Privacy Policy & Data Safety Disclosures
This Privacy Policy governs the collection, use, protection, and transparent processing of personal data across the EarnVero Rewards web platform (earn-verona-app.vercel.app) and official Google Play mobile applications. Operated by Novaro.
Our Zero-Trust Privacy Commitment
EarnVero Rewards is a legitimate consumer loyalty and promotional earning platform operated by Novaro. We adhere to a strict data minimization policy: we collect only the minimal data required to authenticate your account, attribute task completions, prevent bot fraud, and fulfill legitimate cash and gift card redemptions. We never sell, rent, or trade your personal information to third-party data brokers or marketing aggregators.
1. Information We Collect
A. Information You Voluntarily Provide:
- Account Credentials: Username, valid email address, and cryptographically hashed password (using salted bcrypt with strong work factor 12). Plaintext passwords are never stored or logged.
- Profile Details: Optional display name, preferred language, and country of residence for regional offer matching.
- Payout Details: Payment destination routing identifier (e.g., PayPal email address, UPI VPA ID, or public crypto address) provided strictly at the moment you initiate a withdrawal request.
- Customer Support Communications: Inquiries, attachments, and resolution correspondence submitted through our support ticket desk.
B. Automatically Collected Technical & Attribution Data:
- Attribution Click Identifiers: Internal server-generated identifiers (
clk_...) generated when you launch a task to reliably verify completion callbacks from advertising networks. - Security & Anti-Fraud Telemetry: IP address, user-agent string, device platform, login timestamps, and Cloudflare Turnstile cryptographic bot verification tokens to protect against automated account farming and credential stuffing attacks.
C. Prohibited Data (What We Explicitly DO NOT Collect):
In strict compliance with Google Play 2026 Developer Policies and user privacy standards, our application does NOT access, request, or collect:
- Precise GPS location or background location data
- Address book, device contacts, or phone numbers
- SMS text messages, call logs, or telephony records
- Camera, photos, audio, microphone, or media files
- Installed application inventory (the
QUERY_ALL_PACKAGESpermission is strictly forbidden and disabled) - Persistent hardware serials (IMEI, IMSI, MAC address, or SIM identifiers)
2. Age Restrictions & Children's Privacy (COPPA & GDPR-K)
EarnVero Rewards is intended exclusively for individuals who are at least 18 years of age, or individuals aged 13 to 17 who have obtained the verified permission and supervision of a parent or legal guardian.
We strictly comply with the United States Children's Online Privacy Protection Act (COPPA), the European Union GDPR-K, and global child protection frameworks. We never knowingly solicit, collect, or retain personal data from children under the age of 13. If we discover that an account has been created by a child under 13, all associated data, credentials, and balances are immediately and permanently erased from our servers. If you believe a minor under 13 has registered, please notify us at privacy@earnvero.app.
3. Third-Party Earning Partners & Offerwall Networks
To provide legitimate rewarded surveys, sponsored mobile games, and market research opportunities, we partner with verified ad networks. When you launch an offer, we transmit only an anonymized user identifier and click tracking ID. We never share your real name, email address, password, or payout credentials with partner networks:
Market research surveys. Receives pseudonymous user ID (subid_1) and internal click ID (subid_2) for callback verification.
Surveys and dynamic tasks. Receives user ID (uid) and click attribution ID (subid_1).
Rewarded mobile games and install tasks. Receives user ID (player_id) and click ID (custom_id).
App engagement and mobile quests. Receives user ID (user_id) and click ID (subid).
4. Cookies & Local Storage Technologies
We use cookies and browser storage strictly to maintain secure user sessions and defend against unauthorized automated access. You can customize your cookie preferences at any time using our on-site controls:
Cryptographically secure HttpOnly, Secure, SameSite tokens used to keep you logged in and defend against CSRF attacks.
Cloudflare Turnstile privacy-preserving security challenges to verify human registration without invasive behavioral tracking.
Aggregated, anonymized performance metrics to measure page load speed and identify application bottlenecks.
5. Google Play Store 2026 Data Safety Declarations
The following disclosure aligns directly with Google Play's Data Safety requirement for developers:
| Data Category | Data Elements | Collection Purpose | In Transit Security | User Deletable |
|---|---|---|---|---|
| Personal Info | Email, Username | Account management, authentication | TLS 1.3 Encrypted | Yes (Instant / Web) |
| Financial Info | Payment ID (PayPal/UPI/Crypto) | Fulfilling payout requests | TLS 1.3 Encrypted | Yes (On Request) |
| App Activity | Offer interactions, click IDs | Attribution, reward crediting | TLS 1.3 Encrypted | Yes (With Account) |
| Device / Other IDs | IP address, user-agent | Anti-fraud, bot prevention | TLS 1.3 Encrypted | Yes (With Account) |
6. Your Privacy Rights (GDPR, UK GDPR, and CCPA/CPRA)
Regardless of your geographical jurisdiction, EarnVero grants you comprehensive rights over your personal data:
Request a complete export of your personal profile, ledger history, and active account records.
Correct or update inaccurate account information directly from your profile settings or via customer support.
Permanently erase your account, login credentials, and personal data via in-app settings or our web deletion portal.
You will never face diminished service quality, penalties, or discrimination for exercising your privacy rights.
7. Account Deletion & Documented Data Retention
In compliance with Google Play's Account Deletion Policy, users can permanently delete their account and personal data at any time through either of the following channels:
Log in and go to Settings → Account → Delete Account. Confirm your password to immediately deactivate your account and queue your personal records for permanent erasure.
Visit our standalone web deletion portal at /delete-account (or directly at earn-verona-app.vercel.app/delete-account) to request deletion using your registered email address.
Upon account deletion, all personal identification records (email, username, hashed passwords, active sessions, support messages, and IP logs) are permanently purged within 30 days.
In accordance with corporate tax regulations, anti-money laundering (AML) mandates, and statutory financial accounting laws, completed ledger transactions and withdrawal records are retained in an anonymized, unlinked format for a mandatory statutory period of 7 years. These records contain zero personal contact information and serve solely for tax audits.
8. Contacting Us & Data Protection Inquiries
If you have questions regarding this Privacy Policy, your personal data, or wish to exercise your legal rights of access, rectification, or erasure, please contact our Data Protection Officer: