Privacy Policy
Last updated 6 November 2026
Algomise Technologies LLP (“Algomise”, “we”, “us”) is a Limited Liability Partnership registered in India at 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016. This one policy covers everything we run:
| Family | Products | What it is |
|---|---|---|
| Algomise Rewards | CoinJeeto, CashBoo, CashAnt, WooCash | Rewards apps: you earn an in-app balance (called Jeetos in CoinJeeto and Coins in the other apps — together “Coins” in this policy) and redeem it for UPI cash or gift cards. |
| Algomise Games | Knife Master: Log Strike, and every game we publish in future | Free mobile games funded by ads. |
| Our websites | algomise.com and each app’s website | Information about us and our products, and business enquiries. |
Part A applies to everything. Part B applies only to the Rewards apps, and Part C only to the Games. When we add a new app or game, we add it to the table above; nothing else in this policy needs to change for you.
Algomise Technologies LLP is the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Part A — For everyone
A1. What we never do
- We do not sell your personal data.
- We do not access your contacts, SMS, call logs, camera, microphone, photo library or precise (GPS) location.
- We never see, receive or store your passwords, UPI PIN, bank password or card details.
A2. Our websites
algomise.com has no accounts, no analytics and no advertising trackers, and does not set cookies. Our hosting provider keeps basic technical logs (IP address, browser, pages requested, time) to keep the site running and secure. The contact form does not send anything to our servers: it opens a pre-filled email or Telegram chat, and nothing reaches us until you send it. When you email or message us we receive what you send (usually your name, email, company, phone number and enquiry) and use it only to reply and to run any campaign or partnership with you. We keep it while we are working together and afterwards only as long as accounting or legal reasons require.
Our app websites (such as coinjeeto.com and cashboo.in) use Google Analytics cookies to count visits and see which pages are useful. This does not identify you by name. You can opt out with Google’s Analytics opt-out browser add-on.
A3. Where your data is stored
Our servers and database run on Google Cloud (Cloud SQL), asia-south1 region (Mumbai, India), encrypted at rest; backups are also held in India. Some logs and analytics are processed on Google infrastructure outside India. The DPDP Act permits this except to countries the Government restricts, and we will stop any transfer to a restricted country if one is notified.
A4. Security
All traffic uses HTTPS (TLS 1.2 or higher) and our apps block unencrypted traffic. Production access is limited to a small number of engineers through Google Cloud IAM, and every access is logged. Google Cloud is ISO 27001 and SOC 2 Type II certified. Automated backups run every 24 hours and are kept for 30 days. Crash reports have personal data removed. No system is perfectly secure, but we review these measures regularly.
Found a vulnerability? Email security@algomise.com with steps to reproduce. Please give us reasonable time to fix it before public disclosure; we offer a thank-you reward for valid, impactful reports.
A5. Your rights
Under the DPDP Act you may: access a copy of your data; correct inaccurate data; erase your data; withdraw consent at any time; nominate someone to exercise these rights if you die or cannot act; and complain (see A6). Email privacy@algomise.com from the email registered on your account and tell us which app or game it is about. We respond within 30 days. Withdrawing consent is as easy as giving it; where we need the data to run your account, withdrawing means we close the account.
Please give accurate information and do not raise false or frivolous complaints — the DPDP Act provides penalties for this.
A6. Complaints and Grievance Officer
Raise a privacy complaint with privacy@algomise.com or through in-app support. We acknowledge within 24 hours and aim to resolve within 15 days. If you are not satisfied, escalate to our Grievance Officer:
Vishal Kumar · vishal.kumar@algomise.com · Algomise Technologies LLP, 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016.
If your complaint is still unresolved, you may complain to the Data Protection Board of India.
A7. Data breaches
If a breach of your personal data occurs, we will tell you without delay and report it to the Data Protection Board of India within 72 hours of becoming aware of it, explaining what happened, what data was affected, what we are doing and what you can do.
A8. Links to other services
Offers, surveys, ads and links can take you to a third party’s app or website. Their privacy policy applies there, not ours, and we are not responsible for their practices.
A9. Business transfers
If Algomise is involved in a merger, acquisition, restructuring or sale of assets, your data may be transferred as part of it. We will tell you before your data becomes subject to a different privacy policy.
A10. Changes to this policy
We may update this policy. We will change the “Last updated” date, and for material changes we will notify you in the app at least 7 days before they take effect. Continued use after that date means you accept the change. For accounts, we keep a record of the version you accepted and when.
A11. Contact
| Privacy and data requests | privacy@algomise.com |
| General support | support@algomise.com, or in-app support in each app |
| Security reports | security@algomise.com |
| Grievance Officer | Vishal Kumar — vishal.kumar@algomise.com |
| Post | Algomise Technologies LLP, 400-A, 4th Floor, Ajit Singh House, 12 Commercial Complex, Yusuf Sarai, Green Park, New Delhi – 110016, India |
Part B — Algomise Rewards (CoinJeeto, CashBoo, CashAnt, WooCash)
B1. Data we collect
You give us directly
- Account — when you sign in with Google: your name, email, profile photo and Google account ID.
- Payout — the UPI ID or email you give when redeeming Coins.
- Verification — your mobile number where we verify a payout, and PAN or similar details where the law requires them.
- Support messages — anything you send us, including screenshots and app logs you choose to attach when you raise an issue.
- Offer and task screenshots — a screenshot you choose to upload as proof for a task or offer step. Our review team, and an automated AI check, look at it; it is kept with your task history.
- WhatsApp — if you verify your number or message us on WhatsApp: your WhatsApp number, profile name and the messages you send us.
- Telegram — if you verify your mobile number or a channel join through our bot @AlgomiseRewardsVerifyBot: the number you share with the bot, your Telegram user ID, username and display name, and whether you joined our channel. Used only to verify your account before a payout and to prevent fraud; we never post or send messages from your Telegram account.
We collect automatically
- Device — model, OS version, advertising ID, screen size, language, time zone.
- Usage — screens opened, games played, surveys, rewarded videos watched, session length.
- Technical logs — IP address, crash reports, network type.
- Approximate location — the city, state and country your internet connection (IP address) points to, looked up through ipapi.co at most once a day. This is where your connection is registered, not where you are; we do not collect GPS. Used to detect fraud, check which offers are available in your region and understand where the apps are used.
- Fraud signals — VPN or proxy status, root status, app-tamper status and device fingerprint, used only to prevent reward fraud.
From third parties — offerwall and survey providers tell our server when you complete an offer (offer ID, reward, your user ID). Ad networks send us aggregated impression and click numbers.
If you don’t give data: Google sign-in is needed to have an account, and a UPI ID or email to receive a payout. Verification details are needed where the law or our fraud checks call for them. Nothing else is required.
B2. App permissions
| Permission | Why |
|---|---|
| Internet and network state | To load the app, offers, surveys and ads |
| Advertising ID | To show and measure ads, and to detect reward fraud |
| Notifications | Account, reward, task and payout updates |
| Usage access (only if you allow it) | Asked only when you start a play-time offer, an app offer, a Super Offer or a Mega Offer. Used only to see how long you used the offer’s app since you installed it. We do not read what you do inside any app or collect other apps’ usage. You switch it on yourself and can switch it off any time. |
| Seeing which apps are installed | During an app offer, to recognise the offer’s app and credit the install step. Only that app (name and package) is sent to us. |
| Run in background, start at boot, keep awake | To deliver notifications and reminders reliably |
| Install referrer and Android ad services | To know which campaign or link brought you to the app, and to measure ads |
B3. How we use your data
- Create and secure your account.
- Credit Coins for ads, surveys, videos, tasks and offers.
- Process and verify UPI and gift-card payouts.
- Detect and prevent fraud — duplicate accounts, bots, fake completions, reward farming.
- Show relevant offers, surveys and ads based on your device and approximate location.
- Send account, task and payout updates.
- Comply with Indian law, including tax reporting and valid law-enforcement requests.
We process your data on the basis of the consent you give when you create your account, and for the legitimate uses the DPDP Act allows. We do not use your data for profiling that has legal or similarly significant effects on you.
One person, one app. If you have accounts in more than one Algomise Rewards app with the same Google email, we use that email to apply our “one person, one reward” rules (for example, a client task can be done in only one of the apps) and to prevent fraud across our apps.
B4. Partners we use
| Provider | What it does |
|---|---|
| Google Firebase | Sign-in, app settings, notifications, Crashlytics and Analytics |
| Google AdMob and its mediation partners (AppLovin, InMobi, Liftoff, ironSource) | Rewarded and in-app ads |
| PubScale, CPX Research, TheoremReach, TimeWall, SpawnTap, BestOfferwall, GrowDeck | Offerwalls, surveys and play-time tasks |
| Razorpay | Checks your UPI ID is valid before a payout |
| GiftPort | Gift-card issuance |
| Google Cloud | Our servers and database, Mumbai |
| Google Play Integrity | Checks the app and device are genuine |
| Google Gemini | Automated first check of task and offer screenshots |
| AppsFlyer | Install attribution and ad measurement |
| Microsoft Clarity | Usage analytics, including screen recordings on a sample of devices, with sensitive fields masked |
| Meta (WhatsApp Business) | Phone verification, support chat and account updates (reply STOP to stop) |
| Telegram | Mobile-number and channel-join verification, and our community channel |
| ipapi.co | Turns an IP address into an approximate city, state and country |
Each has its own privacy policy. We share only the minimum each one needs. We keep this list current as partners change.
B5. Ads, offerwalls and mini-games
The Rewards apps are free and funded by advertising. When an ad or offerwall is shown, your advertising ID, IP address and device type are shared with the provider so it can serve it. We never share your name, email or payout details with advertising partners. You can reset your advertising ID or opt out of personalised ads in Android Settings → Privacy → Ads; we honour that setting.
Mini-games and games inside the apps are free. No Coins are given for playing, completing or winning them; Coins linked to them come only from ads shown during play.
B6. How long we keep data
| Data | How long |
|---|---|
| Active accounts | While the account is active |
| Inactive accounts | Closed after 12 months of inactivity; data then anonymised |
| Payout and transaction records | 7 years (Indian tax and anti-money-laundering law) |
| Fraud and abuse markers | Up to 2 years, as irreversible hashes only |
| Support messages | 24 months from last contact |
| Encrypted backups | Rotated out within 90 days |
| Aggregated, anonymised analytics | Indefinitely — no longer identifies you |
B7. Deleting your account
How: use Delete Account in the app (below Log Out), or email privacy@algomise.com from your registered address with the subject “Delete my account” and the app’s name. You don’t need to reinstall the app to ask by email.
Timeline: acknowledged within 2 working days; completed within 7–30 days (usually a week); backups rotated out by day 90.
Deleted: profile (name, email, photo, Google ID), Coin balance, reward, game and survey history, referrals and streaks, payout details, devices and identifiers, notification token, support history.
Kept: payout and transaction records (7 years, required by law); fraud markers (up to 2 years, hashes only, so a banned account cannot re-register); anonymised analytics.
Your Coins: unredeemed Coins are forfeited on deletion with no compensation — redeem first. Deleting one app’s account does not delete your accounts in our other apps.
Partial deletion: you can ask us to remove only your saved UPI ID, one support conversation or your notification token, and keep your account.
Deletion is permanent. Signing in again later creates a new, empty account.
B8. Withdrawing consent
To withdraw consent, email privacy@algomise.com from your registered address, or delete your account in the app — no form and no phone call. We then stop processing your data for the purposes you withdrew from and erase it, except what the law requires us to keep (see B6). Withdrawal does not affect processing already done. Where we need the data to run your account, withdrawing consent means we close the account.
B9. How we protect Rewards accounts
- Sign-in is through Google only. We never see your password. Sessions use signed tokens from our servers that expire and refresh automatically, and you can remove the app’s access any time from your Google Account permissions page.
- Access rules — our servers check every request against the signed-in account, so nobody can read or change another user’s data. Coins, payouts and balance changes happen only on our servers; the app cannot write its own balance.
- Fraud defences — VPN and proxy detection, root and tamper detection, device fingerprinting and velocity checks on earning and payouts. Offerwall and survey completions arrive as signed server-to-server messages checked against a shared secret, so a reward cannot be faked from a phone.
- Payout safeguards — UPI IDs are checked with Razorpay, UPI payouts are reviewed by our team before they are sent, and gift cards are issued through GiftPort. We never store your UPI PIN, bank password or card details.
B10. Children
The Rewards apps are only for people aged 18 or over. We do not knowingly collect data from anyone under 18; if you think a child has an account, email privacy@algomise.com and we will delete it.
Part C — Algomise Games (Knife Master: Log Strike and future games)
C1. Playing a game
You can play without an account. Your levels, diamonds and settings are stored only on your phone. We do not ask for your name, email or phone number.
C2. Ads
Our games are free and show ads, including rewarded video ads you choose to watch (for example to collect a diamond or continue a level). Ads are served by Google AdMob and its mediation partners (currently InMobi, Liftoff and ironSource). To show and measure ads and prevent ad fraud, these providers may collect your advertising ID and other device identifiers, device and network information (model, OS version, language, IP address, approximate location from IP) and ad interactions (shown, watched, clicked). You can reset your advertising ID or opt out of personalised ads in your phone’s Settings → Google → Ads. Each provider has its own privacy policy.
We may also use Firebase Analytics and Crashlytics to count players and fix crashes, without your name or email.
C3. Linking a game to a Rewards app (Mega Offer)
If you start a Mega Offer from one of our Rewards apps (for example CoinJeeto), the game links to that account with a short-lived token — it never sees your login. While linked, the game sends our server: the account link and diamonds earned from rewarded ads; offer progress (install of the offered app, steps completed); how many minutes you used the offered app (read with Android Usage access, which you switch on yourself after an in-game explanation; only that app’s time is read); and screenshots you choose to upload (checked by our team and an automated AI check). This data is handled under Part B, together with your Rewards account.
C4. Keeping and deleting game data
Game progress stays on your phone and is deleted when you uninstall the game or clear its data (Settings → Apps → the game → Storage → Clear data). Mega Offer records are kept with your Rewards account; to delete them, delete that account in its app or email privacy@algomise.com with the subject “Delete game data” and the game’s name. We delete within 30 days, except records the law requires us to keep (for example payout and tax records). Ad providers keep ad data under their own policies.
C5. Children
Our games are not directed at children under 13, and we do not knowingly collect data from them. Mega Offers and anything involving rewards or payouts are only for people aged 18 or over.