EarnBox Privacy Policy

Last updated: August 20, 2026

EarnBox ("we", "our", "us") is operated by Baloch Sahab Technologies (SMC-Private) Limited, a company based in Pakistan, as the data controller for the information described in this policy. EarnBox operates the EarnBox mobile app, which lets users earn real rewards by watching ads, completing offers, playing games, and referring friends, and withdraw their balance via JazzCash, Easypaisa, bank transfer, or USDT. This policy explains what information we collect, why, and how it's handled.

Information We Collect

• Account information: your email address and password (stored as a secure hash, never in plain text).
• Profile information: display name and profile picture, if you choose to add them.
• Device information: device model, operating system version, app version, and a one-way hashed device identifier used for fraud prevention — we do not store your device's raw hardware ID.
• IP address, used for fraud prevention and to determine your approximate country.
• Activity and transaction data: ads watched, offers/games completed, referral activity, daily bonus streaks, VIP membership status, and your wallet balance and reward history.
• Withdrawal details: the JazzCash/Easypaisa number, bank account, or USDT wallet address you provide when requesting a withdrawal. These are used solely to send you your payout and are masked wherever displayed in the app.
• Push notification token: a device token used to deliver notifications about your rewards, withdrawals, and account activity. You can decline notification permission at any time.
• Identity verification data: before your first withdrawal, we require identity verification (KYC) through our verification partner, Didit — this includes a photo of your government ID (e.g. CNIC), a selfie, and a liveness check, which Didit uses to confirm your identity, screen against sanctions/AML lists, and verify you're 18 or older. We store the verification result (approved/declined) and your verified full name, which must match the account-holder name on your withdrawal destination — we do not store copies of your ID document or selfie ourselves; those are held by Didit under their own privacy practices.

Third-Party Services

We work with the following third parties to operate EarnBox. Each has its own privacy practices:

• Google AdMob and Unity Ads — show ads and verify ad completions so we can credit real rewards. These networks may collect advertising identifiers as described in their own privacy policies.
• Offer and game partners (e.g. AdGem, AdsLab) — verify that you completed an offer or game milestone so we can credit the reward.
• Didit — performs identity verification (ID document check, face match, liveness, AML/sanctions screening, age check) required before your first withdrawal. See their own privacy policy for how they handle your ID document and biometric data.
• Firebase (Google) — delivers push notifications to your device.
• Resend — delivers account emails (e.g. email verification codes).

We never sell your personal information.

How We Use Your Information

• To create and secure your account, and verify your email.
• To credit rewards accurately and prevent fraud/abuse (e.g. duplicate accounts, bots).
• To process withdrawal requests to the destination you provide.
• To send you notifications about your account, rewards, and withdrawals.
• To operate and improve the app.

Children's Privacy

EarnBox is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will remove it.

Data Retention & Deletion

We retain your account and transaction data for as long as your account is active, and as needed to comply with our legal and financial record-keeping obligations. You can request deletion of your account directly from the app (Profile → Delete Account) or by emailing us — see our Account Deletion page for full details on what gets deleted and what's retained.

Security

Passwords are stored as secure hashes, never in plain text. Withdrawal destination details are masked wherever shown in the app. Data is transmitted over encrypted (HTTPS) connections.

Your Choices

• You can decline notification permission at any time in your device settings.
• You can request access to, correction of, or deletion of your personal data by contacting us.

Changes to This Policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

Contact Us

Questions about this policy or your data? Email us at privacy@balochsahab.com.