Perza Legal

Privacy Policy

The current agreement governing your use of Perza.

Privacy Policy

Last updated: August 11, 2026

This Privacy Policy explains how M2 Interactive LLC, operating under the Perza brand (“Perza,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you use the Perza mobile application and related services (collectively, the “Service”).

Questions and privacy requests may be sent to policy@perza.app.

1. Information we collect

Account and profile information

Depending on the sign-in method you choose, we may receive your email address, authentication provider identifier, name, and profile image from Firebase Authentication, Google, or Apple. We also collect the real name and public display name you provide, your verified phone number, referral information, and profile preferences.

Your real name is used for account, security, support, and redemption purposes. Your display name and approved avatar may appear on public or community-facing surfaces such as leaderboards and Empire.

Phone and identity verification

Perza uses Didit or another approved provider for phone and identity verification. The provider may collect phone details, identity documents, facial images, liveness data, and related verification information. Perza generally stores verification status, provider session or workflow identifiers, relevant timestamps, and limited results needed for security and redemptions. Perza does not intend to store copies of government identity documents in its application database.

Avatar uploads and moderation

If you upload an avatar, the image is stored using Firebase Storage. Automated systems, including Google Cloud Vision SafeSearch or similar tools, may analyze the image for adult, violent, racy, or otherwise unsafe content. Images may also be reviewed manually. We store moderation status, results, and timestamps associated with the upload.

Wallet, activity, and redemption information

We record PZP, Gems, Tickets, ledger activity, check-ins, quizzes, Spin and Scratch outcomes, referrals, survey, offer, and game events, Empire and league activity, wardrobe ownership, support history, redemptions, refunds, reversals, and related timestamps.

For gift-card redemption, we collect the selected product and denomination, delivery email, review state, and provider transaction information. Reloadly or another fulfillment provider receives the information necessary to process and deliver an approved reward.

Surveys and offers

TapResearch, ayeT Studios, Playgama, and other approved earning providers may receive a Perza user identifier, IP address, device and platform information, eligibility attributes, profiling responses, survey, offer, or game activity, and completion or reversal status. Information you enter inside a provider experience is governed by that provider’s privacy practices.

Advertising information

Google AdMob and related Google services may process device identifiers, IP address, ad interactions, diagnostics, consent choices, and measurement data. Rewarded advertisements in Perza award cosmetic Gems only.

Analytics and diagnostics

Perza uses Google Analytics for Firebase and related diagnostics to understand app launches, screen use, feature performance, crashes, and important user actions. We may associate analytics with a Perza user identifier after sign-in. We also process server logs, IP address, device information, request timing, security signals, and error information.

Fraud prevention and redemption review

To protect members and earning partners, Perza processes app-attestation results, a randomly generated installation identifier, verified phone country, approximate network country, masked network range, recent account and redemption activity, provider-reported country, and whether an IP intelligence service identifies a VPN, proxy, Tor exit, datacenter, residential proxy, or recent abusive activity. We may derive a fraud-risk score and reasons from these signals.

These signals can place a redemption on temporary security hold. PZP remain reserved while an authorized administrator reviews the reason codes and supporting signals. Administrative hold, clearance, denial, and refund decisions are recorded in an audit log. Perza does not use this process to make a final adverse redemption decision without permitting administrative review.

Notifications

If you enable notifications, OneSignal, Apple Push Notification service, Firebase Cloud Messaging, and Perza may process device push tokens, subscription identifiers, delivery status, notification preferences, and interaction events.

Support and communications

We collect support tickets, messages, attachments, status history, administrative responses, and communications you send to us.

2. How we use information

We use information to:

  • create, authenticate, secure, and support accounts;
  • verify phone numbers and identities;
  • maintain balances and process verified reward events;
  • provide surveys, offers, quizzes, games, referrals, leagues, Empire, wardrobe, and other features;
  • review, fulfill, cancel, or refund redemptions;
  • moderate avatars, display names, and community-facing content;
  • detect fraud, abuse, duplicate accounts, manipulated events, and security incidents;
  • send transactional, support, reward, league, promotional, and administrative notifications according to your settings;
  • measure performance, diagnose failures, and improve the Service;
  • comply with legal obligations and enforce our agreements.

3. How we share information

We do not sell personal information for money. We share information as needed with service providers and business partners that help operate Perza, including:

  • Google Firebase and Google Cloud for authentication, databases, storage, functions, analytics, moderation, infrastructure, and diagnostics;
  • Apple and Google for social sign-in, app distribution, device services, and push delivery;
  • Didit for phone and identity verification;
  • TapResearch and ayeT Studios for surveys, offers, eligibility, completion, and reward verification;
  • Playgama and approved game publishers for playable game content and limited session activity;
  • Reloadly and reward issuers for gift-card catalog data and approved fulfillment;
  • Google AdMob for advertising, consent, fraud prevention, and measurement;
  • OneSignal for push notifications and delivery analytics;
  • MaxMind and Google Cloud security services for IP country, VPN, proxy, Tor, datacenter, behavioral risk, and abuse-risk detection;
  • OpenAI to generate eligible quiz content from limited quiz parameters and recent question text;
  • professional advisers, contractors, and vendors bound by appropriate confidentiality or data-protection obligations.

We may disclose information when required by law, legal process, or a valid governmental request; to protect rights, safety, security, and service integrity; or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

4. Legal bases where applicable

Where laws such as the GDPR require a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with legal obligations, and obtain consent where required, including for certain advertising, analytics, notifications, or sensitive verification activities.

5. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain wallet and redemption records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, tax, accounting, and provider obligations.

Retention periods vary by record type. Account and profile information is generally retained while the account is active. Ledger, redemption, security, provider callback, audit, and fraud records may be retained after account deletion where necessary for legal compliance and service integrity. Uploaded avatar files that are replaced or rejected may remain temporarily in backups or moderation records.

6. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, and to appeal or complain to a data-protection authority.

You can update certain profile information in the app. You can control push notifications and certain ad or tracking permissions through Perza and device settings. You may request account deletion from Account > Security or at https://perza.app/account-deletion, and may submit another privacy request by contacting policy@perza.app.

We may need to verify your identity before completing a request. Some information may be retained when required or permitted by law, or when necessary to protect the Service from fraud and abuse.

California residents may have rights to know, correct, or delete covered information and to opt out of certain sharing or targeted advertising where applicable. Perza will not discriminate against you for exercising applicable privacy rights.

7. Children

Perza is intended for adults age 18 and older. We do not knowingly permit children to use the Service. If you believe a child has provided personal information, contact policy@perza.app.

8. Security

Perza uses technical and organizational safeguards designed to protect information, including encrypted network connections, Firebase security rules, server-side authorization, restricted secrets, provider signature verification, transactional ledger controls, moderation, and administrative audit records.

No system is completely secure. You are responsible for protecting access to your device, email, social sign-in account, and Perza account.

9. International processing

Perza and its providers may process information in the United States and other countries. Where required, appropriate safeguards are used for international transfers.

10. Third-party services

Provider experiences and linked services may have their own terms and privacy policies. Review those policies before providing information directly to a provider. Perza is not responsible for independent third-party practices.

11. Changes to this Policy

We may update this Policy as Perza changes. We will update the date above and provide additional notice when required.

12. Contact

  • Privacy and policy requests: policy@perza.app
  • Account and reward support: support@perza.app