Answrly

Privacy Policy

1. Who we are

Answrly is operated by Mosel AS (org. no. 937308809), Inndalsveien 5, 5063 Bergen, Norway. For data protection questions, contact kontakt@mosel.no.

2. What data we collect

Data	Purpose	Legal basis (GDPR Art. 6)
Email, password (hashed), or the identifier from Google or Apple sign-in	Account creation and authentication	Contract necessity
Country, language	Show relevant surveys/tasks, comply with local requirements	Contract necessity
Age confirmation (18+)	Eligibility, legal compliance	Legal obligation
Date of birth, and optionally gender and postal code	Check that you are 18 or older, and match you with surveys you can qualify for. Survey partners use these to decide which surveys to offer you	Contract necessity; legal obligation (age)
IP address and device or browser type	Prevent fraud and duplicate accounts, and let survey partners offer surveys for your location	Legitimate interest
Wallet ledger (earnings, referral credits, payouts)	Track and pay out your balance	Contract necessity
Payout recipient details: your email (passed to Tremendous), or your Revolut tag and the name on your Revolut account (passed to Revolut)	Process payouts	Contract necessity
Referral code usage	Calculate referral commissions	Contract necessity
Messages you send to support, and our replies	Answer your request	Contract necessity; legitimate interest
Push notification token (only if you turn notifications on)	Tell you when a reward arrives or support replies	Consent
App version and usage data	Fraud prevention, service reliability	Legitimate interest

We do not collect payment card or bank account details directly — payout delivery is handled by Tremendous, a separate data controller for that step (see their own privacy policy).

3. Third parties we share data with

• Survey and offer partners (currently CPX Research, RapidoReach and Lootably, and similar partners we may add) — receive your user identifier, IP address, device or browser type and country. Where you have provided them, survey partners also receive your date of birth, gender and postal code so they can offer you surveys you can qualify for. CPX Research also receives your email address. They report back completions and screen-outs, and may separately collect your survey responses under their own privacy terms.
• Tremendous — receives your email and the payout amount to deliver your payout. It is a separate data controller for that step.
• Revolut — if you choose Revolut, receives your Revolut tag, the name on your Revolut account and the payout amount.
• Supabase — our database and authentication infrastructure provider (data processor), hosted in the EU (London, UK region).
• Resend — delivers the emails we send you, such as support replies (data processor).
• Expo — delivers app updates and, if you turn them on, push notifications (data processor).
• Vercel — hosts our website and web app (data processor).
• Apple and Google — distribute the app and provide sign-in if you choose it.

We do not sell personal data.

4. Your rights (GDPR / UK GDPR)

If you are in the EEA, UK, or a jurisdiction with equivalent protections, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention requirements, e.g. financial records tied to payouts)
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact kontakt@mosel.no.

5. Data retention

We retain account and ledger data for as long as your account is active, and for a period after closure as required for financial record-keeping and fraud prevention. When you delete your account, your profile, wallet and activity in the app are deleted. Records of payouts that Norwegian bookkeeping law requires Mosel AS to keep (five years after the end of the financial year) are held in our accounting records and with our payout providers, Tremendous and Revolut, not in the app. We keep one anonymous record per deleted account (the date, country, how long the account existed, and counts of surveys, balance and cash-outs) with no email address, user ID or IP address, so we can understand why people leave.

6. Data security

Data is stored with Supabase (Postgres with row-level security — each user can only read their own records). Payout secrets and Aggregator API credentials are never exposed to the app and are held only in server-side infrastructure.

7. Children

Answrly is not intended for anyone under 18. We do not knowingly collect data from minors.

8. International transfers

Our core database is hosted by Supabase in the UK/EU (London region). Some of our partners and service providers (for example Tremendous, Resend, Expo and Vercel) are based in the United States; where personal data is transferred outside the EEA/UK, we rely on those partners' standard contractual clauses or equivalent safeguards.

9. Changes to this policy

We will notify users in-app of material changes to this policy.

10. Contact

kontakt@mosel.no