12TestersClub: Test Apps & Websites — Privacy Policy

1. Information We Collect

12TestersClub is a community-driven beta testing platform that connects app developers, website owners, and testers. We collect only the information necessary to operate the Platform, deliver testing workflows, and reward participation.

1.1 Information you provide directly

• Account & Profile: Your name, email address, avatar selection, and optional profile fields (bio, social links such as WhatsApp, Instagram, Facebook, Twitter/X, LinkedIn) when you sign up with Google.
• App Listings: App name, description, Play Store link, custom app icon, and tester count (12–30) when you upload an app for testing.
• Website Listings: Website name, URL, description, custom favicon/icon, tester count (1–30), testing days (1–30), and daily scroll requirement (30s–10min) when you upload a website for testing.
• Testing Proof: Screenshots (up to 5 per day) submitted as proof of testing, along with any scroll time data for website tasks.
• Feedback: Star ratings (overall, UI/UX, Performance), text comments, and bug reports submitted after testing is completed.

1.2 Information collected automatically

• Device & Logs: Device model, operating system version, IP address, crash logs, and analytics events (screens visited, clicks) to ensure reliability and improve the Platform.
• Testing Activity: Logs of tester actions relevant to rewards — when a tester opens an app, installs via Play Store link, opens a website in the in-app browser, scrolls for the required time, submits feedback, or claims tokens. This information is used only to track eligibility for token rewards and audit test completion.
• Advertising Data: When ads are displayed through Google AdMob, the Advertising ID (Android Advertising ID / iOS IDFA), device type, OS version, language, IP address, and ad interaction data may be collected.

1.3 Information we do not collect

We do not collect:

• Precise GPS location
• Contacts, photos, camera, microphone, or files on your device (unless you explicitly upload screenshots as proof)
• Payment card details (handled by Google Play Billing)
• Sensitive personal data of your app's end users

2. How We Use Information

The information we collect is used solely for the following purposes:

• Account Management: Create and maintain your account, preferences, and profile.
• Testing Operations: Deliver testing tasks, process test completions, verify proof submissions, and credit tokens or diamonds.
• Security & Fraud Prevention: Prevent abuse, fake installs, automated claims, and other fraudulent activity.
• Platform Improvement: Use analytics and crash reporting to improve stability, performance, and user experience.
• Advertising: Display banner and interstitial ads through Google AdMob, including rewarding you with tokens for watching rewarded videos.
• Communication: Send important updates, support replies, and policy notifications.

We do not sell your personal information to third parties.

3. Third-Party Services & Integrations

We use reputable services to deliver features and infrastructure. Each maintains its own privacy policy — please review them to understand their data practices:

• Supabase (Auth, Database, Realtime): For authentication via Google Sign-In, realtime database (PostgreSQL), and backend functions. Row Level Security (RLS) ensures data isolation per user.
• Cloudflare R2: For secure image storage (app icons, favicons, screenshots) with free egress and automatic cleanup of deleted items.
• Google AdMob: For monetization. Ads may use device identifiers for personalized ads unless you opt out through your device settings.
• Google Play Billing: For purchases and subscription handling. Payment data (cards) is handled by Google Play and is never stored on our servers.
• Firebase / Crashlytics: For aggregated crash and usage data to improve stability.
• flutter_inappwebview: For the in-app website browser with native scroll tracking. Scroll time data is tracked locally and only the final proof is uploaded.

We integrate provider APIs only at the minimum level required for functionality. We do not share your personal information with third parties except as necessary to provide the Platform or as required by law.

4. Data Storage & Retention

We keep data only as long as necessary for the purposes outlined in this policy:

Data Type	Retention Period	Purpose
Account & Profile Data	Until account deletion or removal request	User management & authentication
App / Website Listings	Until deleted by owner or auto-cleanup	Platform functionality
Testing & Reward Logs	Up to 1 year	Auditing & fraud prevention
Screenshots	Auto-deleted after review	Proof verification
Crash Logs & Analytics	Anonymized / Summarized	Product improvement
Ad Data	Per Google AdMob policy	Ad serving & measurement

Delete account: Email technozaibi@gmail.com to request complete account removal. We will confirm and honor deletion requests within 30 days, subject to legal obligations and audit logs needed for fraud prevention.

Auto-cleanup: Screenshots are auto-deleted after review. Deleted app/website icons are automatically cleaned from Cloudflare R2. Database cleanup runs automatically via pg_cron jobs.

5. Children's Privacy

12TestersClub is rated Everyone and is intended for developers, testers, and website owners aged 13 and above. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction).

Because the Platform requires a Google account for sign-in, users under the applicable age should not use the Platform without parental consent. Ad serving is handled by Google AdMob, which is configured to comply with applicable children's privacy laws (including COPPA and GDPR-K). If you are a parent or guardian and believe your child has provided information to us, please contact us and we will take appropriate action.

6. Data Security

We take reasonable measures to protect your information and the Platform:

• Row Level Security (RLS): Enforced on all database tables to ensure data isolation per user.
• Encrypted JWT tokens: For secure API requests and session management.
• Auto session expiry: For inactive users to prevent unauthorized access.
• Secure cloud storage: Screenshots and icons stored on Cloudflare R2 with access controls.
• No password storage: Google Sign-In eliminates the need for password management.
• HTTPS/TLS: All data transmitted between the app and backend is encrypted.

While we implement industry-standard security controls, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights & Choices

Depending on your jurisdiction (including the EU/EEA under GDPR, California under CCPA/CPRA, and similar laws), you may have the following rights:

Right	How to exercise it
Access / Portability	Contact us to request a copy of your personal data stored on our servers.
Correction	Update your profile information directly in the app or contact us.
Deletion	Request account deletion by emailing technozaibi@gmail.com. We will honor requests within 30 days.
Opt out of personalized ads	Use your device's ad settings (see Section 3) or contact Google AdMob directly.
Withdraw consent	Uninstall the app or delete your account at any time.

If you have questions about exercising these rights, contact us using the details in Section 9.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Platform, our practices, or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the app or on our website.

We encourage you to review this page periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us:

• Email: technozaibi@gmail.com
• Contact page: technozaibi.com/pages/contact.html
• Report an issue: technozaibi.com/pages/report.html

We aim to respond to privacy-related inquiries within 7 business days.