Privacy Policy

When you register or use GKEarn, we collect:

• Account identifiers — name, email address, mobile number
• Profile data — referral code, preferences
• Usage data — tasks completed, campaigns engaged, spin results
• Device data — IP address, device fingerprint (for fraud prevention)
• Payment data — UPI VPA / bank details you submit for redemption (not stored in plain text)

• To operate and improve the platform
• To process reward redemptions and payouts
• To detect and prevent fraudulent activity
• To send transactional emails and OTPs (no marketing without consent)
• To comply with applicable law

We do not sell your personal data. We may share it with:

• Razorpay — to process payouts
• MSG91 — to deliver OTP SMS
• Google — if you use Google Sign-In
• Law enforcement, when required by law or court order

We retain your data for as long as your account is active. After account deletion, we retain anonymised transaction logs for 3 years for fraud and regulatory purposes, then permanently delete them.

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your data (subject to legal obligations)
• Withdraw consent at any time (which may affect service access)
• Nominate a person to exercise rights on your behalf in case of death or incapacity

To exercise these rights, email us at privacy@gkearn.online. We will respond within 30 days.

We do not use third-party advertising trackers. We use session tokens stored in sessionStorage (cleared when you close the tab) for authentication only.

We protect your data using BCrypt password hashing (cost 12), TLS 1.2/1.3 in transit, AES-256 at rest for sensitive fields, and distributed rate-limiting to prevent brute-force attacks. No security system is 100% infallible — if you discover a vulnerability, please report it to security@gkearn.online.

GKEarn is not directed at persons under 18. If we discover that a minor has registered, we will delete their account immediately.

We will notify registered users by email of material changes at least 15 days before they take effect. Continued use of the platform after that date constitutes acceptance.

GKEarn Operations
Email: privacy@gkearn.online