Privacy Policy

Last updated: 27 September 2026 · Effective from: 27 September 2026

CashBoo is a product of Algomise Technologies LLP, a Limited Liability Partnership registered in India at 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016.

1. Who we are

CashBoo (“CashBoo”, “we”, “us”) is a rewards app operated by Algomise Technologies LLP. You earn in-app currency (“Coins”) by watching advertisements in free mini-games, completing surveys, watching videos and completing offerwall tasks, and redeem them for UPI cash or gift cards.

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and what rights you have. Read it together with our Terms of Service.

Algomise Technologies LLP is the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023.

2. Data we collect

You give us directly

• Account information — when you sign in with Google we receive your name, email address, profile photo and Google account ID.
• Payout information — the UPI ID or email you provide when redeeming Coins.
• Verification information — your registered mobile number where we verify a payout, and PAN or similar details where the law requires them.
• Support messages — anything you send us when you contact us.
• WhatsApp — if you verify your number or message us on WhatsApp: your WhatsApp number, WhatsApp profile name and the messages you send us.

We collect automatically

• Device information — model, OS version, advertising identifier, screen resolution, locale, timezone.
• Usage data — screens opened, games played, survey completions, rewarded video views, session duration.
• Technical logs — IP address (used for fraud detection and geographic eligibility), crash reports, network type.
• Approximate location — derived from your IP address only, at country and region level. We do not collect GPS or precise location.
• Fraud signals — VPN or proxy status, root status, app-tamper status and device fingerprint. These are used solely to prevent reward fraud.

We receive from third parties

• Offerwall and survey providers send a server-to-server postback when you complete an offer, containing the offer ID, the reward amount and your account’s user ID.
• Ad networks send aggregated impression and click metrics.

If you choose not to provide data. Google sign-in is required to hold an account. A UPI ID or email is required to receive a payout. Verification details are required where the law or our fraud checks call for them. Beyond these, nothing further is required to use the app.

3. App permissions

The app requests only the permissions it needs to work:

We do not request access to your contacts, SMS messages, call logs, camera, microphone, photos or precise location.

4. How we use your data

• To create and secure your account
• To credit Coins when you complete a game, survey, video or offer
• To process and verify your UPI and gift-card redemptions
• To detect and prevent fraud — duplicate accounts, bots, fake completions and reward farming
• To show you relevant offers, surveys and advertisements based on your device and approximate location
• To send you account and payout updates
• To comply with Indian law, including tax reporting above applicable thresholds and law-enforcement requests backed by valid legal process

We do not sell your personal information. We do not use your data for profiling that has legal or similarly significant effects on you.

5. Consent, and how to withdraw it

We process your data on the basis of the consent you give when you create your account and accept this policy, and for the legitimate uses permitted under the DPDP Act, 2023.

To withdraw consent, email privacy@cashboo.in from your registered address, or delete your account in the app. Withdrawing is as simple as giving — no form and no phone call.

What happens then. We stop processing your data for the purposes you withdrew from and erase it, except where we are legally required to keep it (see Section 9). Withdrawal does not affect processing already carried out. Where we need the data to operate your account, withdrawing consent means we will close the account.

6. Third-party services we use

Each has its own privacy policy. We share only the minimum data each one needs to perform its function. This list changes as we add or remove partners, and we keep it current on this page.

7. Advertising and offerwalls

CashBoo is free and funded by advertising, so advertisements and offerwalls are central to how it works.

When an advertisement or offerwall is shown, your advertising ID, IP address and device type are shared with the provider so it can serve relevant content. We do not share your name, email or payout details with any advertising partner.

You can reset your advertising ID at any time from Android Settings → Privacy → Ads, and we honour the “opt out of personalised ads” setting on your device.

Mini-games. Our mini-games are free and no Coins are awarded for playing, completing or winning them. Coins linked to mini-games come from advertisements shown during play, and the same data is shared with the ad network as above.

8. Where your data is stored

Account data, transactions and reward history are stored in a PostgreSQL database on Google Cloud (Cloud SQL), asia-south1 region (Mumbai, India), encrypted at rest. Backups are also held within India.

Transfers outside India. Some logs and analytics are processed on Google infrastructure outside India. Under the DPDP Act such transfers are permitted except to countries the Government restricts, and we will stop any transfer to a restricted country if one is notified.

9. How long we keep your data

10. Deleting your account

How to request it

• In the app — the Delete Account option below the Log Out button; or
• By email — write to privacy@cashboo.in from your registered address with the subject “Delete my account”.

You do not need to reinstall the app to request deletion by email.

Timeline

What is deleted: your profile (name, email, photo, Google account ID), in-app data (Coin balance, reward history, game and survey activity), referral history and streaks, payout details, device list and identifiers, notification token, and support conversation history.

What we keep, and why

Your Coins. Any unredeemed Coins are forfeited when your account is deleted, and no compensation is payable. Please redeem your balance before deleting your account.

Partial deletion. You do not have to delete everything. Email privacy@cashboo.in to remove only your saved UPI ID, a single support conversation, or your notification token, while keeping your account.

After deletion. Deletion is permanent and cannot be reversed, even by us. Signing in again with the same Google account creates a new account with no previous data, balance or history.

11. Your rights

Under the DPDP Act, 2023 you may:

• Access — request a copy of the data we hold about you
• Correct — have inaccurate or incomplete data fixed
• Erase — have your data deleted (see Section 10)
• Withdraw consent — at any time (see Section 5)
• Nominate — appoint another person to exercise these rights on your behalf if you die or become unable to act
• Complain — raise a grievance with us and escalate it if unsatisfied (see Section 12)

Email privacy@cashboo.in from the address registered on your account. We respond within 30 days.

Your responsibilities. Please give accurate information, do not impersonate anyone, and do not raise false or frivolous complaints — the DPDP Act provides penalties for this.

12. Complaints

Raise any privacy complaint with privacy@cashboo.in. We acknowledge within 24 hours and aim to resolve within 15 days.

If you are not satisfied, escalate to our Grievance Officer:

Vishal Kumar · vishal.kumar@algomise.com · Algomise Technologies LLP, 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016

If your complaint remains unresolved, you may complain to the Data Protection Board of India.

13. Data breaches

If a breach of your personal data occurs, we will inform you without delay and report it to the Data Protection Board of India within 72 hours of becoming aware of it, as the law requires. Our notice will explain what happened, what data was affected, what we are doing about it, and what you can do to protect yourself.

14. Security

Authentication. Sign-in is through Google only. We never see, receive or store your password. Sessions use signed tokens issued by our servers that expire and refresh automatically, and you can revoke CashBoo’s access at any time from your Google Account permissions page.

Data in transit. All traffic runs over HTTPS with TLS 1.2 or higher. The app blocks cleartext traffic entirely, so no data leaves your device unencrypted.

Data at rest. Data is stored in Google Cloud SQL (asia-south1, Mumbai), encrypted at rest. Production access is restricted to a small number of engineers through Google Cloud IAM, and all access is logged.

Access rules. Our servers check every request against the signed-in account — you cannot read or change another user’s data, even with a valid sign-in. Reward crediting, redemption and balance changes happen server-side; the app cannot write its own balance.

Fraud defences. VPN and proxy detection, root and tamper detection, device fingerprinting, and velocity checks on earning and redemption. Offerwall and survey completions arrive as signed server-to-server postbacks verified against a shared secret, so a reward cannot be faked from a device.

Payout safeguards. UPI IDs are validated with Razorpay before release, UPI payouts are reviewed by our team before they are sent, and gift cards are issued through GiftPort. We never store your UPI PIN, bank password or card details.

Infrastructure. Google Cloud Platform (ISO 27001, SOC 2 Type II certified). Automated backups every 24 hours retained for 30 days. Crash reports have personal data scrubbed. Security advisories affecting our dependencies are patched within 48 hours.

No system is perfectly secure, but we take these measures seriously and review them regularly.

Found a vulnerability? Email security@cashboo.in with steps to reproduce. We ask for reasonable time to fix before public disclosure, and we offer a thank-you reward for valid, impactful reports.

15. Children

CashBoo is not directed at anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, email privacy@cashboo.in and we will delete it promptly.

16. Links to other services

Completing an offer or survey usually takes you out of CashBoo and into a third party’s app or website. Once you leave, that third party’s privacy policy applies, not ours. We do not control their data practices and are not responsible for them. Please read their policy before providing information.

17. Business transfers

If Algomise Technologies LLP is involved in a merger, acquisition, restructuring or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

18. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and for material changes we will send an in-app notification at least 7 days before they take effect. Continued use after that date constitutes acceptance. We keep a record of the version each user accepted and when.

19. Contact us

Algomise Technologies LLP — Privacy Team 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016, India