Privacy Policy

Information We Collect

• Identity Data: Name, contact details, and account credentials.
• Location Data: Real-time GPS coordinates (essential for Deliver Now logistics).
• Preference Data: Cuisine choices for MegaBliss and fitness/social interests for Challenz.
• Transaction Data: Encrypted payment records and order history.

Purpose of Collection

We collect data only to facilitate services, verify your identity, and personalize your experience. Identifying information is never collected unless strictly necessary for the service (e.g., age verification for restricted hospitality bookings).

Data Security

We implement "Privacy by Design." Your data is protected by industry-standard TLS encryption during transit and AES-256 encryption at rest.

Your Rights

Under the Privacy Act, you have the right to request access to and correction of any personal information we hold. To exercise these rights, please contact our Privacy Officer at challenzsocial@gmail.com.

Data Retention

We do not keep your information longer than necessary. Once an account is deactivated, we begin a scheduled purging process, retaining only what is legally required for tax and audit purposes.

1. Introduction

Challenz is a challenge-centric social platform that enables users to create, participate in, and interact with short-form content, earn digital rewards known as Uwaci Credits (UWC), and engage in real-world business reward loops with participating merchants.

Challenz is committed to protecting user privacy and handling personal and sensitive user data transparently, securely, and in full compliance with applicable laws and platform policies, including the Google Play Developer Program Policies, the EU General Data Protection Regulation (GDPR), guidance issued by the French Data Protection Authority (CNIL), and other applicable privacy and data protection regulations in jurisdictions where the app is offered.

This Privacy Policy explains how Challenz accesses, collects, uses, stores, shares, and protects user data.

2. Categories of Data We Collect

2.1 Personal Information Provided by Users

We may collect personal information that users voluntarily provide, including full name or username, email address, phone number, profile photo (optional), language preference, and declared country or city.

2.2 Authentication and Account Data

We collect data necessary to create and maintain user accounts, including account identifiers, securely hashed authentication credentials, session tokens, account status, and account history.

2.3 User-Generated Content

When users participate in challenges or interact with content, we collect and store user-generated content such as videos, images, audio recordings, captions, comments, reactions, votes, and challenge participation metadata.

2.4 Financial and Rewards Data

Challenz collects and processes non-bank financial data related to Uwaci Credits (UWC), including earned, spent, burned, and redeemed credits, transaction references, and reward loop completion records. Challenz does not store raw credit card numbers, bank account numbers, or government identification numbers.

2.5 Device and Technical Information

We automatically collect certain technical data, including device type, operating system version, app version, IP address, crash logs, diagnostic data, and performance metrics. This data is used for security, fraud prevention, analytics, and app optimization.

2.6 Sensitive Data Accessed via Permissions

With explicit user consent, Challenz may access sensitive device features strictly for core app functionality, including camera access for video creation, microphone access for audio and video recording, photo or media storage access for uploads, and approximate location data (city-level only) for feature personalization where applicable. Challenz does not access contacts, call logs, SMS data, IMEI, IMSI, SIM serial numbers, or inventories of other apps on the device.

3. How We Use User Data

User data is used only for purposes reasonably expected by users and necessary to operate the Challenz platform. These purposes include account creation and authentication, enabling challenge participation and content sharing, calculating and allocating Uwaci Credits, completing reward loops, moderating content, ensuring platform safety, improving app performance, detecting fraud or abuse, and complying with legal and regulatory obligations. Challenz does not use personal or sensitive user data for advertising personalization.

4. Prominent Disclosure and User Consent

When Challenz's access to or collection of personal or sensitive user data may not be reasonably expected by the user, the app provides a clear and prominent in-app disclosure before any data is accessed. These disclosures appear within the normal app experience, clearly describe the type of data collected, explain how the data is used, and identify whether the data is shared.

Consent is obtained through explicit user action, such as tapping an "Allow" or "Accept" button. Navigation away from a disclosure screen does not constitute consent. Permissions are requested only when required for a specific feature, and users may revoke permissions at any time through their device settings. Where applicable, Challenz also complies with alternative lawful bases for processing under GDPR, such as legitimate interest, while still providing appropriate disclosures.

5. Data Sharing and Third Parties

Challenz does not sell personal or sensitive user data. User data may be shared only with trusted service providers acting on Challenz's behalf, such as cloud hosting providers, analytics services, or content moderation partners, and only for policy-compliant purposes. Data may also be disclosed if required by law, valid governmental request, or in connection with a corporate transaction such as a merger or acquisition, with legally adequate notice to users.

6. Third-Party SDKs and Code

If Challenz integrates third-party SDKs or code, we ensure that such providers comply with Google Play Developer Program Policies and applicable data protection laws. Third-party partners are prohibited from selling personal or sensitive user data obtained through the app and may only process data for disclosed and approved purposes. Challenz can provide evidence of compliance to Google upon request.

7. Data Security

Challenz implements appropriate technical and organizational measures to protect user data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encryption in transit using HTTPS, secure storage practices, access controls, and regular monitoring of systems and infrastructure.

8. Data Retention and Deletion

User data is retained only for as long as necessary to provide the app's services or to meet legal, security, or regulatory requirements. Users may request deletion of their account and associated data at any time. Upon account deletion, personal data and user-generated content are permanently deleted or anonymized, except where limited retention is required for legitimate purposes such as fraud prevention or legal compliance, which is clearly disclosed to users.

9. Account Deletion

If users create an account within the Challenz app, they are provided with a readily discoverable option to request account deletion both within the app and outside the app through a web-based mechanism. Account deletion results in the permanent removal of the user account and associated data. Temporary deactivation, suspension, or freezing of an account does not qualify as account deletion.

10. Children and Minors

Challenz is not directed at children and does not knowingly collect personal data from children. If data from a child is identified, it is promptly deleted in accordance with applicable laws and platform requirements.

11. App Set ID Usage

Challenz may use Android App Set ID solely for essential purposes such as analytics and fraud prevention. App Set ID is not used for advertising personalization or ads measurement and is not linked to personal or sensitive user data for advertising purposes. The use of App Set ID is transparently disclosed in this Privacy Policy, and user consent is obtained where legally required.

12. EU, UK, and Swiss Data Protection

For users whose personal data originates in the European Economic Area, United Kingdom, or Switzerland, Challenz processes data in compliance with applicable privacy and data protection laws. Data is accessed and used only for purposes consistent with the consent obtained or other lawful bases, protected with appropriate safeguards, and transferred under valid legal mechanisms where applicable. Challenz regularly monitors compliance and will notify Google and take corrective action if compliance cannot be maintained.

13. User Rights

Depending on applicable law, users may have rights to access, correct, delete, restrict, object to, or request portability of their personal data. Requests may be submitted by contacting admin@megablissworldwide.com, and Challenz will respond in accordance with applicable legal requirements.

14. Changes to This Policy

Challenz may update this Privacy Policy from time to time to reflect legal, regulatory, or product changes. Material changes will be communicated to users through the app or other appropriate channels.