CoinVault Privacy Policy

1. Introduction & Overview

Welcome to CoinVault, an Android application engineered and published by Madyal ("we", "us", or "our"), accessible at https://madyal.com/. We are fully committed to protecting the privacy, security, and digital integrity of our users.

This Privacy Policy explains the nature of information we collect, how it is processed and secured, how third-party services operate within CoinVault, and how you can exercise full control over your personal data and account deletion rights in strict compliance with Google Play Developer Policies and applicable data protection regulations.

2. Information We Collect

CoinVault collects only the minimum data required to facilitate safe user authentication, verify reward ledger balances, maintain streak integrity, and safeguard the platform against fraud:

• Account Identifiers & Google Sign-In Data: Your unique Firebase Authentication User ID (UID), registered email address, and account creation timestamp. When you sign in using Google Sign-In (OAuth 2.0), we receive your verified Google email address and public display name provided by Google Identity Services. We use your display name to personalize your app profile and your verified email address to authenticate your session, prevent bot/duplicate multi-accounting, and secure your reward ledger. We do not access, collect, or store your Google password, contacts, photos, or private cloud storage data.
• Ledger & Activity Data: Virtual coin balances, daily login streaks, task completion records, tier progression status, and voluntary reward cashout histories (including payment handles such as PayPal email, Easypaisa, JazzCash, or crypto wallet address provided solely for payout disbursement).
• Technical & Diagnostic Data: Device model, operating system version, app version, network connection status, and general diagnostic logs required to maintain application stability and performance.
• Approximate Location & Country Code: Derived general region or country code used strictly for currency conversion calculations, regional reward tiering, and server-side anti-fraud verification. We do not collect precise real-time GPS location coordinates.
• Advertising Identifiers: Google Advertising ID (GAID) collected via the Google Mobile Ads SDK (AdMob) in compliance with Google Play guidelines.

3. Third-Party Services & Advertising (Google AdMob)

To provide free rewards and secure server synchronization, CoinVault integrates trusted industry-standard third-party SDKs:

• Google Identity Services (Google Sign-In / OAuth 2.0): We utilize Google Sign-In to provide seamless, secure, and verified authentication without requiring manual password entry. Authentication credentials are cryptographically verified directly through Google's OAuth 2.0 protocol and Firebase Auth.
  For details on Google data handling, review: Google Privacy Policy.
• Google AdMob (Google LLC): We display rewarded video advertisements and interstitial ads via Google AdMob. AdMob may use device identifiers, advertising IDs, IP addresses, and cookie-like technologies to serve relevant ads, prevent click fraud, and monitor diagnostic performance.
  For details on how Google processes ad data, please review:
  Google Privacy Policy and How Google uses information from sites or apps that use our services.
• Google Firebase (Firebase Authentication & Cloud Firestore): We utilize Google Cloud Firebase infrastructure for encrypted account management, server-side tamper-proof balance ledgers, and secure Cloud Functions.
  For details, please review: Firebase Privacy and Security Documentation.
• Exchange Rate Provider (open.er-api.com): Public financial exchange rate API used to convert virtual coins to estimated local currency values. No personal user data is ever transmitted to this service.
• Brevo (Sendinblue SAS): Transactional email service provider used exclusively for delivering internal security alerts and administrative notifications upon cashout requests. Personal email addresses and payment account destinations are masked prior to transmission.
  For details, please review: Brevo Privacy Policy.

4. How We Use Your Information

The collected information is used solely for the following explicit purposes:

• Authenticating users and providing access to personalized CoinVault accounts.
• Maintaining accurate, tamper-proof balances of virtual coins and streak records.
• Processing and fulfilling verified cashout redemption requests submitted by the user.
• Preventing malicious exploitation, bot attacks, emulator fraud, or multi-accounting.
• Delivering reward-based advertising experiences via Google AdMob.
• Providing technical customer support and responding to user inquiries.

5. Fair Play, Anti-Fraud & Security Ledger

To preserve equity and fairness for all users, CoinVault enforces strict server-side transaction ledger verification. Attempts to bypass regional ad networks via VPN/Proxy tampering, automated script manipulation, or emulator cheating will trigger automated security restrictions and may lead to account suspension in accordance with our terms.

6. Children's Privacy

CoinVault is directed to a general audience and is strictly not intended for children under the age of 13 (or under 16 where required by local law). We do not knowingly collect personal information from children under 13.

If we discover that a user under 13 has registered or provided personal data, we will immediately delete that account and all associated records from our cloud database. Furthermore, financial cashouts and reward redemptions are strictly reserved for individuals of legal majority or with verifiable parental consent.

7. User Data Retention & Account Deletion Rights

In full compliance with Google Play Store User Data policies, users have the absolute right to request the deletion of their CoinVault account and all associated personal records at any time.

How to request deletion:

• In-App: You can initiate account deletion directly from the Profile & Settings screen within the CoinVault app by tapping "Delete Account & Data".
• By Email: You can send an email directly to our official support address: support@madyal.com with the subject line "CoinVault Account Deletion Request". Please include your registered email address or Firebase UID.
• Dedicated Web Page: You can review complete deletion procedures and data retention terms online at: https://madyal.com/coinvault-delete-account.html.

8. Data Security & Storage

All communication between the CoinVault mobile application and our servers is strictly encrypted using industry-standard Transport Layer Security (TLS / HTTPS). Firestore security rules strictly enforce client authorization, ensuring no user can read or modify another user's balance or sensitive records.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect app updates, new security measures, or changes in legal guidelines. When modifications are made, the revised date at the top of this document will be updated. We encourage you to review this page periodically.

10. Developer Contact & Inquiries

If you have any questions, feedback, data privacy requests, or concerns regarding this Privacy Policy or CoinVault, please contact us directly:

• Developer / Entity: Madyal
• Official Website: https://madyal.com/
• Contact Email: support@madyal.com