Bonusboy Privacy Policy

Effective 2026-09-11 · TanzSoft Co., Ltd. (Seoul, Korea)

1. What we collect

• Account: when you sign in with Google we receive your Google account ID, email address and display name. We do not receive or store your Google password.
• Device: a hashed device identifier (derived from Android ID), device model, app version, language and country, and a Google Play Integrity verdict. These are used to enforce one account per device and to detect emulators, rooted or tampered devices and duplicate accounts.
• Network: your IP address at sign-in and at withdrawal, kept in security logs.
• Rewards: survey and task completions reported by our research partners (transaction ID, reward amount, status), your reward ledger and withdrawal history.
• Payout email: the email address you verify for gift card delivery.
• Referrals: your invite code and which accounts used it.

2. Research partners

Surveys are provided by third-party partners such as CPX Research and BitLabs. When you open a survey, the partner receives a numeric user ID assigned by Bonusboy (not your email) and information you choose to provide inside the survey. Each partner processes that data under its own privacy policy. Gift cards are fulfilled through Tremendous, which receives the payout email address you verified and the card amount.

3. How we use data

• To credit rewards, show your balance and issue gift cards.
• To prevent fraud: duplicate accounts, emulators, reversed completions and abusive withdrawal patterns. Withdrawals are scored automatically; some are reviewed by a person.
• To send transactional emails only: 6-digit verification codes for withdrawals, payout email changes and account deletion. We do not send marketing email.

We do not sell personal data and we do not show third-party advertising inside Bonusboy.

4. Retention and deletion

• You can delete your account from Me → Delete account. Deletion is confirmed by email code and completed within 30 days; any unpaid balance is forfeited.
• After deletion, personal identifiers are anonymized. Reward and withdrawal records are kept in anonymized form for fraud prevention and accounting as required by law.
• Security logs (IP, device) are kept for up to 12 months.

5. Permissions

Bonusboy uses only the Internet permission. It does not request location, contacts, camera, microphone or storage permissions.

6. Children

Bonusboy is for users aged 18 and over. We do not knowingly collect data from children.

7. Your rights

You may request access to, correction of, or deletion of your data at any time by email. Users in the EU/EEA and UK have the rights provided by the GDPR; users in California have the rights provided by the CCPA.

8. Contact

Account and data deletion: see Delete your account and data.

TanzSoft Co., Ltd. · support@bonusboy.com · 1501-Na51, 525 Gonghang-daero, Gangseo-gu, Seoul 07103, Korea