYPE_STEP_COUNTER). - We do not read distance, routes, GPS location, speed, calories, heart rate, sleep, or any other health or fitness metric.
- We do not read historical activity records from any other application.
7.3 How step data is used and stored
- Step data is processed and stored only on your device, using local Android storage.
- It is used exclusively to display your own daily progress and to determine whether a step milestone reward can be claimed.
- We do not collect step data on our servers, do not transmit it to Firebase or any backend, do not share it with any third party, and do not sell it.
- Step data is not used for advertising, profiling, or any purpose other than the Walk & Earn feature.
- The daily count resets each day and is cleared when you clear the App’s data or uninstall the App.
7.4 Google Health Connect
The App does not integrate with Google Health Connect and does not read from or write to Health Connect. Step data is read directly from the device’s hardware sensor.
7.5 Your control
Walk & Earn is entirely optional. You may decline the permission when requested, or revoke it at any time from Android Settings → Apps → Spin To Win → Permissions → Physical activity. Revoking the permission disables the feature; all other App features continue to work normally.
8. Notifications and Messaging
The App may send notifications so that you do not miss rewards, timers, tournaments, or important service messages. Notifications are delivered in two ways:
- Push notifications delivered through Google Firebase Cloud Messaging (FCM), which may work when the App is closed or in the background.
- Local notifications generated on your device by the App itself, for example when a timer completes, a mystery box becomes available, or a daily reward is ready. Some notifications may include quick-action buttons that open a specific screen inside the App.
8.1 Permission and timing
On Android 13 (API level 33) and above, the android.permission.POST_NOTIFICATIONS permission is required. The App does not request this permission at first launch; it is requested a few minutes after you have started using the App, so that you can decide with context. You may decline, and you may change your choice at any time in
Android Settings → Apps → Spin To Win → Notifications.
8.2 Data used for notifications
- An FCM registration token generated by Google for your App installation, used only to deliver notifications to your device.
- Basic delivery information such as notification type, timestamp, and whether the message was opened.
- Notifications are not used to deliver third-party advertising content, and notification tokens are not sold or shared for advertising purposes.
Notifications are dismissible. Declining notifications does not restrict your access to rewards or other App features.
10. Community Features and User Content
The App may include optional community features such as a group chat or a posts area. Participation is voluntary.
- Messages or posts you submit, together with your display name and the time of posting, are visible to other users of that feature and are stored on our Firebase infrastructure.
- Automated and manual moderation may be applied to detect abusive language, spam, duplicate or gibberish messages, contact details, external links, or content that violates our rules. Messages may be blocked, hidden, or removed.
- Do not post personal information such as your mobile number, address, UPI ID, payment details, OTPs, or the personal information of any other person. Information you post publicly may be seen and copied by others.
- We may retain community content, including removed content, for a reasonable period for safety, moderation, abuse investigation, and legal purposes.
- You may request removal of your own community content by contacting support.
11. Firebase and Other Service Providers
We may use Google Firebase services, including database, authentication, installation, analytics, crash-reporting, messaging, or related infrastructure features, depending on the App version. Firebase may process identifiers, account data, App interactions, diagnostics, and information submitted for rewards or redemptions on our behalf.
We may also use Google Play services, hosting providers, communication providers, reward-delivery providers, or payment/recharge partners where necessary to operate the Services. These providers process information according to their own terms, privacy policies, and contractual obligations.
More information is available in Firebase Privacy and Security.
13. Data Retention
We retain personal information only for as long as reasonably necessary to provide the Services, process and verify rewards, prevent fraud, resolve disputes, comply with legal obligations, and enforce our policies.
- Account and reward activity may be retained while the account remains active and for a reasonable period afterward.
- Redemption, fraud-prevention, accounting, and dispute records may be kept longer when necessary for legal, security, or operational purposes. Completed and paid redemption records may be automatically removed from our active database after a set period.
- Support communications may be retained while the issue is active and afterward for quality, security, and record-keeping purposes.
- Community messages may be retained while the feature is active and afterward for moderation and safety purposes.
- Step data, cached App files, and other locally stored data generally remain on your device until cleared, overwritten, or the App is uninstalled.
When information is no longer needed, we may delete, anonymize, aggregate, or securely isolate it, subject to technical and legal limitations.
14. International Data Transfers
Because we use global service providers such as Google, information may be processed or stored in countries other than the country where you live. Where required, providers and operators use contractual, organizational, or legal safeguards intended to protect transferred information.
15. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure connections, restricted database permissions, monitoring, and fraud checks.
16. Your Privacy Rights and Choices
Depending on your location and applicable law, you may have the right to:
- Request access to personal information associated with you;
- Request correction of inaccurate or incomplete information;
- Request deletion of personal information;
- Withdraw consent previously provided;
- Object to or restrict certain processing;
- Request data portability where legally applicable;
- Opt out of personalized or targeted advertising where available;
- Opt out of qualifying “sale” or “sharing” under applicable U.S. state law; and
- Complain to an appropriate data protection or consumer authority.
In addition, you can control device-level permissions at any time from Android Settings, including physical activity (step data), notifications, and storage. Disabling a permission only disables the related optional feature.
To exercise a right, email us or use the deletion-request form listed below. We may ask for reasonable verification to protect your account and prevent unauthorized requests. Some rights are subject to legal exceptions.
17. Account and Data Deletion
You may request deletion of your account and associated personal information by:
- Using an account-deletion option inside the App, where available;
- Submitting the Customer Data & Account Delete Form; or
- Emailing spintowinofficel@gmail.com with the subject “Account/Data Deletion Request.”
Please include the mobile number associated with the account and sufficient details for verification. After verification, we will process the request within a reasonable period as required by applicable law. We may retain limited records where necessary for fraud prevention, legal compliance, dispute resolution, accounting, or enforcement. Anonymous or aggregated information that cannot reasonably identify you may also be retained.
Locally stored information such as step counts, cached files, and App preferences is removed when you clear the App’s data or uninstall the App.
18. Children and Age Eligibility
The App is intended for users who are at least 18 years old. We do not knowingly request or collect personal information from children. If you believe a child has provided personal information, contact us so that we can review and take appropriate action.
19. Third-Party Apps, Websites, and Links
The App may open or link to third-party apps, websites, videos, social networks, offers, surveys, stores, or payment/reward services. Those third parties are independent and their own privacy policies and terms apply. We are not responsible for their content, availability, security, or privacy practices.
20. Offline Storage, Caching, and App Updates
To make the App fast and reliable, App content may be stored on your device and refreshed from our servers.
- The App may cache pages, images, sounds, and scripts on your device so that it opens quickly and continues to work during temporary network or server problems.
- A copy of the App interface may also be included inside the installed application as a backup, so that the App can still open if our website is temporarily unreachable.
- A service worker or similar mechanism may check for updated content in the background so that improvements reach you without a store update.
- This caching stores App files and your local settings only. It does not collect additional personal information and does not transmit your local data anywhere.
- Clearing the App’s data or uninstalling the App removes cached content.
21. Device Permissions Summary
The App requests only the permissions needed for the features described in this Policy:
| Permission | Why it is used | Optional? |
|---|---|---|
| Internet / Network state | Load the App, sync rewards, show ads, detect connectivity | Required |
| Post notifications | Reward, timer, and service notifications (asked a few minutes after launch) | Optional |
| Physical activity (Activity recognition) | Read the device step counter for the optional Walk & Earn feature. Step data stays on your device | Optional |
| Vibrate | Short haptic feedback on taps and rewards | Required for feedback |
| Storage / file access (where applicable) | Save a shared image temporarily or download a file you request | Optional |
| Advertising ID | Show and measure advertisements, subject to your privacy choices | Controlled by Android settings |
We do not request location, contacts, SMS, call logs, camera, or microphone permissions.
22. Website, Cookies, and Similar Technologies
Our website may use cookies, local storage, log files, or similar technologies provided by Blogger, Google, advertising services, analytics services, or embedded content providers. These technologies may remember preferences, secure the site, measure traffic, or support advertising. Browser controls may allow you to block or delete cookies, although some website functions may not operate correctly afterward.
23. Changes to This Privacy Policy
Spin To Win was first launched in 2020. We may update this Privacy Policy to reflect changes in the App, service providers, legal requirements, security practices, or business operations. The “Last Updated” date at the top identifies the latest revision, and the current version replaces earlier published versions. Where a change materially affects your rights or the way information is used, we may provide an additional notice in the App or on the website.
Summary of the August 18, 2026 update: added Section 7 (Activity Recognition and Step Data for the optional Walk & Earn feature), Section 8 (Notifications and Messaging), Section 9 (Sharing, Referrals, and Shared Images), Section 10 (Community Features and User Content), Section 20 (Offline Storage, Caching, and App Updates), and Section 21 (Device Permissions Summary); clarified that step data never leaves the device and is never used for advertising.
24. Contact Us and Grievance Requests
For privacy questions, complaints, access requests, correction requests, consent withdrawal, or data deletion, contact: