Privacy Policy

Introduction

Effective Date: April 8, 2026

Cloudwinnings is committed to maintaining transparency in our data practices. This Privacy Policy informs you about our methods for collecting, using, and sharing your personal data. By interacting with our website at www.Cloudwinnings.com or using our Cloudwinnings apps on iOS and Android platforms, you consent to these practices. This policy is subject to our Terms and Conditions.

Contact Information

For privacy-related inquiries, data requests, or concerns, contact us at:

• Email: Support@cloudwinnings.com

• Cloudwinnings, Inc.

Protecting Your Privacy

• Ensure you understand this policy before continuing on our Website or apps.

• Maintain a unique password and update it periodically.

• Utilize cookie settings to control online tracking.

• Stay informed about protective measures from local consumer agencies:

https://www.usa.gov/state-consumer

Disclaimer:

Internet transmissions cannot guarantee absolute privacy or security. Data you transmit may be accessed by unauthorized parties, even when encrypted.

Policy Updates

Cloudwinnings may revise this Privacy Policy. When material changes are made, we will update the "Last Updated" date at the top of this page. Users should review the policy periodically. Using our platforms post-update indicates your agreement to the changes.

Age Restrictions

The Cloudwinnings platform, including our mobile applications, is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at support@cloudwinnings.com. Data Classification

• Private Data: Pertains to specifics like your IP address, stored securely to prevent public access.

• Public Data: Details like profile images, names, countries, social media accounts, and prizes won are visible to website visitors. If any private data unintentionally becomes public, it is henceforth classified as public data.

Data Collection

We may gather:

• Account and contact details (name, email address, phone number, home address).

• Payment and transaction information.

• Anti-fraud data.

• Government IDs for significant rewards.

• Personal interests.

• Interactions with Cloudwinnings.

Data Collected Through Our Mobile Applications

In addition to the data listed above, our Android and iOS mobile applications collect the following:

Account & Authentication Data

• Email address and password (used for login only; passwords are never stored on your device).

• Authentication tokens (stored securely using Android Keystore or iOS Keychain) to keep you signed in.

• Subscription status and user account ID.

Purchase & Transaction Data (via In-App Shopping Browser)

Our mobile apps include a built-in shopping browser. When you make purchases through this browser, the app detects completed transactions to award you entries into our giveaways. To accomplish this, the app uses scripts within the shopping browser that may:

• Detect purchase confirmation events from merchant websites.

• Collect order details including: merchant name and domain, order ID, product names, prices, quantities, cart total, and currency.

• Interact with analytics tags on merchant pages (such as those from Meta/Facebook, Google Analytics, TikTok, and Pinterest) solely to identify that a purchase was completed.

This data is stored temporarily on your device and periodically transmitted to Cloudwinnings servers over encrypted connections (HTTPS) to process your rewards.

Contacts Data (with your permission)

• If you choose to use the "Invite Friends" referral feature, the app will request permission to access your device contacts.• Contact names and phone numbers are accessed locally on your device to display your contact list within the app.

• Contact data is NOT automatically uploaded to our servers. You control which contacts to invite, and invitations are sent through your device's native SMS application.

• You may revoke contact permission at any time through your device settings.

Device & App Information

• Device platform (Android or iOS).

• App version and interaction data (for crash reporting and performance monitoring).

• We do NOT collect device identifiers such as Android Advertising ID (GAID), IMEI, device serial numbers, or MAC addresses.

Data We Do NOT Collect Through Our Mobile Apps

• Location or GPS data

• Camera or photo library content

• Microphone or audio data

• Calendar or health data

• Biometric data

• Browsing history outside of the in-app shopping browser

Permissions Required by Our Android Application

• INTERNET: Required for communicating with our servers and loading websites in the in-app shopping browser.

• READ_CONTACTS: Required only for the invite/referral feature. This permission is requested only when you access the Invite Friends screen and is never granted automatically.

External Data Sources

We may receive data from third parties, always respecting legal boundaries.

Data Usage

We use the gathered data to:

• Provide and improve our services, including detecting purchases and awarding giveaway entries.

• Process transactions and deliver rewards.

• Communicate with users about their accounts, transactions, and rewards.

• Operate our referral and invite program.

• Market our products and services.

• Monitor app performance, diagnose crashes, and improve stability.

• Ensure security, prevent fraud, and maintain legal compliance. Data Sharing

• Public data may be shared openly.

• Private data is shared only when legally mandated.

• For prize deliveries, specific details might be shared with vetted third-party platforms.

Third-Party Services in Our Mobile Applications

Our mobile apps integrate the following third-party service:

New Relic (Performance Monitoring & Crash Reporting)

We use New Relic to monitor app performance, identify crashes, and improve the user experience. New Relic may receive:

• App crash reports and error logs.

• Interaction traces and network request performance metrics (response times, status codes).

• Custom event data including: subscription status checks, checkout sync summaries (number of transactions processed, entries awarded), checkout attribution data (merchant domain, transaction status, purchase amount), and device platform.

New Relic does NOT receive: your password, email address, payment card information, contact list, or HTTP response body content.

For more information, see New Relic's Privacy Policy at https://newrelic.com/termsandconditions/privacy.

We do not integrate any advertising networks, ad tracking SDKs, or third-party analytics services beyond New Relic in our mobile applications.

Data Protection

We implement the following measures to secure your data:

• All data transmitted between our mobile apps and servers is encrypted using HTTPS/TLS.

• Authentication credentials on iOS are stored in the device Keychain with encryption, accessible only when the device is unlocked.

• Authentication credentials on Android are stored using the platform's secure Keystore mechanism.

• Passwords are never stored locally on your device.

• Pending transaction data stored locally on your device is cleared after it is successfully submitted to our servers.

• Our crash reporting service (New Relic) is configured to not capture HTTP response bodies, ensuring sensitive data in API responses is not logged.

Cookies

To understand user behaviors, we might use cookies and similar technologies on our website. Within our mobile applications, the in-app shopping browser operates with standard browser cookie behavior for the merchant websites you visit. Cloudwinnings does not access, modify, or extract cookies from merchant websites.

Data Deletion & Account Removal

Users may request deletion of their account and all associated personal data. To delete your account:

• Contact us at Support@cloudwinnings.com with the subject line "Account Deletion Request."

• Include the email address associated with your account.

• We will process your request and delete your personal data within 30 days.

• Upon account deletion, locally stored data (authentication tokens, pending transactions) is cleared immediately from your device when you log out.

Please note:

• Prize winnings and associated public display data may be retained for transparency and legal compliance purposes even after account deletion.

• Some data may be retained as required by law, for fraud prevention, or to resolve disputes.

• Anonymized or aggregated data that cannot identify you may be retained indefinitely.

Data Stored Locally on Your Device

Our mobile app stores the following data locally:

• Authentication token (for keeping you signed in).

• Pending checkout transactions (until successfully submitted to our servers).

• Deduplication records (to prevent duplicate transaction submissions; limited to 100 records).

• Shopping browser session data (expires after 2 hours of inactivity).

• App setup and preference flags.

You can clear all locally stored data by logging out of the app or by clearing the app's data through your device settings.

Public Display

By participating in our giveaways or using our platform, you consent to the public display of specific details, including your profile image, location (country, province, or state), prize information, and associated social media profiles.

Adjusting Display Preferences

If you wish to withdraw your approval for public displays, please reach out to our support team. Be advised that making this choice could result in the termination of your account and may limit your regular access to the platform.

Data Retention Duration

• Account and profile data is retained for as long as your account is active.• Transaction and purchase history is retained for as long as your account is active and for a reasonable period thereafter for legal and auditing purposes.

• Publicly displayed data, like prize details, may remain on our site either for a set period or indefinitely.

• Crash reports and analytics data sent to New Relic are subject to New Relic's data retention policies.

• Locally stored data on your device is cleared upon logout or app data reset.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.

• Right to Correction: Request correction of inaccurate or incomplete data.

• Right to Deletion: Request deletion of your account and associated data (see Data Deletion section above).

• Right to Data Portability: Request your data in a structured, commonly used format.

• Right to Withdraw Consent: Revoke consent for data processing where consent is the legal basis (e.g., contacts access).

• Right to Object: Object to certain data processing activities.

To exercise any of these rights, contact us at Support@cloudwinnings.com.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information is collected, request deletion of your personal information, opt out of the sale of personal information (Cloudwinnings does not sell personal information), and not be discriminated against for exercising your privacy rights.

Conclusion

Your privacy is paramount to Cloudwinnings. Use this policy to make informed decisions while engaging with our services.