PRIVACY POLICY.

TraffCoins (the "App", "we", "us", or "our") is a mobile application (package name com.traffcoins.app) operated by Mufeez Ahmed Shariff, based in India. By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.

1. Who can use TraffCoins

The App is intended for users who are 18 years of age or older. The App is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

2. Information we collect

2.1 Account information

TraffCoins supports two ways to create an account:

• Phone number — used to create and sign in to your account through one-time password (OTP) verification.
• Email and password — if you sign up with email, we collect your name, email address, and password. Your password is processed and stored securely by Google Firebase Authentication; we do not see or store your password in plain text.
• Profile information — any optional details you choose to add, such as a display name.
• Communications — information you send us when you contact support.

2.2 Location data

To reward you for travelling, the App collects your device's precise location (GPS) and derived speed and movement data. This is used to detect when you are travelling, identify traffic conditions, and calculate the coins you earn.

Location is collected only while you have an active earning session running. Once you start a session, location tracking continues for the duration of that session — including if you minimise the App or lock your screen while the session is running — and a persistent notification is displayed on your device the entire time so you always know tracking is active. The App does not use or request Android's background location permission, and it never collects your location when no earning session is active. Ending your session, force-closing the App, or revoking location permission stops location collection immediately.

2.3 Business account information

If you register as a business partner, we additionally collect:

• Business details — business name, shop location/address (set by you on the map), and category.
• Business logo — an image you choose from your device's photos, stored via Google Firebase Storage and displayed to users on the map and in offer listings.
• Coupon and redemption activity — offers you create and records of coupons redeemed by users at your business, including QR code scan events.
• Camera — used only to scan customers' QR codes for coupon redemption. Camera images are processed on your device to read the code and are not stored or uploaded.

2.4 Device and usage information

• Device model, operating system and version, app version, language, and time zone.
• In-app activity — earning sessions, coins earned, balances, and reward redemptions.

3. How we use your information

• To provide the core service — track trips, detect traffic, and calculate and credit your coins.
• To create and secure your account and verify you via OTP or email/password.
• To operate the rewards system and process redemptions.
• To operate business accounts, display business listings on the map, and process coupon redemptions.
• To detect, prevent, and investigate fraud, location spoofing, and abuse of the earning system.
• To fix problems and improve the App.
• To send you service-related messages (such as OTP SMS and important notices).
• To comply with applicable laws and enforce our terms.

4. How location data is collected — important detail

TraffCoins accesses your location only while an earning session that you started is active. While a session is running, tracking continues even if you minimise the App or lock your screen, and a persistent notification is shown on your device throughout so that tracking is never invisible to you. We do not request or use Android's background location permission, and no location is collected when a session is not active. Ending your session or force-closing the App stops tracking, and you can prevent all location collection by denying or revoking the location permission in your device settings — though this will prevent the App from awarding coins for travel.

5. How we share your information

We do not sell your personal information. We share information only as described below:

• Service providers (Google) — we use Google Firebase for authentication, database, and storage, and Google Maps to display maps. Your information is processed on Google's infrastructure in accordance with Google's policies.
• Business partners — when you redeem coins for an offer at a business, that business receives the limited information needed to validate and fulfil the redemption (for example, your redemption code and the fact that it was redeemed).
• Legal and safety — where required by law, regulation, legal process, or to protect the rights, safety, and property of our users or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

6. Third-party services

The App relies on third-party services that have their own privacy policies:

• Google Firebase (authentication, database, storage) — Firebase Privacy and Google Privacy Policy.
• Google Maps — used to display maps, your position during an earning session, and business locations. Governed by the Google Privacy Policy.
• Affiliate coupon partners — some online offers in the rewards store are provided through affiliate networks (such as CueLinks). When you redeem such an offer, you receive a coupon code and may choose to visit the partner brand's website, which operates under its own privacy policy and terms. We do not share your personal information with these networks; following a partner link is your choice.

7. Coins and rewards

Coins earned in the App have no monetary or cash value, are not your property, and can be redeemed only for the offers and rewards made available within the App. We may change earning rates, daily limits, and the rewards catalogue at any time. We process the information necessary to operate this system, including your coin balance and redemption history.

8. Data retention

We keep your personal information for as long as your account is active and as needed to provide the App. We may retain certain information for longer where necessary to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When information is no longer needed, we delete or anonymise it.

9. Account and data deletion

You can permanently delete your account and associated personal data directly within the App at any time. Open your Profile and tap Delete Account (located just below Sign Out). For your security, you will be asked to re-authenticate before deletion is confirmed.

When you delete your account, we remove your personal data — including your profile, coin balance, and earning and redemption history — from our active systems. Deletion is permanent and cannot be undone. Certain information may be retained for a limited period only where we are required or permitted by law to do so (for example, to prevent fraud or comply with legal obligations).

If you are unable to access the App, you can also request deletion by emailing support@traffcoins.com or through our online request page at traffcoins.com/delete-account.html.

10. Your rights and choices

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information and account.
• Withdraw consent (for example, by revoking location permission).
• Lodge a complaint with the relevant data protection authority.

To exercise these rights, contact us at support@traffcoins.com.

11. Data security

We use reasonable technical and organisational measures, including the security features provided by Google Firebase, to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

Your information may be processed and stored on servers operated by our service providers (such as Google) that may be located outside India. Where we transfer information, we take steps to ensure it remains protected in accordance with this Privacy Policy and applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Your continued use of the App after changes take effect constitutes your acceptance of the updated policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

TraffCoins
Mufeez Ahmed Shariff
Email: support@traffcoins.com