CRUSH REWARDS PRIVACY POLICY 

Effective Date: September 3, 2025 

INTRODUCTION 

This Privacy Policy explains how Crush Rewards, Inc. and its affiliates (collectively, "Crush," "we," "us," or "our") collect, use, share, and protect your personal information when you use our mobile application, Chrome extension, website, or any other services we provide (collectively, the "Service"). 

Our business model is centered on incentivized data contribution ("data-to-earn") and the sale of aggregated, anonymized consumer insights to brands, agencies, and market researchers. A tokenized rewards system ($CRUSH, a Solana SPL token) is core to our model. 

By using our Service, you agree to the collection and use of information as described in this policy. If you do not agree with our policies, please do not use our Service. 

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly 

Account and Profile Information: 

• Name, email address, phone number, and mailing address 

• Demographic information including date of birth, gender, income, and racial/ethnic origin (if you choose to provide it)

Financial Information: 

• Transaction data from linked bank accounts or credit/debit cards through our integration with Plaid 

• Digital purchase data from linked email and retailer accounts (e.g., Amazon) 

• Information from physical receipts you submit, including merchant details, items purchased, and transaction amounts 

Survey Responses: 

• Answers to surveys about your preferences, opinions, and experiences 

Optional Information: 

• Health information (if you opt in), such as data from connected health apps or health-related purchases 

• Biometric data (with explicit consent) for identity verification purposes 

• Chat logs (if you opt in) from connected large language model services 

1.2 Information Collected Automatically 

Device and Technical Information: 

• Device identifiers, IP address, operating system, browser type 

• Mobile advertiser ID and device UUID 

• Screen resolution and other technical specifications 

Behavioral Data: 

• Browsing data from our Chrome Extension (URLs visited, search terms, activity) 

• App usage data (with your consent) 

• Location data (with your consent, including background collection on mobile devices) 

Cookies and Tracking Technologies: 

• We use cookies, pixels, SDKs, and other tracking technologies to collect information about your interaction with our Service 

2. HOW WE USE YOUR INFORMATION 

We use your information for the following purposes: 

• Providing and Improving the Service: Processing transactions, delivering rewards, and enhancing functionality 

• Personalization: Tailoring content, offers, and communications to your preferences 

• Data Insights: Creating aggregated, anonymized data sets for sale to brands, agencies, and market researchers 

• Fraud Prevention: Protecting against fraudulent activity and ensuring security 

• Marketing: Sending you communications about features, updates, and offers 

• Analytics: Understanding user behavior to improve our Service 

• Research: Using health data (with explicit consent) for market research, consumer profiling, targeted offers, and surfacing clinical study opportunities 

3. HOW WE SHARE YOUR INFORMATION 

We may share your information with: 

• Service Providers: Companies that help us operate the Service, including: 

  • Plaid (for financial data aggregation) 

  • Reducto and Google DocumentAI (for receipt processing) 

  • Crossmint (for authentication and wallet creation) 

• Participating Businesses: If you opt into our "Data Rewards" program, we may share your information with participating businesses (brands, retailers, research firms) for market research or personalized advertising 

• Advertising and Analytics Partners: Third-party companies that help us deliver relevant advertisements and analyze Service performance 

• Legal Authorities: When required by law, legal process, or to protect our rights 

• Business Transfers: In connection with a merger, acquisition, or sale of assets 

4. YOUR CHOICES AND RIGHTS 

You have several rights and controls regarding your information: 

• Access and Correction: View and update your information through the app or by contacting us 

• Deletion: Request deletion of your account and personal information 

• Data Sharing Controls: Manage your participation in the Data Rewards program through the in-app Data Rewards Control Center 

• Sensitive Data: Control the collection and use of sensitive information like health data and location 

• Marketing Communications: Opt out of marketing emails using the unsubscribe link 

State-Specific Rights: Residents of California, Colorado, Connecticut, Montana, Nevada, Oregon, Texas, Utah, and Virginia have additional rights regarding their personal information, including: 

• Right to know what personal information is collected, used, shared, or sold 

• Right to delete personal information 

• Right to opt-out of the sale of personal information 

• Right to non-discrimination for exercising these rights 

5. SECURITY 

We implement appropriate technical and organizational measures to protect your personal information. These include encryption, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security. 

6. RETENTION 

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. 

7. CHILDREN'S PRIVACY 

Our Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. 

8. CHANGES TO THIS POLICY 

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. 

9. CONSUMER HEALTH DATA If you opt in to share health-related information, we will process this data in accordance with applicable state laws, including Washington's My Health My Data Act and Nevada's SB 370. Please see our separate Consumer Health Data Privacy Notice for more information about how we handle this specific type of data. 

10. CONTACT US 

If you have any questions about this Privacy Policy, please contact us at: 

• Email: privacy@crushrewards.io