QuietVane Privacy Policy

Last Updated: June 10, 2026

This Privacy Policy describes how QuietVane LLC ("QuietVane," "we," "us," "our") collects, uses, and shares personal information when you use the QuietVane app, website, and services ("Services"). By using the Services, you acknowledge this Policy. This Policy is incorporated into our Terms of Service.

---

Summary

• We collect account info, device and usage data, Offer attribution data, and — to issue Rewards — identity verification (IDV) data including a government-issued ID, a live selfie, and biometric identifiers used for facial comparison.
• IDV is performed by our third-party verification provider. You cannot receive a Reward without passing IDV.
• Rewards are delivered by Tremendous, which receives the information needed to deliver your Reward.
• We share data with advertisers and attribution partners to confirm Offer completion, and with service providers to operate the Services and prevent fraud.
• We do not sell personal information for money. Some advertising-related sharing may be "sharing" or a "sale" under certain state laws; you can opt out (Section 9).
• The Services are for adults 18+. We do not knowingly collect data from anyone under 18.

---

1. Information We Collect

1.1 Information You Provide

• Account data: email address, phone number, username, password or third-party login identifiers.
• Identity verification (IDV) data: government-issued photo ID (and the data on it, such as name, date of birth, document number, address, photo), a live selfie or video-selfie, and biometric identifiers/information derived from your ID photo and selfie for facial comparison and liveness detection. IDV may also include phone number validation and precise geolocation at the time of verification.
• Communications: support requests, survey responses, and marketing consents.
• Tax information: where applicable, tax documentation collected through Tremendous's platform in connection with Reward delivery.

1.2 Information Collected Automatically

• Device data: device model, OS version, device identifiers (e.g., advertising ID, vendor ID), IP address, language, time zone, carrier, and signals used to detect emulators, rooted/jailbroken devices, VPNs, and proxies.
• Usage data: Offers viewed, started, and completed; in-app actions; session data; crash logs.
• Location data: approximate location derived from IP address; precise geolocation where you grant permission and where required for fraud prevention or IDV.

1.3 Information From Third Parties

• Attribution and advertising partners: install, event, milestone, and purchase data tied to Offers you start through the App, so we can confirm completion and credit Rewards.
• IDV provider: verification results, fraud signals, and document authenticity assessments.
• Tremendous: Reward delivery and redemption status.
• Fraud prevention services: device reputation and risk signals.

2. Biometric Data

Where we or our IDV provider collect biometric identifiers or biometric information (e.g., facial geometry derived from your ID photo and selfie):

• It is collected only with your consent, solely to verify your identity, detect fraud, and comply with legal obligations.
• It is not sold, leased, or traded, and is not used for advertising.
• It is retained only as long as needed for the verification purpose and applicable legal requirements, and is permanently destroyed no later than the earlier of (a) satisfaction of the verification purpose, or (b) three (3) years after collection, or sooner where required by law (e.g., Illinois BIPA, Texas CUBI, Washington law).
• Our IDV provider's own privacy practices also apply and are presented to you during verification.

3. How We Use Information

• Operate the Services: deliver Offers, track completion, credit and deliver Rewards.
• Verify identity and eligibility, including age, residency, and one-account/one-device rules.
• Prevent, detect, and investigate fraud, including through automated decision-making that may suspend accounts or withhold Rewards in real time.
• Provide support and communicate about your account, Offers, IDV, and Rewards.
• Send marketing communications where you have consented (you can opt out).
• Comply with legal obligations, enforce our Terms, and protect our rights, users, and partners.
• Improve and secure the Services, including analytics and testing.

4. How We Share Information

• Advertisers and attribution partners: device identifiers and Offer event data to attribute and confirm Offer completion. Advertisers process your data under their own privacy policies once you engage with their apps or sites.
• IDV provider: your ID, selfie, and related data to perform verification.
• Tremendous: name, email, and Reward details necessary to deliver your Reward; tax documentation where applicable.
• Service providers: hosting, analytics, communications (email/SMS), customer support, and fraud prevention vendors, bound by contract to use data only for our purposes.
• Legal and safety: law enforcement, regulators, or other parties where required by law, to investigate fraud or violations of our Terms, or to protect rights, property, or safety.
• Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information for money. Sharing of device identifiers with advertising/attribution partners may constitute "sharing" for cross-context behavioral advertising or a "sale" under some state laws; see Section 9 to opt out.

5. Retention

We retain personal information for as long as your account is active and as needed to provide the Services, resolve disputes, prevent fraud, and meet legal obligations. Categories have different schedules:

• Account and usage data: life of the account plus three (3) years.
• IDV documents and results: three (3) years or as required by anti-fraud and legal obligations.
• Biometric data: per Section 2.
• Fraud and enforcement records (including banned-device signals): retained as long as necessary to prevent repeat abuse.

6. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit for IDV submissions. No system is perfectly secure; you use the Services at your own risk and are responsible for safeguarding your credentials.

7. Children

The Services are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it and terminate the account.

8. Your Choices

• Marketing emails: unsubscribe link in any marketing email.
• SMS: reply STOP to cancel.
• Push notifications: disable in device settings.
• Advertising ID: reset or limit via device settings (note: this may break Offer attribution and prevent Reward crediting).
• Precise location: revoke in device settings (may prevent IDV or fraud checks, and therefore Rewards).
• Account deletion: request in-app or through our contact form. Deleting your account voids pending undelivered Rewards (see Terms of Service).

9. State Privacy Rights (US)

Depending on your state (e.g., California, Colorado, Connecticut, Texas, Virginia, and others), you may have rights to:

• Know/access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Obtain a portable copy;
• Opt out of targeted advertising, "sale"/"sharing" of personal information, and certain profiling;
• Limit use of sensitive personal information;
• Not be discriminated against for exercising these rights.

Submit requests through our contact form. We will verify your identity before fulfilling requests and respond within the time required by law. You may appeal a denial by replying to our decision, and we will inform you of the outcome as required by applicable state law. Authorized agents may submit requests with proof of authorization.

California notice: the categories collected, purposes, and disclosures are described in Sections 1, 3, and 4. We do not knowingly sell or share the personal information of consumers under 16.

Note: fraud, IDV, and Reward eligibility determinations under our Terms of Service are separate from privacy-rights requests; exercising a privacy right does not reverse an enforcement decision, and we may retain fraud-related data as permitted by law even after a deletion request.

10. International Users

The Services are operated from the United States and intended for US users. If you access the Services from outside the US, your information will be transferred to and processed in the US.

11. Automated Decision-Making

We use automated systems to detect fraud and policy violations. These systems may automatically suspend accounts, block devices, or withhold Rewards. Determinations are final as described in our Terms of Service, except where applicable law grants you rights regarding automated decisions.

12. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy and revise the "Last Updated" date, and where required by law will provide notice of material changes. Continued use after posting constitutes acceptance.