RBX Rewards: Daily Quest
Who we are
RBX Rewards: Daily Quest is an independent rewards application for Android. This policy explains what the app collects, why, and how you can have it deleted.
This app is not affiliated with, sponsored by, or endorsed by Roblox Corporation. Roblox and Robux are trademarks of Roblox Corporation. Coins earned in this app are an in-app scoring currency, are not Robux, and have no cash value.
What we collect
We keep the minimum needed to run a rewards economy fairly:
- An account ID created by Firebase Authentication the first time you open the app. You start as a guest: this ID is not linked to your name, email address or phone number.
- Your email address and sign-in method, only if you choose to sign in with Google or with email and password. Signing in is optional and only needed to redeem rewards. With Google sign-in, Google shares your email address with us. We never receive your Google password.
- Your display name and avatar, if you set one.
- Your Coin balance, lifetime totals, daily streak and reward history.
- A record of each reward you claim and each game session you complete, including score and duration. These stop the same reward being paid twice and help us detect automated play.
- Redemption requests, including the username you provide for delivery.
- Your reminder preferences.
- A push notification token for your device (Firebase Cloud Messaging), so we can send you notifications. It identifies the app on your device, not you personally.
- Standard app analytics and crash reports (app version, device model, OS version, and which screens and events occurred).
- Your ad consent choice, stored on your device by Google's User Messaging Platform.
What we do not collect
We do not ask for your real name, phone number, postal address, contacts, photos, precise location, or payment details. Your email address is collected only if you choose to sign in. We do not collect your Roblox password, and we will never ask you for it.
Why we collect it
- To run your wallet and show your correct balance.
- To decide fairly whether a reward is due, which requires server-side records of what you have already claimed.
- To detect and prevent fraud and automated play, which protects the rewards available to everyone else.
- To deliver a redemption you requested.
- To let you recover your account and Coins on a new phone or after reinstalling, if you signed in.
- To send the reminders and notifications you have switched on.
- To fix crashes and improve the app.
Where it is stored
Your data is stored using Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics) on Google Cloud infrastructure in the United States. Google processes it on our behalf.
Sharing
We do not sell your data and we do not share it with advertisers for profiling. We share only what is necessary with our infrastructure provider (Google Firebase), and where we are legally required to.
Advertising
The app shows ads supplied by Google AdMob. To serve them, Google and its advertising partners may process your device's advertising identifier, coarse location derived from your IP address, and basic device information, in accordance with Google's own policies and your device's ad settings.
Rewarded videos are always optional and never pay Coins. They only unlock extra play, such as an instant rematch or a second chance in a game. You can earn every Coin in the app without watching a single ad.
Consent
If you are in the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before any personalised ad is requested, using Google's User Messaging Platform. If you are in a US state with an applicable privacy law, you are shown a notice with your available choices.
No ad is requested until that has been resolved, and if it cannot be resolved we serve no ads at all.
You can change your choice at any time from Profile → Ad privacy
settings in the app. That option appears whenever you have a consent choice
available to revisit. You can also reset or delete your advertising identifier under
Settings → Google → Ads on your device.
Notifications
- Daily reminders (daily reward, today's leaderboard, missions and streak) are scheduled on your device itself. Scheduling them sends no data to us.
- Push notifications are sent through Firebase Cloud Messaging using the push token described above.
- You can switch each reminder off in Profile → Reminders, or turn off all notifications for the app in your device settings.
Permissions the app uses
The only permission the app asks you for directly is notifications. The rest are standard permissions granted at install, mostly declared by Google's libraries.
- Notifications: to show reminders and push notifications. Asked on Android 13 and later, and you can refuse. The app works fully without it.
- Internet and network state: every reward is checked by our servers.
- Run at startup: to restore your scheduled reminders after the phone restarts or the app updates.
- Advertising ID and ad services: used by Google AdMob to serve and measure ads, as described under Advertising.
- Receive push messages, wake lock and vibrate: used by Firebase Cloud Messaging and the notification system to deliver notifications.
- Biometric (declared by Google's sign-in library): the app does not use your fingerprint or face.
The app does not request your location, camera, microphone, contacts, photos, or files.
Children
This app is designed to be safe for a general audience and does not request personal information. If you believe a child has provided us with personal information, contact us and we will delete it.
Account & Data Deletion
You can delete your account at any time from Profile → Delete Account inside the app. You will be asked to confirm, and the deletion begins immediately.
If you no longer have access to the app, you can request deletion by emailing freerbxrewards.help@gmail.com from the email address associated with your account.
When an account is deleted, we delete the associated profile information, your sign-in account and email address (if you signed in), your push token, your Coin balance, your account and earning history, your streak and mission progress, your game records, and other account-linked data, except information we may need to retain for fraud prevention, security, legal, or regulatory purposes.
Specifically, we retain records of rewards that were already delivered, with your account ID replaced by a random code and your delivery username removed. Those records no longer identify you, and we keep them only for accounting and fraud prevention.
Deletion requests are processed within 30 days. Deletion is permanent: a deleted balance, history or pending redemption cannot be restored.
Your other choices
- You can switch off every reminder in the app, or all notifications in your device settings.
- You can play as a guest and never share an email address.
- You can reset the advertising identifier in your device settings.
- You can request a copy of your data by emailing us.
Retention
We keep reward and redemption records for as long as your account exists, plus a short period afterwards for fraud investigation and accounting. Crash reports are retained by Firebase Crashlytics on its own schedule.
Changes
If this policy changes materially, we will update the date at the top of this page and show a notice in the app.