Privacy Policy

Effective date: June 8, 2026 · Last updated: June 8, 2026

Creedo, Inc. ("Creedo," "Company," "we," "us," or "our") operates the Creedo platform at creedo.club (the "Service"). This Privacy Policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, and the rights and choices you have. "You" means the person using the Service.

By using the Service, you agree to this Policy. If you do not agree, do not use the Service. This Policy is incorporated into our Terms of Service.

Who controls your data

Data controller: Creedo, Inc., a Delaware corporation.
Delaware registered office & agent: Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958.
Service: The Creedo platform at creedo.club (the "Service").
Privacy contact: anant@creedo.club

1. Overview

This Privacy Policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, and the rights and choices you have. By using the Service, you agree to this Policy. If you do not agree, do not use the Service. This Policy is incorporated into our Terms of Service.

2. Who can use the Service

The Service is intended for users in the United States who are 18 or older. We do not knowingly collect personal information from anyone under 18 (see Section 12).

3. Personal information we collect

We collect the following categories of personal information. The "Source" shows whether it comes from you, automatically, or from third parties.

Identifiers — Name, email, account ID, username, password (hashed). Source: You.
Contact & payout details — Email or account used for a gift card or cash payout. Source: You.
Identity-verification (KYC) data — Government-issued ID image, selfie / liveness check, date of birth, verification result — collected and processed by our KYC provider. Source: You / KYC provider.
Device & technical data — Device type, operating system, browser, language, IP address, device and browser identifiers, device fingerprint signals. Source: Automatic.
Fraud & risk signals — VPN/proxy indicators, location/geo signals, device-graph links, behavior and risk scores. Source: Automatic / partners.
Usage & activity data — Offers viewed/started/completed, milestones, Creds earned and redeemed, streaks, referrals, timestamps, in-app actions. Source: Automatic.
Transaction & ledger data — Cred balance and ledger history, redemptions, payout records. Source: Automatic.
Referral data — Who referred you and who you referred, referral status. Source: You / other users.
Communications — Support messages, survey responses, feedback. Source: You.
Marketing & ad-measurement data — Ad clicks, campaign/source, conversion events, limited advertising identifiers. Source: Automatic / ad partners.
Inferences — Offer preferences and rankings produced by our matching engine. Source: Automatic.

We do not intentionally collect special/"sensitive" categories of data beyond the government-ID and biometric-style liveness data used strictly for identity verification and fraud prevention.

4. How we collect personal information

Directly from you — when you sign up, verify your identity, set a payout method, contact support, or otherwise use the Service.
Automatically — through your device and our analytics, security, and anti-fraud tools (including cookies and similar technologies — see Section 6) as you use the Service.
From third parties — offer and advertising partners (who tell us when you complete an offer so we can credit Creds and detect fraud), our payout processor, our identity-verification provider, and advertising/analytics platforms.

5. How and why we use personal information

We use personal information to:

Provide and operate the Service — Create and manage your account; serve and rank offers; track completions; maintain your Creds ledger.
Personalize — Rank and recommend offers using our AI matching engine and assistant (see Section 7).
Process rewards — Credit Creds, verify identity, and deliver redemptions and payouts.
Prevent fraud and abuse — Detect multi-accounting, bots, location spoofing, and other prohibited conduct; enforce withdrawal controls; protect users and partners.
Communicate — Send service/transactional messages and, where permitted, marketing.
Measure and improve advertising — Attribute signups and completions; report conversions to ad platforms; reduce wasted spend.
Improve the Service — Analytics, debugging, research, and product development.
Comply with law — Tax, anti-fraud, sanctions, recordkeeping, and responding to lawful requests; enforce our Terms.

6. Cookies and similar technologies

We and our partners use cookies, pixels, SDKs, local storage, and similar technologies to run the Service, keep you signed in, remember preferences, prevent fraud, measure performance, and support advertising. This includes advertising and analytics tools (for example, Meta Pixel / Conversions API and Google advertising and analytics) that help us understand which ads lead to signups and offer completions.

Where required, we present a cookie consent banner so you can accept or reject non-essential cookies. You can also control cookies through your browser settings. Blocking some cookies may affect how the Service works. We honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

7. Automated processing and AI

We use automated systems to rank and personalize offers for you and to score activity for fraud and risk, which can affect which offers you see and whether a withdrawal is held or reviewed. These systems support human oversight; significant decisions such as account termination or withholding rewards for suspected fraud involve our review. You may contact us to ask about, or contest, a decision that materially affects you.

8. How we share personal information

We do not sell your personal information for money. We disclose personal information as follows:

Offer and advertising partners (including our offerwall network) — to deliver offers, confirm completions, credit rewards, and detect fraud.
Payout processor — to deliver gift cards, prepaid cards, and cash payouts.
Identity-verification provider — to verify your identity for KYC and fraud prevention.
Service providers / processors that run the Service on our behalf — for example hosting and database, email delivery, product analytics, error monitoring, and logging providers. These providers may process data in the United States and elsewhere.
Advertising and analytics platforms (such as Meta and Google) — to measure and improve advertising, including sharing limited identifiers and conversion events. Under some US state laws this may be considered "sharing" (or "selling") for cross-context behavioral advertising. You can opt out (see Section 9).
Legal, safety, and corporate transactions — when required by law or legal process, to enforce our Terms, to protect our rights, users, or the Service, or in connection with a merger, financing, acquisition, or sale of assets.

We require our service providers to protect personal information and to use it only for the services they provide to us.

9. Your US state privacy rights

Depending on your state of residence (for example, California under the CCPA/CPRA, and similar laws in states such as Colorado, Connecticut, Virginia, Texas, Oregon, and others), you may have the right to:

Know / access the categories and specific pieces of personal information we have collected;
Delete personal information we hold about you;
Correct inaccurate personal information;
Opt out of the "sale" or "sharing" of personal information for targeted/cross-context behavioral advertising;
Limit the use of sensitive personal information; and
Not be discriminated against for exercising these rights.

To exercise these rights, email anant@creedo.club (you may also use a "Do Not Sell or Share My Personal Information" link where we provide one). We will verify your request before acting on it and respond within the timeframe required by law. You may use an authorized agent where permitted, and you may appeal a denied request by replying to our response.

Categories disclosed in the past 12 months. Identifiers, device/technical data, usage data, and limited advertising identifiers may be shared with advertising/analytics partners for measurement and targeting as described in Section 8. We do not share KYC/identity-verification data for advertising. We do not knowingly process the data of anyone under 18, and we do not "sell" personal information for money.

10. Data retention

We keep personal information only as long as necessary for the purposes in this Policy — to provide the Service, process and verify rewards, prevent and investigate fraud, comply with legal, tax, and accounting obligations, and resolve disputes — after which we delete or anonymize it. KYC and transaction records may be retained longer where law requires. Our wallet ledger is maintained as an append-only record for integrity and audit purposes.

11. Security

We use reasonable technical and organizational measures — including access controls, encryption in transit, hashed credentials, and fraud monitoring — to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

12. Children's privacy

The Service is not directed to and may not be used by anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact anant@creedo.club and we will delete it.

13. International data transfers

Creedo, Inc. is a U.S. company and the Service is intended for U.S. users. Some of our team and service providers operate outside the United States, including in India, so your information may be processed in the United States, India, and other countries where we or our providers operate. These countries may have data-protection laws different from those where you live. By using the Service, you understand that your information may be transferred to and processed in these locations, and we take steps to protect it consistent with this Policy and applicable law.

14. Third-party links and services

The Service links to and integrates third-party offers, games, and services that have their own privacy practices. We are not responsible for those practices. Review the privacy policies of any third party before providing information to it.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where the changes are material, give you reasonable notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

16. Contact

Creedo, Inc. — privacy questions and data requests: anant@creedo.club