Privacy Policy

Daily RBX: Spin Scratch & Flip — Effective Date: January 1, 2026

Quick Navigation:

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. Third-Party Services
5. Advertising
6. Data Security
7. Data Retention
8. Children's Privacy
9. Your Rights
10. Important Disclaimer
11. Changes to This Policy
12. Contact Us

1. Introduction

This Privacy Policy ("Policy") describes how the developer of Daily RBX: Spin Scratch & Flip ("we", "our", "us", "the App") collects, uses, discloses, and safeguards information when you use our mobile application.

By installing, accessing, or using the App, you agree to the practices described in this Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Anonymous User Identifier

When you first open the App, Firebase Anonymous Authentication automatically generates a random User ID (UID) on your device. This UID is not linked to your real identity — we do not collect your name, email address, phone number, or any personally identifying information at sign-up.

2.2 Country Selection

During onboarding, you select your country from a list. This is used to localize your experience. You can change this at any time in Settings.

2.3 App Usage Data

We collect anonymized data about how you interact with the App, including:

Game plays (spin, scratch, flip events)
Virtual RBX coin balance changes
Level updates and boost activations
Daily reward claims and mystery box opens
Advertisement impressions and clicks (both Google AdMob and Qureka)
Screen navigation patterns and time spent per screen

2.4 Device and Diagnostic Information

We automatically collect:

App version, Android OS version
Device manufacturer and model
Crash logs and exception traces
Performance metrics (cold-start time, frame rate)
Android Advertising ID (AAID) — used by AdMob for ad personalization

2.5 Information Shared When You Tap Ads

When you tap an advertisement (Google AdMob or Qureka), the destination website automatically receives standard web-request information including:

Your IP address (used by the ad partner to estimate approximate geographic region)
Your User-Agent string (browser and device identity)
Click timestamp and referring URL

This data is collected by the ad partner, not by us. We do not share your in-app anonymous UID, country, or any in-app data with these external partners.

2.6 Data We Do NOT Collect

We do not collect: your name, email, phone number, address, payment information, contacts, photos, messages, files, calendar data, web browsing history, installed apps, audio recordings, biometric data, or health data.

3. How We Use Your Information

App Functionality: To save your virtual coin balance, level progress, and game state.
Daily Limits: To enforce daily play counts and cooldown timers (24-hour daily reward, 2-minute mystery box, 2-minute boost duration).
Analytics: To understand how users interact with the App and improve the experience.
Fraud Prevention: To detect tampering, automation, and abuse.
Advertising: To display relevant advertisements and measure ad performance.
Bug Fixing: To diagnose crashes and performance issues.
Communications: To send push notifications about new features and daily reminders (you can disable these in Android Settings).

4. Third-Party Services

The App integrates the following third-party services. Each operates under its own privacy policy:

Partner	Purpose	Data Shared / Collected by Partner	Privacy Policy
Google Firebase	Authentication, Database, Analytics, Crash reporting, Push notifications	Anonymous UID, app interactions, country, crash logs, diagnostics	firebase.google.com/support/privacy
Google AdMob	In-app banner, interstitial, rewarded, native, and app-open advertisements	Advertising ID (AAID), app interactions, IP address (approximate location)	support.google.com/admob/answer/6128543
Qureka	Custom banner and native advertisements; ad click destinations	IP address, User-Agent, click timestamp (collected by Qureka's web server when you tap their ads)	qureka.com/privacy-policy

4.1 Google Firebase

We use Firebase Authentication (anonymous), Firestore database, Firebase Cloud Messaging (FCM) for push notifications, Firebase Analytics, and Firebase Crashlytics. Firebase processes your anonymous UID, app interactions, country, crash logs, and diagnostic data on Google-managed servers.

Firebase's data practices are governed by Google's Privacy Policy and the Firebase-specific privacy documentation linked above.

4.2 Google AdMob

We display banner, interstitial, rewarded, native, and app-open advertisements through Google AdMob. AdMob's SDK may access your device's Advertising ID (AAID), app interaction events, and approximate geographic location (derived from your IP address) to serve relevant advertisements and measure ad performance.

You can opt out of personalized advertising at any time in Android Settings → Privacy → Ads → "Opt out of Ads Personalization" or "Delete advertising ID".

4.3 Qureka (Custom Advertising Partner)

The App displays custom-formatted banner and native advertisements served through our integration with Qureka. These advertisements are clearly labeled "Sponsored" within the App.

When you tap a Qureka advertisement, the App opens the advertised destination URL (such as a page on qureka.com or a Qureka-operated subdomain) inside a Chrome Custom Tab. At that point, Qureka's web server automatically receives standard web request information, including:

Your IP address (used by Qureka to determine approximate geographic region for ad targeting)
Your User-Agent string (which identifies your browser and device type)
The timestamp of your click
The referring source (which may identify our app as the referrer)
Any cookies that Qureka has previously set on the qureka.com domain

We do not share your anonymous in-app User ID, country selection, balance, or any other app-internal data with Qureka. Qureka receives only the data automatically transmitted by your browser when you visit their pages.

Qureka's collection and use of data on their websites is governed by Qureka's own Privacy Policy at qureka.com/privacy-policy. We encourage you to review Qureka's privacy policy before tapping any Qureka advertisement.

4.4 External Links via Chrome Custom Tabs

The App may open external websites (including advertisement destinations) using Android's Chrome Custom Tabs. These external sites have their own privacy policies and terms which we do not control. We are not responsible for the content or data practices of third-party websites.

5. Advertising

The App is supported by advertisements. We display:

Banner Ads: Persistent strip at the bottom of every screen (sources: AdMob and Qureka).
Interstitial Ads: Full-screen ads shown between navigation actions (AdMob). The "custom interstitial" path opens a Qureka link in your browser instead of showing a full-screen overlay.
Rewarded Ads: Optional ads users can watch to earn bonus virtual coins (AdMob only).
Native Ads: Ads styled to match the App's interface, always labeled "Sponsored" (sources: AdMob and Qureka).
App Open Ads: Ads shown when returning to the App from background (AdMob only).

You can opt out of personalized advertising in Android Settings → Privacy → Ads.

6. Data Security

Encryption in Transit: All data transmitted between the App and our servers (Firebase) uses HTTPS/TLS 1.2 or higher.
Encryption at Rest: Local data on your device is encrypted using AES-256-GCM via Android's EncryptedSharedPreferences. Cloud data is encrypted server-side on Google Firebase infrastructure.
Anonymous Authentication: Your identity is never linked to personally identifying information.
Network Security: The App uses a Network Security Configuration that blocks insecure (HTTP) connections.

7. Data Retention

We retain anonymized data for as long as necessary to provide the App's functionality and for analytics purposes. You can request deletion of your data at any time (see Section 9). Uninstalling the App immediately clears all locally stored data on your device.

8. Children's Privacy

The App is rated for users 13 years of age or older. The App is NOT directed at children under 13 and we do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has used the App, please contact us at the email below and we will promptly delete any associated data.

9. Your Rights

Depending on your jurisdiction (GDPR for EU residents, CCPA for California residents, etc.), you may have the right to:

Access: Request a copy of the data we hold about you.
Delete: Request deletion of your data. Email support@yourdomain.com with your request.
Correct: Request correction of inaccurate data.
Restrict: Request that we limit how we process your data.
Object: Object to specific types of data processing.
Data Portability: Request your data in a portable format.
Withdraw Consent: Opt out of analytics and personalized advertising via Android Settings.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

10. Important Disclaimer

Virtual Coins Only: "RBX" inside the App is our internal three-letter abbreviation for our virtual in-app coin. Virtual RBX coins have NO real-world monetary value, CANNOT be exchanged for real currency, goods, services, or any items outside the App, CANNOT be transferred between users, and are NOT redeemable for cash or prizes. They are entertainment-only.

Not a Gambling App: Daily RBX is NOT a gambling app, NOT a sweepstakes, NOT a real-money game, and NOT a wagering platform.

Not Affiliated With Roblox: Daily RBX is independently developed and is NOT affiliated with, endorsed by, sponsored by, or associated with Roblox Corporation or any related entity. The abbreviation "RBX" refers EXCLUSIVELY to our internal virtual coin and bears no relation to Roblox, Robux, or any other platform currency.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted at this URL and the "Effective Date" at the top will be revised. Your continued use of the App after changes are posted constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

📧 Email: support@yourdomain.com

We aim to respond to all inquiries within 30 days.