Cuarta RewardsThis Privacy Policy explains how Custo Information Technology Services ("we", "us"), the operator of the Cuarta Rewards mobile app and website (the "Service"), collects, uses, shares and protects your personal information. We process personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
1. Information we collect
| Category | Examples | Why we need it |
|---|---|---|
| Account information | Name, email address and profile photo from Google Sign-In; your user ID | To create and secure your account |
| Rewards activity | Points earned, tasks, Virtual Tree activity, referral codes, points history | To credit, display and verify your rewards |
| Payout information | GCash mobile number and account name, withdrawal history | To send your withdrawals |
| Device & security data | Device model, OS version, app version, IP address, device integrity results, advertising ID | To prevent fraud, duplicate accounts and abuse |
| Advertising data | Advertising ID, ad impressions and completions reported by ad partners | To show rewarded ads and confirm completed views |
| Notifications | Push notification token | To send account and reward notifications |
| Support messages | Emails or messages you send us | To answer your requests |
We do not knowingly collect sensitive personal information such as government ID numbers, health data or precise location, unless a specific feature asks for it and you choose to provide it. If we ever require identity verification for large withdrawals, we will explain what is needed at that time.
2. How we use your information
- Provide the Service, maintain your account and calculate your points balance;
- Verify rewarded activities with our advertising and task partners before crediting points;
- Process withdrawals to GCash through our payment processor;
- Detect and prevent fraud, cheating, bots, multiple accounts and other abuse;
- Send service notifications, such as reward confirmations, withdrawal updates and security alerts;
- Improve the app, fix problems and understand which features are used; and
- Comply with legal, tax, accounting and regulatory obligations.
Our legal bases are: performance of our agreement with you (the Terms of Service), your consent where required, our legitimate interests in keeping the Service secure and fair, and compliance with law.
3. Advertising
The app shows rewarded video ads delivered by third-party advertising networks, including AppLovin, and may include other partners we add over time. These partners may collect your device's advertising ID, IP address and device information to serve and measure ads, as described in their own privacy policies. You can reset your advertising ID or opt out of personalized ads in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads).
Ad partners report completed ad views to our servers so we can credit your reward. We do not sell your personal information to advertisers.
4. Who we share information with
We share personal data only as needed to run the Service:
- Service providers: cloud hosting and database (Supabase), authentication (Google), push notifications (Google Firebase), email and support tools;
- Payment processing: our payment processor and GCash, to send your withdrawals;
- Advertising and task partners: to deliver ads and offers and confirm completions;
- Authorities: when required by law, court order, or to protect the rights, safety and property of our users or the public; and
- Business transfers: if the Service is merged, acquired or sold, subject to this Policy.
Some providers may process data outside the Philippines. When that happens we require appropriate safeguards to protect your information.
5. How long we keep your information
We keep your account data while your account is active. When you delete your account, we delete or anonymize your personal information promptly. Financial transaction records (such as points ledger entries and withdrawals) and fraud-prevention records are kept in anonymized or minimized form for as long as required for legal, tax, accounting and audit purposes.
6. Security
We use encryption in transit, access controls, server-side verification of rewards, audit logs and a withdrawal PIN to protect your account. No system is perfectly secure, so please keep your Google account and withdrawal PIN private.
7. Your rights
Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to file a complaint, and to damages where applicable. To exercise any of these rights, email support@cuartarewards.com from the email linked to your account. You may also file a complaint with the National Privacy Commission.
You can delete your account at any time. See Delete your account.
8. Age requirement
The Service is intended for users 18 years old and above. We do not knowingly collect information from minors. If you believe a minor has created an account, contact us and we will remove it.
9. Changes to this policy
We may update this Policy from time to time. We will post the new version on this page with a new effective date and, for significant changes, notify you in the app.