Privacy Policy

Welcome to Diamond Loot, developed and operated by HustlrStudioz. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and your rights.

This policy applies to:

• The Diamond Loot Android app (dev.hustlrstudioz.diamondloot)
• Our website at https://hustlrstudioz.dev
• All related support channels (email, in-app support)

Diamond Loot is free and supported by advertising through Google AdMob.

When you enter the offerwall, we pass a hashed, anonymous version of your Firebase UID (SHA-256, one-way, irreversible) to the provider. We do not share your name, email, or any personally identifiable information.

Task completions are verified via server-to-server postback with cryptographic signature verification. Your app never self-reports task completions.

Coins (◆) are a virtual in-app currency. They cannot be purchased with real money, cannot be transferred between accounts, and have no cash value except when redeemed for gift cards.

When you redeem coins, the gift card code is stored AES-256 encrypted in our database, associated only with your Firebase UID. The full code is only revealed when you explicitly tap "Reveal Code".

Every coin grant is logged with: source, amount, balance before/after, timestamp, and an idempotency key preventing double-crediting. You can request a copy of your transaction log by contacting us.

Diamond Loot is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.

If you are a parent or guardian and believe your child under 13 has created an account, contact us immediately at founder@hustlrstudioz.dev. We will verify the claim, delete the account and all data within 72 hours, and confirm deletion by email.

Our backend infrastructure (Firebase) is operated by Google and may process data in the United States, Europe, and Asia. Google complies with standard contractual clauses and equivalent data protection frameworks.

HustlrStudioz acts as the Data Fiduciary under the DPDPA 2023. Your rights as a data principal include:

• Confirmation and access — know what personal data we process
• Correction and erasure — have inaccurate or unnecessary data corrected or erased
• Grievance redressal — have grievances addressed within a reasonable timeframe
• Nomination — nominate an individual to exercise your rights in the event of death or incapacity

California residents have rights under CCPA/CPRA:

• Right to know — request disclosure of what we collect, use, share, or sell
• Right to delete — request deletion of personal information (see Section 12)
• Right to opt-out of sale — we do not sell personal information
• Right to non-discrimination — we will not deny services for exercising privacy rights

HustlrStudioz acts as the data controller. You also have the right to lodge a complaint with your national data protection authority.

Our fraud detection system uses automated analysis. If your account is restricted as a result, you have the right to request human review by contacting us.

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Display an in-app notification on your next app open
• For material changes affecting your rights, send a push notification or email

Significant changes include: adding a new third-party partner, changing use of advertising identifiers, changes to your data rights, or changes to retention periods.

Previous versions are available upon request at founder@hustlrstudioz.dev.