Privacy Policy

Effective date: October 29, 2026

Last updated: October 29, 2026

This Privacy Policy describes how SnackBonus ("SnackBonus," "we," "us," or "our") handles personal information when you use the SnackBonus mobile application, visit snackbonus.com, or interact with any related feature, content, customer-support channel, or service that links to this Policy (collectively, the "Services"). It also explains the choices and rights available to you.

Please read this Policy before using the Services. If you do not agree with it, do not use the Services. You may request deletion of your account and associated personal information as described in Section 9.

1. Applicability

This Policy governs personal information processed through the Services. It does not govern a third-party website, application, advertisement, payment service, social network, or other offering that maintains its own privacy notice, even when the Services link to or integrate with it. A link or integration does not mean that we control or endorse that third party's privacy practices.

When you use the Services, you acknowledge that your personal information will be handled as described here. Where applicable law requires consent for a particular activity, we will request that consent separately. You may withdraw consent at any time, subject to legal and technical limitations; withdrawal does not affect processing that was lawful before withdrawal.

2. Information We Process

The information we process depends on the features you use, the permissions you grant, your device and settings, and the law that applies where you live.

2.1 Information You Submit

We may receive the following information directly from you:

2.2 Information From Connected Services and Other Sources

If you choose to sign in through or connect a third-party service, such as Google or another platform, we may receive the information that the provider and your settings permit, such as your name, email address, profile image, platform user ID, or other authorized account information. The provider determines how it processes information on its own service.

Where an invitation or contact-discovery feature is available, we may process contact details that you deliberately select or authorize solely to provide that feature. We will not send a message to your contacts without a separate action by you, and we do not retain contact information for an unrelated purpose. We delete or anonymize it when it is no longer needed for the requested feature, subject to the limited legal, security, and fraud-prevention retention grounds in Section 8.

We may also receive information from advertising, analytics, attribution, anti-fraud, payment, and other business partners, including campaign and conversion information, inferred region, risk signals, and confirmation that an installation, advertisement interaction, or transaction occurred.

2.3 Information Collected Through Use of the Services

We and our service providers may automatically collect:

These data may be collected through SDKs, cookies, pixels, local storage, APIs, log files, and comparable technologies.

2.4 Location and Device Permissions

We may infer a general location, such as country or city, from an IP address or device settings. We collect precise geolocation only if a feature requires it, we explain the purpose, and you grant the relevant device permission or other legally required consent. You can revoke a device permission in the operating-system settings, although the related feature may then stop working.

If a feature requests access to contacts, notifications, photos, media, camera, microphone, or another protected device resource, access is limited to the purpose shown when permission is requested. Permission can be changed through your device settings.

3. Why We Use Information

We use personal information for the following purposes:

Where the European Economic Area, United Kingdom, or another jurisdiction requires a legal basis, we rely on one or more of the following:

5. Recommendations, Profiling, and Automated Processing

Automated systems may use viewing activity, engagement, device data, reward activity, and inferred interests to rank content, select tasks or offers, personalize advertisements, detect suspicious behavior, and support transaction review. These systems may create preference or risk profiles.

Our routine recommendation and advertising systems are not intended to make decisions that produce legal or similarly significant effects. A reward or withdrawal may, however, be delayed, limited, or reviewed when automated systems identify suspected fraud, abuse, or an inconsistency. Where applicable law grants rights concerning a solely automated decision with a significant effect, you may ask for meaningful information about the decision, request human review, state your position, or challenge the result by contacting us.

6. When Information Is Disclosed

We may disclose personal information as follows:

We do not rent personal information. We do not disclose personal information for money. Some privacy laws use broader definitions of "sale," "sharing," or "targeted advertising" that may cover disclosures involving advertising cookies, SDKs, or identifiers. Where those laws apply, you may opt out as explained in Sections 7 and 10.

Push notifications may be delivered through services such as Firebase Cloud Messaging. Those providers may receive an app or device token and limited delivery or interaction metadata needed to route and measure the notification.

7. Advertising, Analytics, Cookies, and Similar Technology

The Services may use cookies, mobile SDKs, pixels, APIs, local storage, and similar technology to keep the Services functioning, remember preferences, secure accounts and rewards, understand use, diagnose problems, measure campaigns, and provide advertising. On our website, a consent tool will be provided where required so that you can reject or later withdraw consent for non-essential technologies. Essential technology may remain active because it is required for security or core operation.

Advertising and attribution providers may use advertising identifiers, IP address, approximate region, device and app information, advertisement interactions, and conversion events to provide contextual or interest-based advertisements, measure results, credit campaigns, cap frequency, conduct research, and detect fraud. With separate authorization where required, a feature may also process a selected contact identifier or another protected device datum for the stated advertising, attribution, referral, or fraud-prevention function. Non-public contact information will not be publicly disclosed or used to message a contact without your action.

Analytics providers, which may include Google Analytics or Firebase Analytics, may receive limited device, network, session, and interaction data to help us understand use of the Services and evaluate reliability and performance. These providers process information according to the agreements that govern their work for us and, where they determine their own purposes, their respective privacy notices.

Your available controls may include:

After opting out of personalized advertising, you may continue to receive non-personalized or contextual advertisements. Resetting or limiting an advertising identifier may not eliminate all measurement that is legally permitted. Because there is no uniform standard for browser "Do Not Track" signals, our Services do not currently respond to those signals; we honor legally recognized opt-out preference signals where required and technically supported.

8. Retention, Security, and International Processing

8.1 Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The period varies based on the type of information, whether your account remains active, operational requirements, legal limitation periods, and obligations involving tax, accounting, payments, anti-fraud controls, dispute resolution, security, and enforcement. When information is no longer required, we delete it, anonymize it, or securely isolate it until deletion is practicable, subject to backup cycles and legal restrictions.

8.2 Security

We apply administrative, technical, and organizational measures designed to protect personal information. Measures may include access controls, monitoring, encryption in transit such as HTTPS/TLS, and hashing, tokenization, encryption, or pseudonymization of selected identifiers where appropriate. We also require service providers to maintain protections appropriate to their role. No storage or transmission method is completely secure, so we cannot promise that unauthorized access, loss, or misuse will never occur.

8.3 International Processing

SnackBonus and its providers may process information in countries other than the one in which you live, including the United States. Those countries may provide different privacy protections. When required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism, and apply supplementary protections where appropriate.

9. Your Rights and Account Choices

Depending on where you live, you may have the right to:

You may exercise an in-app control where available, submit an account-deletion request through the web form at https://snackbonus.com/account-deletion, or email [email protected]. Please describe the request and identify the account concerned. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where local law allows, but we may require proof of authorization and direct verification with you.

We will respond within the period required by applicable law. For example, many verified requests are answered within 30 days, while certain U.S. state laws allow up to 45 days. A lawful extension may apply for a complex or numerous request; if so, we will explain the delay. We may deny or limit a request where the law permits, including when we cannot verify it or information must be retained for security, fraud prevention, legal compliance, transactions, disputes, or the rights of others. You may appeal a denial by replying to our decision or using the contact address below. We will not discriminate against you for exercising a privacy right.

You can also:

Deleting the app does not by itself delete your account or all information maintained on our systems. Declining optional information or permissions may make the corresponding feature unavailable.

10. Additional U.S. State Disclosures

Residents of California and other U.S. states with comprehensive privacy laws may have rights concerning the categories of personal information we collect, the sources and business purposes described in Sections 2 and 3, the recipients listed in Section 6, and advertising disclosures that a law defines as sale, sharing, or targeted advertising. The relevant categories may include identifiers; customer-record information; commercial and transaction information; internet or electronic-network activity; approximate or precise geolocation when enabled; audio, visual, or similar content; inferences; and account credentials or financial information that applicable law treats as sensitive.

We do not knowingly sell or share for cross-context behavioral advertising the personal information of users we know are under 16. You may submit an access, correction, deletion, opt-out, or appeal request as described in Section 9. Where required and technically available, we also treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out for the browser or device sending the signal.

11. Children and Teenagers

The Services are not directed to children under 13, and we do not knowingly collect their personal information. In the EEA, the United Kingdom, or another place that requires a higher age for a child to consent independently, users must meet that higher age, which may be 16, unless a parent or guardian provides valid authorization as permitted by law.

If we learn that personal information was collected from a child contrary to applicable requirements, we will take reasonable steps to delete it. A parent or guardian who believes a child provided personal information improperly should contact [email protected].

12. User Content and Public Areas

Information or content you choose to post in a public profile, comment or bullet-comment area, or other public feature can be viewed, copied, or used by others. Do not publish information that you want to keep private. Content that violates our rules or is unlawful, abusive, unsafe, or otherwise objectionable may be restricted or removed, but moderation does not make public content private.

13. Changes to This Policy

We may revise this Policy to reflect changes in the Services, our practices, technology, or law. We will update the date at the top. When a change materially affects your rights or the way we use personal information, we will provide additional notice before the change takes effect when required, such as an in-app message, website notice, or email. Your use of the Services after the effective date is subject to the revised Policy, but we will obtain consent for a new use when the law requires it.

14. Contact Us

For a privacy question, complaint, rights request, or concern about a child's information, contact us at:

SnackBonus Privacy Team

Website: https://snackbonus.com

Email: [email protected]