Moolu App Privacy Policy
Effective Date: August 10th, 2025
We respect your privacy and are committed to protecting your personal data. This Privacy Policy (“Policy”) describes how we collect, use, share, and safeguard your information when you use our mobile application, website, and related services (“Services”).
By using our Services, you agree to this Policy and our Terms of Service. If you do not agree with this Policy, please do not use the Services.
We’ve organized this Privacy Policy into clear sections so you can quickly jump to what you’re looking for.
- Who We Are
- What Data We Collect
- How We Use Your Data and Legal Basis
- Cookies, SDKs & Tracking Technologies
- How We Share Your Information
- Data Retention
- Your Rights Under GDPR and Other Laws
- Children’s Privacy
- Changes to This Privacy Policy
1. Who We Are
This Privacy Policy is issued by Moolu, the data controller responsible for your personal information under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other privacy laws such as the UK GDPR and the California Consumer Privacy Act (CCPA).
For any questions or requests relating to this Policy, you can contact us at privacy@moolu.io
2. What Data We Collect
We collect personal data that you provide directly to us and data that we collect automatically when you use the Services. This includes:
- Email address (e.g., via Gmail login or other email providers), used to create and authenticate your account.
- Age, gender and gaming preferences, provided through surveys or onboarding, which help us personalize your experience, ensure compliance with age restrictions and recommend relevant games.
- Game activity data, including which games you install, how long you play, and your progress in those games — this is needed to credit your account with rewards.
- Device data, such as device type, operating system, language, country, IP address, and advertising identifiers (e.g., GAID or IDFA).
- Location Data, such as IP-based approximate location or device-level signals). We use this information to provide region-specific content, measure engagement, prevent fraud, and comply with regional legal requirements.
- Log data and analytics, including crash reports, screen views, referral sources, and session length.
- User preferences, such as marketing opt-ins and notification settings.
Our app collects information about the applications installed on your device (“Installed Packages”). This information is used solely for the purposes of verifying gameplay activity, preventing fraud, and enabling the rewards functionality of the app. We do not sell or share this data with unrelated third parties. This collection is performed through third-party SDKs integrated into our app, which process the data on our behalf in accordance with GDPR/CCPA and other applicable laws.
You will be asked for your explicit consent before this information is collected. You may decline, in which case certain features of the app (such as earning rewards for playing games) may not function.
We may also create aggregated or anonymized data for analytical and statistical purposes.
3. How We Use Your Data and Legal Basis
We use your personal data only where permitted by law. Under GDPR, we must have a legal basis for each use of your data. Below is a summary of how and why we process your information:
| Purpose | Description | Legal Basis (under GDPR) |
|---|---|---|
| Account Management | To register your account, maintain your profile and authenticate your identity | Performance of a contract |
| Reward Tracking | To monitor your activity and credit you for eligible gameplay | Performance of a contract |
| Personalization | To recommend games based on your profile and preferences | Legitimate interests or consent |
| Analytics & Improvements | To analyze how users interact with the app, fix bugs, and improve features | Legitimate interests |
| Marketing | To send you updates, promotions, or offers via email or notifications | Consent (you can opt out any time) |
| Fraud Prevention & Security | To detect bots, prevent abuse, and secure the platform | Legitimate interests |
| Compliance with Law | To meet legal obligations, respond to authorities, and handle disputes | Legal obligation |
Where consent is required by law, such as for personalized marketing or tracking, we will obtain it through clear, affirmative action (e.g., via in-app prompts or settings). You may withdraw your consent at any time. We do not use your personal data for automated decision-making that produces legal or similarly significant effects.
4. Cookies, SDKs & Tracking Technologies
Our Services use cookies, SDKs, and device identifiers to enable core functionality, attribute installs to marketing campaigns, track in-game progress, and prevent fraud. These technologies may be set by us or our partners (e.g., attribution and analytics providers).
In jurisdictions where consent is required, we will request your explicit opt-in before enabling these tracking technologies. We will not use non-essential tracking unless you opt in.
We and our partners may collect data about your app usage, including what games you install and play, for how long, and what actions you take, through tracking technologies such as SDKs, advertising identifiers (GAID/IDFA), and device-level permissions. This data is essential for tracking reward eligibility and attributing app installs or engagements to specific campaigns.
5. How We Share Your Information
We do not sell your personal data. However, we may share your information with trusted third parties as needed to provide and operate the Services:
- Game and ad partners, to validate your activity and deliver rewards.
- Attribution and analytics providers, to understand user behavior and campaign performance.
- Cloud service providers, for secure data hosting and technical support.
- Payment processors and reward fulfillment partners, to deliver cash or gift cards.
- Customer support tools and fraud prevention systems, to assist users and protect the platform.
- Legal authorities or courts, when required by law or to protect our rights.
- Business successors, in the event of a merger, acquisition, or restructuring.
All third-party partners are contractually obligated to protect your data in accordance with applicable laws.
6. Data Retention
We retain your personal data only as long as necessary for the purposes described in this Policy:
- We keep account and gameplay data while your account remains active.
- If your account is inactive for more than 12 months, we may delete or anonymize your data.
- We retain transactional and legal data (e.g., payment logs) for up to 7 years, as required by law.
- Aggregated, anonymized data may be stored indefinitely for analytical use.
You may request deletion of your personal data at any time (see Section 7).
7. Your Rights Under GDPR and Other Laws
Depending on your location, you have legal rights regarding your personal data, including the right to:
- Access a copy of the data we hold about you
- Correct or update inaccurate or outdated information
- Delete your data (the “right to be forgotten”)
- Restrict or object to certain processing activities
- Withdraw consent where processing is based on consent
- Port your data to another provider
- Complain to a data protection authority
To exercise any of these rights, please contact us at privacy@moolu.io. We may request verification of your identity. We will respond to all requests within applicable legal timeframes (typically 30 days).
If you’re located in the EEA, you have the right to contact your local supervisory authority.
If you are a California resident, you may also have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, or disclose, and the right to request deletion or correction.
While we do not sell or share your personal information in exchange for monetary value, you may contact us at privacy@moolu.io to exercise any of your rights or request clarification under U.S. privacy laws.
8. Children’s Privacy
Our Services are not intended for children under 16 years old (or the minimum age required by your local law). We do not knowingly collect personal information from children.
If you believe a child has provided us with personal data, please contact us immediately at privacy@moolu.io, and we will delete the data as soon as possible.
9. Changes to This Privacy Policy
We may update this Policy from time to time. If we make material changes, we will notify you through the app, by email (where possible), or by updating the “Last Updated” date at the top of this document.
We encourage you to review this Policy periodically. Continued use of the Services indicates your agreement to the revised terms.
Your continued use of the Services after changes become effective means you accept those changes.”
For More Information
Additional information about Moolu can be found in our Terms of Service, Frequently Asked Questions, or directly within the Moolu application.