Privacy Policy

1 Account data

Golden Sparrow requires an account, and Google is the only way to sign in. When you sign in we store a user id, your display name, your email address and your avatar to create your profile. We never see or store your Google password.

2 Profile and survey answers

At sign-up we ask for your date of birth, and optionally your gender, country, and a short set of preference questions.

• Your date of birth is used to check you meet the 18+ requirement and to report age bands in aggregate. It is never shown to other users and is not included in any operator export. Our servers compute your age from it — the app on your phone cannot declare you old enough — and a date below the minimum is refused without being stored.
• Your other answers decide which rewards, games, offers and reminders you are shown.
• Country is not location. It is a country you pick from a list. The app declares no location permission, reads no coordinates, and stores no IP-derived geolocation.

3 Economy and operational data

We record server-verified game sessions, claims, referrals, coin-ledger entries, payout state and fraud signals in order to operate rewards, prevent abuse, resolve support issues and meet financial and legal obligations. These records are required to provide the service and are not controlled by the optional analytics toggle below.

4 Optional usage analytics

Usage analytics is OFF on a fresh install. If you enable it in Settings, we record screen views, session timing, feature and game usage, ad completion or failure, and conversion steps.

We never put your email, payout handle, precise location, advertising id, password, token or a hardware identifier into an analytics event. You can disable collection at any time in Settings; disabling also clears events still waiting to upload.

5 Installation and integrity

The app generates a random identifier scoped only to this installation. It is not Android ID, advertising ID, IMEI or account data, and our server stores only a one-way digest of it. Emulator and integrity status can be written only after trusted server-side verification; the app cannot declare itself trusted.

6 Payout details

When you request a redemption we collect the payout detail you provide — a UPI id, a PayPal email, or a voucher delivery email. It is protected, shown masked in operator queues, and used only to fulfil or investigate that payout.

There are no in-app purchases. Coins cannot be bought, cannot be transferred between users, and cannot be topped up, so we hold no purchase history and no card details.

7 Ads and third parties

Ads are provided by Google AdMob, which may process an advertising identifier according to your consent choices and Google's policies. Where consent is required we ask through Google's own consent form before requesting any ad, and you can change your choice later from Settings.

Ads that offer a reward are always optional and give only in-game help — never coins. See how earning works for the detail.

8 Notifications

If you allow notifications, Google Firebase Cloud Messaging issues a registration token for your installation and we store it so we can deliver payout updates, reminders and announcements to that device. The token identifies the app installation, not you personally, and it is used only to send you notifications — never for advertising or profiling.

Turning notifications off in your phone's settings, or signing out, retires the token for that device. Deleting your account removes it entirely.

We also record which notification categories you have switched off, and we honour that on the server — a muted category is not sent at all, rather than sent and hidden. You can review every category under Settings → Notifications.

9 Retention

Raw first-party usage events are retained for a limited period (currently 180 days). Permanent daily summaries contain only aggregate product and economy metrics with no personal identifier. Payout, fraud, tax, security and other legally required records may be retained longer.

10 Deleting your account and data

You can request deletion inside the app (Settings → Account → Delete account) or from raogy.com/golden-sparrow/delete-account without installing the app.

When a request is processed we remove your name, photo and referral code; delete your date of birth, gender, country and survey answers; delete your notifications, queued notifications and registered notification devices; delete your device signals; detach your identity from optional analytics; and remove stored payout handles from settled requests. Your remaining coin balance is forfeited.

We retain the records we are required to keep for payout disputes, tax, fraud prevention, security and other legal obligations; those retained records no longer contain your personal profile details. Aggregate day totals are preserved without any identifier so erasure does not rewrite historical reporting.

11 Security

All traffic is encrypted in transit over HTTPS; cleartext networking is disabled at the platform level. Data at rest is protected by our managed database provider's encryption. Access to sensitive and per-user operational data is restricted to server-authorised administrators, admin access is audited, and all coin-affecting operations run on trusted servers.

12 Children

Golden Sparrow is for adults. You must be at least 18 to earn or redeem, the app is not directed to children, and it is not part of any families programme. If we learn that an account belongs to someone under 18 it may be held, blocked or closed. If you believe a child has created an account, contact contact@raogy.com and we will remove it.

13 What we do not do

14 Changes and contact

We may update this policy. Material changes will be reflected here and in the copy bundled with the app, and the "last updated" date above will change.

Questions about this policy: contact@raogy.com