Tingjar Privacy Policy

Who runs Tingjar

Tingjar is made by SlayerBlade, an individual developer based in India, and published on Google Play by HEHKU. SlayerBlade is the controller of your personal data (the business responsible for it under data protection law). Business registration is in progress.

Tingjar is for adults (18 or older) who live in the United States, Canada, the United Kingdom, Australia and New Zealand. To reach us about anything on this page, email support@slayerblade.in.

What we collect

• Your Google account name and email. You sign in with Google, and this is how we know it's you.
• A device identifier hash and a Play Integrity verdict. The hash is a scrambled version of an ID from your phone, so we can tell one phone from another without keeping the ID itself. Play Integrity is Google's check that the app is running on a real, unmodified phone. We use both to stop one person running many accounts.
• Your payout details, which you give us the first time you cash out: the payout method you pick (PayPal or Amazon gift card), and your PayPal email if you choose PayPal. Amazon gift cards go to the email on your Tingjar account.
• Your country, so we know Tingjar is available to you and which Amazon store your gift cards are for.
• Your task answers: feedback forms, one-line answers and anything else you type into a task.
• What you did and what you earned: which jobs you started, which days you opened a beta app, and your coin ledger and payouts, including the PayPal transaction ID or gift card order ID for each payout.
• Your IP address, which every server sees when the app connects. We use it for fraud checks.
• Advertising ID and ad data, through our ad partners. When ads are on, the ad network that shows them (Start.io, Chartboost, AppLovin or Google AdMob) collects your phone's Android Advertising ID and other device identifiers, your approximate location (worked out from your IP address), device and app information, how you interact with its ads, and crash and performance data from its own code. You can reset or delete your Advertising ID in Android Settings › Privacy › Ads.
• A push token, an ID from Google Firebase Cloud Messaging that lets us send reminders to your phone.
• App usage time, only if you allow it. For beta tests and timed games you've taken, the app uses Android's Usage Access permission to record when that app or game was open (start and end times) and sends those times to us to confirm the task. We never read or send anything about your other apps. You can turn this off in Android settings; tests then ask a daily question instead.
• Levels you clear in our own games, only for level jobs you take. When you open one of our studio's games from a Tingjar level job, the game receives a one-time code and sends us the highest level you've cleared with that code. It sends nothing else, and nothing at all if you didn't open it from Tingjar.
• Bug reports you send: how bad it was, what you wrote, and your phone's make, model and Android version, which the app adds so the developer can reproduce the bug.
• If you sign up as a developer: your Google name and email, the studio name and contact you give us, and the details of the apps you submit.

What we don't collect

• We don't ask for your phone number, your home address, a government ID or bank details.
• We don't sell your personal information for money. Ads are covered below under Ads, surveys and games.
• Ads never earn coins. Watching or tapping an ad pays nothing, and no ad is ever the price of earning coins.

Ads, surveys and games

Tingjar is free because of ads and partners. The app may show a full-screen ad when you tap Next round in the quiz or Next level in a mini game, and one banner on the Missions screen. Ads never pay coins. Only one ad network runs at a time, and none starts while we have ads switched off.

• Ad networks: Start.io, Chartboost, AppLovin and Google AdMob. Whichever one is running receives your Advertising ID and other device identifiers, approximate location from your IP address, device model and settings, app information, how you interact with its ads, and crash and performance data from its code. It uses this to show and measure ads, for analytics and to stop ad fraud, and may use it to show you ads based on your interests across apps and websites unless you opt out. Each has its own privacy policy (for example start.io/policy/privacy-policy, applovin.com/privacy and policies.google.com/technologies/partner-sites).
• Your choices. In the UK and EEA, Google's consent form (the User Messaging Platform) asks before any ad network starts, and your answer decides whether ads are personalised; change it any time in More › Ad privacy choices. In the US, turn on More › Do not sell or share my info and the ad network is told not to sell or share your data for interest-based ads. Anywhere, you can delete your Advertising ID in Android Settings › Privacy › Ads.
• Paid surveys: TheoremReach, TapResearch and BitLabs. If you open a survey wall, it receives your Tingjar user ID (not your name or email). The surveys run on the partner's own pages under its own privacy policy, and it sees your answers (which can include things like your age or opinions), your IP address and device information. When you finish a survey it tells our server so we can credit you. These partners are for surveys only, never app installs.
• Games in the Arcade come from Gamezop. When you play one, Gamezop receives your IP address and browser and device information, and may show its own ads inside the game under its own privacy policy.

Why we use it (legal bases)

If you're in the UK or the European Economic Area, the GDPR and UK GDPR require us to name a legal basis for each use:

• To run the service you signed up for (contract): your account, tasks, coins, cash-outs, payout details, task answers and bug reports.
• To keep Tingjar fair and secure (legitimate interests): the device hash, Play Integrity verdict, IP address and payout-address checks that stop one person running many accounts or faking usage. We've weighed this against your privacy and keep only what the checks need.
• With your permission (consent): app usage time through Usage Access, and reminders. You can withdraw consent at any time in Android settings or in the app; it doesn't affect what we did before.
• Because the law requires it (legal obligation): payout records we must keep for tax and accounting.
• Ads (consent, UK and EEA): if you're in the UK or EEA, Google's consent form asks before any ad network starts, and you can change your choice any time in More › Ad privacy choices. If you say no to personalised ads, you may still see ads that aren't personalised.

Who sees it

• The public payouts feed shows each payout with the payout address masked (for example j***), the method, the amount and the time. It never shows your name or your email.
• Developers whose app you test see your answers to their questions, your bug reports and which days you opened or checked in to their app, under a number ("Tester 3"), never your name. For beta tests taken on the website they also see the Google account email you join their test with, because Google's tester list shows it and they need it to add you and confirm you took part; you agree to this before you take a seat. That's what they pay for.
• Survey and offer partners. If you open a survey wall (TheoremReach, TapResearch or BitLabs) or a partner offer, the network that runs it receives your Tingjar user ID (not your name or email) so it can credit you, and its own privacy policy covers what it sees inside the survey or offer.
• Ad partners. Start.io, Chartboost, AppLovin and Google (AdMob) receive the data described under Ads, surveys and games, for advertising, analytics and fraud prevention. Gamezop receives what's described there when you play an Arcade game. They act as independent controllers for their own uses, under their own privacy policies.
• Payout providers. PayPal receives your PayPal email and the amount when we pay you. If you choose an Amazon gift card, Amazon receives the email the gift card is sent to.
• Our service providers store and process data for us under contract: Supabase hosts our database, and Google handles sign-in, Play Integrity, the ad consent form (User Messaging Platform) and push notifications (Firebase Cloud Messaging).
• Government authorities, if the law requires it.

International transfers

SlayerBlade works from India, and our database is hosted by Supabase on cloud servers that may be outside your country. So your data is transferred to, stored in and accessed from countries other than your own, including India.

Where the GDPR or UK GDPR applies, we protect these transfers with the European Commission's Standard Contractual Clauses (with the UK Addendum) or another safeguard the law allows. Email us for a copy.

How long we keep it

We keep your data while your account is open. When you delete your account we remove your name, email, PayPal email, reminder settings and leaderboard scores, and sign you out everywhere.

Some records stay, without your name: payout records (amount, date, method, the payout address used and the payout reference) for as long as tax and accounting rules require; the device hash and scrambled copies of your email and payout address, so the same phone, Google account or payout address can't collect the welcome bonus twice; and task answers you already sent, which belong to the developers who paid for them.

Your rights (UK, EEA)

You can ask to see the personal data we hold about you, correct it, delete it, get a copy in a portable format, restrict how we use it, or object to uses based on legitimate interests. Where we rely on consent you can withdraw it at any time.

Email us and we'll answer within one month. You can also complain to your data protection authority: in the UK that's the Information Commissioner's Office (ico.org.uk). We'd like the chance to fix it first.

Your rights (California and other US states)

Under the CCPA as amended by the CPRA, and similar state laws, you can ask what personal information we collect, use and disclose, ask us to delete or correct it, and not be treated differently for using these rights.

In the last 12 months we collected the categories listed above: identifiers (name, email, user ID, device hash, IP address), commercial information (coins and payouts), internet or app activity (task progress and, with your permission, app usage time), device identifiers for advertising (the Advertising ID), approximate location from your IP address, ad interactions, and the content of your task answers. We collect them from you, your phone and Google sign-in, for the purposes on this page, and disclose them to the recipients listed under Who sees it, including our ad, survey and game partners (the ad partners may count as a sale or share).

We don't sell personal information for money. But letting Start.io, Chartboost, AppLovin or Google collect your Advertising ID and app activity for interest-based ads can count as "selling" or "sharing" under California and similar state laws. You can opt out: turn on More › Do not sell or share my info in the app (shown while ads are on), delete your Advertising ID in Android Settings › Privacy › Ads, or email us and we'll stop it for your account. We honour Global Privacy Control signals where the law requires it. We don't use or disclose sensitive personal information to infer things about you.

To use a right, delete your account in the app or email us from the address on your account. We may need to confirm it's you. An authorized agent can ask for you with your signed permission.

Canada, Australia and New Zealand

You can ask to see and correct your personal information under Canada's PIPEDA, Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. Email us first; if we don't resolve it, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Australian Information Commissioner, or New Zealand's Privacy Commissioner.

Age

Tingjar is only for people 18 or older. We don't knowingly collect data from anyone younger. If we learn that an account belongs to someone under 18, we close it and delete its data.

Security

Data travels encrypted (HTTPS) and is stored with access limited to the people and systems that need it. No system is perfectly secure; if a breach puts your data at risk, we'll tell you and the authorities the law requires us to tell.

Deleting your account

In the app: Earn, tap your avatar, then Delete my account at the bottom. It happens straight away. Coins you haven't cashed out are lost, so cash out first if you can. If a cash-out is still on its way, the app asks you to wait until it's paid.

Can't open the app? See the delete-account page, or email support@slayerblade.in from the email you signed in with.

Changes

If we change this page in a way that matters, we'll tell you in the app before it takes effect.