What this covers
This policy explains what Poppin collects when you use the app, why, and what you can do about it. Poppin is operated by Codeyen. If something here is unclear, write to hello@poppin.to.
What we collect
- Device identifier. A random ID generated on your device. It is your account: your coin balance, tasks and orders are tied to it. You can see it in the app under You → Device ID.
- Device and app details. App version, language, country (derived from your IP address), and basic integrity signals (for example whether the device is an emulator). We use these to keep the service working and to prevent abuse.
- Google account (optional). If you choose to continue with Google, we store the email, display name and profile picture Google shares with us, so you can recover your balance on a new device. You can unlink at any time from the You tab.
- What you submit. Usernames, links, screenshots or ratings you send to complete a task or place an order. Screenshots are kept only as long as needed to review the task.
- Push token. If you allow notifications, a Firebase Cloud Messaging token so we can tell you about bonuses and order updates. Turning notifications off in system settings stops this.
- Usage analytics. We use Google Analytics for Firebase with its default, automatic collection (app opens, screens, crashes). It does not receive your name or email.
What we do not collect
No contacts, no location, no passwords for any other service, no access to your photos beyond the screenshot you pick yourself.
How we use it
- To run your wallet, tasks and orders.
- To review task proofs, partly with automated checks.
- To detect fraud, duplicate accounts and abuse.
- To send notifications you opted into.
- To understand which parts of the app are used and fix problems.
Sharing
We share data only with processors that make the service work: Google (sign-in, analytics, push notifications), our hosting provider, and the delivery partners that fulfil orders, who receive only the target you entered (for example a username or link). We do not sell personal data.
Retention
Account data is kept while your account is active. Task screenshots are deleted after review. You can ask us to delete everything tied to your device ID; see Delete your data.
Your rights
You can access, correct or delete your data, and withdraw consent for notifications or Google sign-in at any time. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
Children
Poppin is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes in a meaningful way, we will show a notice in the app. The date at the top tells you when it was last updated.