Privacy Policy
Last updated: October 2026
This Privacy Policy explains what information Veylvo Cash ("we", "us") collects, how we use it, and the choices you have. Veylvo Cash is intended only for adults aged 18 or older.
1. Information We Collect
- Account information you provide directly: email address, password (stored as a secure hash, never in plain text), and the public display name you choose. If you don't choose one, we assign you a random "Player" name.
- Google Sign-In (if you use it): your Google account email and a unique Google account identifier, so we can sign you in without a separate password. Google also briefly shares your profile picture URL with the App during sign-in, but we do not store it.
- Activity data: offers, surveys and tasks you complete, reward wheel spins, daily rewards, coin balance and transaction history, withdrawal requests and their status, and support messages you send us.
- Payout details: the information needed to send a withdrawal, depending on the payout method you choose — for example a PayPal email address or a gift card delivery email.
- Device and usage data: your IP address (used for fraud/VPN prevention and to detect your approximate country), and the dates and times you sign in and use the App.
- Referral data: your referral code and which accounts signed up using it.
- Location (country): an approximate country, detected from your IP address, used to show you eligible offers. We do not collect your precise location.
- Push notification token (if you allow notifications): a device identifier issued by Firebase Cloud Messaging (Google), stored together with the App version, used only to deliver notifications to your device — never used to identify you outside the App.
We do not use advertising identifiers or analytics/tracking SDKs, and the App shows no banner or video ads. The offerwalls in the App display third-party offers and promotions (advertising) from our offerwall partners.
2. How We Use Information
We use this information to: operate and improve the App; credit coins for completed activities; process withdrawal requests; detect and prevent fraud and abuse (including VPN/proxy and multi-account detection); respond to support requests; send you account emails such as password-reset links; send push notifications about your own account activity (such as coins being credited or a withdrawal changing status) and occasional app-wide announcements, if you allow notifications; and communicate important account or service notices to you.
You can turn push notifications off at any time in your device's system settings for the App. Turning them off does not affect your ability to use the App — you can always see the same information in the in-app Notifications screen.
3. Sharing With Third Parties
We share the minimum information necessary for the App to function:
- Offerwall and survey partners receive only an anonymous, opaque sub-id we generate for your account (never your real name, email or password) so they can attribute a completed offer back to your account and pay us for it. Our offerwall partners are currently: AdscendMedia (asmwall.com) (this list updates automatically when we add or remove a partner). When a partner confirms a completed offer, it sends us details of that completion — such as the offer name and ID, the reward, its transaction reference and status and, where available, the IP address it observed — which we store with your account to credit your coins, handle reversals and prevent fraud. When you open an offerwall, its pages are provided by that partner inside the App, and any information you give the partner or that it collects while you use its pages is handled under the partner's own privacy policy.
- IP geolocation service (ipapi.co): when you finish setting up your account, your IP address is sent to this service to determine your approximate country.
- Fraud-prevention service (proxycheck.io): when VPN protection is enabled, we send your IP address to this service to detect VPNs, proxies and abusive traffic, so we can keep the reward system fair.
- Google, if you choose to sign in with Google, verifies your sign-in under Google's own privacy policy.
- Firebase Cloud Messaging (Google) delivers push notifications to your device using your push notification token; Google processes this under its own privacy policy as our service provider.
- Our hosting provider stores the App's data and sends our account emails on our behalf.
- We do not sell your personal information to third parties.
4. Public Profiles
Some information is visible to other users of the App: your display name, avatar, country, account creation date, and a history of your completed withdrawals (amount, method and date — never your payout details, such as your PayPal email). This is used for the referral and community-recognition features (such as the "Top Payouts" board). Your email address and payout details are never shown to other users.
5. Data Retention
We retain your account and activity data for as long as your account is active. When you delete your account (see below), your personal data is anonymized or removed immediately, except for a limited set of records we keep for accounting, tax, legal and fraud-prevention purposes, as described below.
6. Your Rights & Account Deletion
You can permanently delete your account yourself, at any time, directly in the App: go to Profile → Delete Account, confirm with your password (or, for Google-only accounts, by typing a confirmation phrase), and confirm again on the warning screen. Deletion is immediate and cannot be undone. Step-by-step instructions, including how to request deletion by email without the App, are on our Delete Account page.
When you delete your account:
- Your email address, password, Google sign-in link, display name, avatar, and country are permanently erased.
- Your coin balance is cleared and you are immediately signed out; the account can no longer be signed into.
- The destination details on any past withdrawal (e.g. a PayPal email) are erased.
- The IP address and raw provider data behind past offer completions are erased.
- Your support tickets and messages, and the VPN-check records tied to your account, are deleted.
- Your notifications inbox is deleted, and your device stops receiving push notifications from us immediately.
We retain a minimal record of past coin transactions and withdrawal amounts/dates/status, no longer linked to any personal details, because we need this for accounting, tax and fraud-prevention purposes. This anonymized record cannot be used to identify you.
You can create a new account with the same email afterward; it starts fresh and nothing carries over from the deleted account.
For any other request — access to, or correction of, your personal data — email support@veylvo.com from the email address on your account.
7. Age Requirement
The App is intended only for adults aged 18 or older (or the age of majority where you live, if higher) and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete that information and the associated account.
8. Security
We use industry-standard measures — including password hashing, CSRF protection and encrypted connections — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.
10. Contact
Questions about this Privacy Policy, or requests regarding your data, can be sent to support@veylvo.com.