Perkly Privacy Policy
Last updated: September 5, 2026 · Operated by AuraByte Studios ("we", "us").
Perkly is a rewards app: eligible users earn in-app points from confirmed partner offers and redeem points for digital gift-card codes. This policy explains what we collect, why, and your choices. Perkly is not affiliated with, endorsed by, or sponsored by Roblox Corporation.
1. Who can use Perkly
Perkly is for users 18 and older. We do not knowingly collect data from children. If you believe a child has used Perkly, contact us so we can investigate and delete the account where appropriate.
2. Data we collect
- Account: email address, display name, user ID, and authentication provider.
- Activity: point balance, offers started/completed/reversed, redemptions, referral status, and daily streak.
- Anti-fraud & device: an app-scoped device identifier, IP-derived fraud signal, country code, and user-agent-derived fraud signal. Perkly stores peppered hashes rather than raw IP addresses or raw user agents in its offer records.
- Support: messages you send us.
We do not collect precise location, contacts, photos, microphone, or camera data.
3. How we use it
To operate your account and point balance; select eligible offers for your country and device; verify confirmations and reversals; fulfill gift-card redemptions; run daily and referral programs; detect fraud and abuse; provide support; and comply with law.
4. Third parties we share with
- Google (optional sign-in) — if you continue with Google, Google authenticates you and shares your account identifier, email address and basic profile information, such as your name or profile image, with our authentication provider. Perkly does not request access to your Gmail messages, contacts or Drive files, and never receives your Google password. Read Google’s privacy policy. You can manage Perkly’s connection in your Google Account settings.
- CPAGrip (primary offer provider) — receives an opaque attribution value, your IP address, country and user agent to select eligible offers and attribute completions. Partner sites may use cookies and process information you submit directly to them. Read CPAGrip’s privacy policy.
- AdBlueMedia (secondary offer provider, where enabled) — receives opaque attribution values plus the IP address and user agent needed to select and attribute eligible offers. Its handling is governed by its own privacy terms.
- Bitrefill — supplies the country-specific gift cards you redeem.
- Supabase — authentication, backend functions, and database hosting.
- Legal — where required by law or to protect against fraud.
We do not sell your personal information for money.
5. Tracking & advertising identifiers
The current app does not request Apple’s advertising identifier (IDFA). Offer attribution still links an eligible partner completion to your Perkly session through an opaque tracking value. When you open an offer, you leave Perkly for a partner website that may use cookies and other tracking technologies under its own policy and consent choices. You can choose not to open offers. We do not describe partner offer activity as anonymous or tracking-free.
6. Retention & deletion
We keep account data while your account is active. Offer attribution uses a 90-day window. Records may remain where needed to investigate a pending completion, reversal, fraud report or dispute; the attribution window is not a promise that every record is automatically erased on day 90. You may request permanent account deletion by emailing support@aurabytestudios.online; you can also delete your account in Profile → Delete account after confirming your password or signing in again with the same Google account. Account deletion removes your sign-in, profile, saved gift-card codes and offer activity. A gift card already processing must finish first. A minimal pseudonymous accounting record is retained for reconciliation. Some ledger, transaction, or fraud-prevention records may be retained where required by law or legitimate security needs.
7. Your rights
Depending on your region (GDPR, CCPA/CPRA), you may request access, correction, deletion, or portability of your data, and object to certain processing. Contact support@aurabytestudios.online. We will not discriminate against you for exercising these rights.
International processing
Our hosting and offer or fulfillment providers may process information outside your country. Their locations and safeguards depend on the provider. Contact us with questions about international processing or to exercise your available privacy rights.
8. Security
API keys and fulfillment credentials are held server-side only and never shipped in the app. Traffic uses HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.
9. Changes
We may update this policy; material changes will be noted in-app or by updating the date above.
10. Contact
support@aurabytestudios.online · AuraByte Studios