JeebByte — Privacy Policy
Effective: 2026-10-01 (identity verification added) · App: JeebByte (com.jeebbyte.app)
The short version
- Learning the course requires no account. The app still sends crash reports and anonymous usage statistics, described below.
- Earning JB Points is optional and requires signing in with Google.
- We ask for a payout name and wallet or bank number when you request a cash payout, and, if we ask you to verify your identity, which cash-out accounts you use. Never for anything else.
- Survey partners receive a random id for you — not your email, not your name.
- JB Points can be spent in the app or cashed out to JazzCash, EasyPaisa or a UAE bank.
- We never sell your data, and payout details are never shared with survey partners.
- If we ask you to verify your identity, your face photos, video and CNIC pictures are deleted automatically after your account is approved. See Identity verification.
What we collect, and only if you use earning
| Data | Why |
|---|---|
| A Firebase account id (a random string) | To hold your JB Points balance and your earning history. Created when you sign in — not before. If you never sign in, no account exists for you at all. |
| Chat messages, your display name and friend code | To deliver messages you send to our support team or to users you have connected with. Messages to another user are shared with that user. Your display name is taken from your Google account when you sign in and can be changed in the app; only the people you chat with see it. Nothing here is used for advertising. |
| Your invite code and who invited you | To run the invite programme. If you sign up with a friend's code we record that they invited you, so their share can be paid when you earn. Your first name appears on your inviter's team screen, and the first names of people you invite appear on yours — first names only, never emails or balances. Nothing here is used for advertising. |
| Your Google account email and display name | Signing in is required before a survey can be opened, so a balance belongs to a person rather than to a copy of the app. One earning account per device. We do not use your email for marketing and we never pass it to survey partners. |
| A one-way hash of your device id | Anti-fraud. The app reads Android's ANDROID_ID and sends it once; our server
stores only a salted SHA-256 of it and never the value itself. It is used to limit how many
earning accounts one device can hold. |
| Whether a VPN is active | Survey panels reject VPN traffic, so the app declines to open a survey while a VPN is on. This is a yes/no answer about the connection. We do not read what the VPN is or where it goes. |
| Your JB Points ledger | Each credit, what it was for, and which partner paid it — so a balance can be explained and disputes can be resolved. |
| Payout details — the account holder name and the JazzCash / EasyPaisa number or bank account number you enter | Collected only when you request a cash payout, and only what is needed to send it. We keep it against that payout request so the transfer can be made, so you can see where money went, and so a failed or disputed transfer can be traced. It is readable only by you and by us — never by survey partners, never used for marketing, and never sold. If you never request a payout, we never ask for any of it. |
If you never sign in, none of the above applies to you and we hold nothing about you.
Identity verification
JeebByte pays real money, so each person may have only one account. Some accounts are asked to
verify their identity on a secure page (jeebbyte.com/verify) opened from the app.
It is only used when we ask, and only for that account.
| Data | Why | How long |
|---|---|---|
| A live face check: a few photos and a short video taken while you follow on-screen prompts | To confirm a real person is behind the account | Deleted automatically once your account is approved and your details are recorded. If the check is not approved, deleted 30 days after the decision, once your details are recorded. |
| Photos of the front and back of your CNIC (you may skip this step and explain why) | To match your face and your name with one identity card | Same as the face check: deleted automatically after approval. |
| The details you type: full name as on your CNIC, CNIC number, father or husband name, date of birth, and a nickname | So one CNIC cannot be used to open several accounts, and so you never have to send photos again | Kept with your account after the photos are deleted |
| The cash-out accounts you use and whose they are, and the family members you list | To tell genuine family accounts apart from one person running several accounts | Kept with your account |
| Technical details of the phone the check was done on: model and Android version, screen size, language, time zone, how long the check took, a device signature (these settings turned into a code), and the network address the page was opened from | To notice when several accounts are verified from the same phone | Kept with your account |
Only our Trust & Safety reviewers can see your verification. It is never sold, never shown to other users and never used for advertising. The photos are stored privately in Google Cloud Storage and the details in Cloud Firestore; the verification page is run by our server on Amazon Web Services. You can ask for a copy of your details, or ask us to correct or delete them, by messaging us in the app chat.
What stays on your phone
Your course progress — finished lessons, XP, streak, energy, notes, bookmarks and settings — is stored locally on your device, as before. Uninstalling the app removes it.
Survey and offer partners
When you open a survey or an offer, we pass a pseudonymous user id to the partner so they can tell us who to credit. The partners we work with are:
- CPX Research — privacy policy
- TheoremReach — privacy policy
- BitLabs — privacy policy
- MM Wall — offers and games. Their terms are shown inside the wall itself; they do not publish a separate policy page we can link to here.
- CPAlead — app-install offers on the Games tab. They receive a pseudonymous user id, your IP address, approximate country and, where your phone provides one, your advertising ID, so they can confirm an install and tell us who to credit. privacy policy
These partners are independent controllers of what they collect. A survey may ask you about your household, your habits or your opinions, and the partner will see your IP address and approximate country, as any website you visit does. Answering is voluntary, and you can close a survey or an offer at any point. Their policies govern what they do with the answers.
Offers work differently from surveys. An offer asks you to install another app and reach a goal in it, rather than to answer questions. If you open the offers wall we also pass your advertising ID, when your phone provides one, because that is how the partner can tell that the app you installed is the one they should pay for. Installing anything is your choice, and the app you install is then governed by its own privacy policy, not ours.
We receive back only the fact that a survey or offer was completed, its transaction id, and what it paid. We never receive your answers.
Crash reports and app statistics
The app uses Google Firebase Crashlytics, Analytics and Performance Monitoring. These tell us when the app crashes, which screens are used, and where it is slow — so we can fix it. They record a random app-instance identifier, your device model, Android version, approximate country, and which screens you opened. They are not used to build a profile of you and are not shared with the survey partners.
Advertising
The app shows rewarded video — short ads you choose to watch in exchange for JB. They are served by Unity Ads, and Unity is an independent controller of what it collects.
Which ads you can see, stated plainly. Rewarded video is always your choice: nothing plays unless you tap to watch it. Besides that, the app also shows a banner on the Earn screen, and a rewarded interstitial — a fuller-screen ad that pays JB — which is switched on today. A plain interstitial that pays nothing is switched off at the time of writing, but it exists in the app and we can enable it from our server without shipping a new version, so we would rather tell you it is possible than imply it can never appear. Whichever format is shown, the partners below and the data they receive are the same.
To do that, Unity Ads reads your device's advertising ID — a resettable identifier Android gives to apps. It is used to cap how often you see the same ad and to tell whether an ad led to an install. Unity also sees your IP address and device model. What they do with it is governed by their privacy policy.
Who else serves those ads. Unity is not the only one, and mediation decides between them each time:
- Unity LevelPlay (ironSource, part of Unity) — the mediation layer that picks which network fills each ad slot. To do that it receives your advertising ID, IP address, device model and approximate country, and it records which ad was shown and whether it completed, so a reward can be verified. privacy policy
- Google AdMob — serves rewarded and rewarded-interstitial ads, both directly and as a network inside LevelPlay. It receives your advertising ID, IP address, device model and approximate country for ad serving, frequency capping and reward verification. how Google uses this data
Each of these is an independent controller of what it collects, and their policies govern what they do with it. We receive back only that an ad was watched and what it paid — never who you are to them, and never anything they infer about you.
You control it. Settings → Privacy → Ads on your phone lets you reset the advertising ID or delete it entirely; if you delete it, ads still work but become less relevant, and nothing else in the app changes. We receive back only that a video was watched and what it paid.
Where your data is held
Account, balance and ledger data are stored with Google Firebase (Cloud Firestore) in Google's
me-central1 region in Doha, Qatar. Google processes it on our behalf as our
infrastructure provider.
The Google Firebase services we use, and what each one is for:
- Firebase Authentication — signs you in with Google and issues the account id everything else is keyed to. It holds your Google email and display name.
- Cloud Firestore — stores your account, balance and ledger, as described above.
- Firebase Analytics, Crashlytics and Performance Monitoring — tell us when the app crashes, which screens are used and where it is slow. They record a random app-instance identifier, device model, Android version, approximate country and which screens you opened.
- Firebase App Check — checks that a request really came from the genuine JeebByte app rather than a script, using Google Play Integrity. It attests the app and the device, not you, and exists to stop fraudulent reward claims. It is enforced on our database.
Google acts as our processor for these, under Firebase's privacy and security terms.
How long we keep it
We keep your account and ledger for as long as your account exists. If you delete your account, we remove your profile, balance and ledger. We keep a record of partner transaction ids without your account id for accounting and fraud reconciliation, because our partners can reverse a payment months after it is made.
Chat messages. Messages between users are deleted automatically 90 days after they are sent. Messages to our support team are kept with your account. If a message is reported, the reported text is kept with the report until we have reviewed it. Deleting your account deletes your chats.
Payout details. The name and wallet or bank number attached to a payout are kept with that payout request while it is being processed and afterwards as the record of where money was sent — we are required to be able to show that, and you are entitled to see it. If you delete your account, your payout requests and the details on them are deleted with it; what remains is the amount and date, with no account id and no destination attached, which we keep for accounting.
Identity verification. Face photos, the video and CNIC pictures are deleted automatically once your account is approved and your details are recorded, or 30 days after a check that is not approved. The details you typed are kept with your account, as described in Identity verification.
Deleting your account
In the app, open Settings and choose to delete your account, or email us at jeebbyte@gmail.com from your signed-in address. Deletion removes your profile, balance and ledger, your support chat and private messages, your identity verification and its pictures, and your public profile. Payout requests are kept only as an amount and a date, with no account id and no destination. Deletion forfeits any unspent JB Points. Instructions are also at the account deletion page.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing jeebbyte@gmail.com. We answer from the United Arab Emirates and we will reply within 30 days. You can also withdraw from earning simply by not using it — the course does not require an account.
Age
The course is suitable for a general audience. The earning features are for people aged 18 and over, because our survey partners require it. Do not use the Earn section if you are under 18. If we learn that an account earning JB Points belongs to someone under 18, we will close it.
Security
Your balance is written only by our server, never by the app, and every credit is verified with the partner that paid it before it is granted. Traffic between the app and our servers uses HTTPS.
Changes
If we change what we collect, we will update this page before the release that changes it, and update the Play Store Data safety section in the same release.
Contact
JeebByte — Mujeeb Ur Rehman, Dubai, United Arab Emirates
jeebbyte@gmail.com