Privacy Policy

Effective Date: August 3rd, 2026

1. Introduction

Apptopia, Inc. (“Apptopia,” “we,” “us,” or “our“) operates Glynt, a consumer rewards platform that allows users to earn points by completing surveys, playing games, and engaging in other in-app activities, which can be redeemed for gift cards or other rewards. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with the Glynt mobile application (available on Google Play) and website available at glynt.app (collectively, “Glynt“), and describes choices available to you with respect to our processing. When used in this Privacy Policy, “personal information” or “information” means data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Your use of Glynt is subject to our Terms of Use.

This Privacy Policy does not apply to:

  • The practices of third parties we do not control.
  • Information collected in the context of job applications or employment with us.
  • Information that has been anonymized or, to the extent permitted by law, deidentified.
  • Information subject to the Apptopia Privacy Policy.

Additional disclosures and rights may apply if you reside in certain regions:

For our contact details, see the Contact Us section below.

2. Collection

We collect the following categories of personal information about consumers:

  • Contact identifiers, including name, email address, postal address, and phone number.
  • Characteristics and demographic information, including information about your opinions, preferences, interests, and other characteristics or demographic attributes you choose to share through Glynt.
  • Commercial information, including information related to your participation in Glynt’s rewards program, including points earned, rewards redeemed, and payment or redemption details (e.g., PayPal account information or gift card preferences).
  • Device identifiers, including mobile advertising identifiers (“MAIDs“), IP addresses, and pseudonymous identifiers. MAIDs are user-resettable identifiers generated by mobile device operating systems, such as Apple’s IDFA or Android’s AAID. IP addresses are numerical labels assigned to devices connected to the internet. Pseudonymous identifiers are device- or user-level identifiers generated by us or third parties.
  • Internet or other network activity information, including app name, usage frequency dates and times of access, session start and end timestamps, pages or screens visited, and similar engagement information.
  • Non-precise geolocation data, country- or region-level location information derived from your use of Glynt.
  • Inferences drawn from any of the above categories of personal information.

3. Sources

We collect personal information from the following sources:

  • Directly from you when you:
    • visit Glynt or our website and engage with us;
    • register for and complete surveys or redeem rewards through Glynt; or
    • interact with us by phone, email, or in person at events and conferences.
  • Automatically from your device when you use our websites or Glynt, or when you interact with our emails. This information is collected through tracking technologies deployed by us and third parties. See Tracking Technologies.
  • From third parties, including:
    • Commercial data partners and licensors that provide data to us pursuant to written agreements;
    • Vendors that provide us with analytics, security, fraud prevention, or similar services; and
    • Publicly available sources, including app store pages and other public sources.
  • Where we generate or derive based on the personal information collected from the sources described above.

4. Tracking Technologies

This section describes the types of tracking technologies incorporated into our websites, emails and Glynt that automatically collect personal information when you interact with those online services.

  • Cookies. Cookies are browser‑based text files that are placed on your browser when you visit a website, open or click on an email, or interact with an online advertisement. Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain until they expire or are deleted). Cookies may also be first‑party cookies (served directly by us) or third‑party cookies (served by third parties we work with).
  • Pixels. Pixels (also known as web beacons) are code embedded in a website, email, or app. Pixels may include image pixels (such as one‑pixel transparent images) or JavaScript pixels. Pixels are often used in conjunction with cookies. When you access a service containing a pixel, the pixel may allow us or third parties to collect information from your browser or device, including by placing or reading cookies.
  • App technologies. App technologies are technologies embedded directly in mobile or other applications, such as software development kits (SDKs). These technologies may allow us or third parties to collect information from your device.

To learn about the choices available to you regarding our use of tracking technologies, see Your Privacy Choices.

5. Purposes for Collection and Use

We collect and use personal information for the following purposes:

  • Operation of Glynt. We collect and use information to operate, maintain, and support Glynt, including troubleshooting, performance monitoring, and quality assurance.
  • Communications. We collect and use information to communicate with you, including responding to inquiries, providing service‑related notices, and sending transactional or business‑related communications.
  • Business marketing and sales. We collect and use information to market Glynt to current and prospective business customers, including through marketing and sales outreach.
  • Glynt rewards program. We collect and use information to operate and provide Glynt, which allows consumers to voluntarily participate in surveys, research, games, and other activities in exchange for points, rewards, or other benefits. In connection with Glynt, we collect and use certain device identifiers, internet or other network activity, and non-precise geolocation data to administer the app, track participation, award and fulfill rewards, and support the development and improvement of our analytics and estimation models as described above. Participation in the Glynt rewards program is voluntary. In certain jurisdictions, the rewards or benefits offered through Glynt may be considered a financial incentive. Additional details regarding financial incentives are provided in the region‑specific disclosures below.
  • Personalizing your experience. We collect and use information to personalize your experience and show you content we believe you will find interesting.
  • Model development and analytics. We collect and use information to improve our services and better understand how mobile applications perform. We analyze usage patterns and engagement signals across applications, regions, and time periods to create broad, high-level insights. Apptopia does not sell or disclose personal information to third parties in identifiable form, and our commercial products consist only of aggregated, modeled, and statistical outputs that cannot reasonably be used to identify individual consumers.
  • For advertising purposes. We work with various third parties, such as ad networks, publishers, social media platforms, and technology providers, to deliver and measure ads. For example, we place ads on third party websites or platforms that use tracking technologies to serve the ads, measure ad performance, detect ad fraud, limit how often ads are shown, and provide reporting and analytics. If you visit Glynt after viewing or interacting with one of our ads on a third party website or platform, tracking technologies integrated within Glynt will help us attribute your visit and understand ad effectiveness.

Some advertising we engage in may be “targeted advertising,” which is the practice of showing you more relevant or personalized ads based on your activity over time and across non-affiliated services. Targeted advertising often involves us incorporating third party tracking technologies into Glynt or disclosing (often hashed) identifiers, such as email addresses or Ad IDs, with third parties. These third parties then match our data with their own (or their partners’ data) to deliver ads to you or similar audiences. For example, we incorporate the Meta pixel on our website to serve ads to Meta audiences based on the data we provide.

  • We also use audience modeling services, where we and a partner each disclose (often hashed) identifiers to a technology provider. The technology provider then matches common factors between our and the partner’s data to help us understand audience overlap and improve campaign performance.
  • Analytics. We collect and use information to understand trends, usage, and activities, for example through surveys you respond to and tracking technologies that we incorporate into Glynt (such as Google Analytics).
  • Security, compliance, and enforcement. We collect and use information to protect the security and integrity of our systems and data, prevent or investigate fraud or misuse, enforce our terms and policies, and comply with applicable legal and contractual obligations.
  • At your direction or with appropriate authorization. We collect and use information where you instruct us to do so or where we provide notice and obtain consent as required by applicable law.

To learn about the choices available to you regarding our collection and use of your information, see Your Privacy Choices.

6. Disclosure

We disclose the information we collect for the purposes described in this Privacy Policy and to the categories of recipients described below:

  • Service providers and similar vendors. We disclose information to service providers and similar vendors that process information on our behalf to support our business and Glynt, such as website hosting, cloud infrastructure, payment processing, data analytics, security and fraud prevention, customer support, and technical operations. Where required by law, we contractually restrict service providers from using personal information for purposes other than performing services for us, although we may permit service providers to use non‑personal information for any purpose permitted by applicable law. In some cases, vendors that provide services such as security, fraud prevention, or compliance may process information for their own purposes and in accordance with their own privacy policies, including as independent controllers, to the extent permitted by applicable law.
  • Rewards fulfillment and incentive providers. In connection with Glynt rewards program, we disclose information to vendors and partners that assist with administering the program and fulfilling rewards, such as payment processors, gift card providers, and other rewards or incentive partners. These disclosures are made to enable users to receive rewards or benefits they have earned through voluntary participation. Such vendors may process information for rewards fulfillment and related administrative purposes, in accordance with their own terms and privacy policies, as permitted by applicable law.
  • Third party vendors and related parties. Some of the third parties we work with independently control the purposes and means of processing your information. For example, we disclose information to vendors that provide analytics, security, and fraud prevention services to us. We also disclose information to ad networks, technology providers, and other third parties that help provide targeted advertising.
  • Affiliates. We may disclose information to our affiliates and related entities for purposes consistent with this Privacy Policy, including where they act as service providers or support our internal business operations.
  • Public disclosures. We disclose information you choose to make public through Glynt, such as information you voluntarily post in public‑facing areas. Please consider carefully before making information public, as information you share publicly may be accessible by others and may not be removable, subject to applicable law.
  • Corporate transactions. We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of some or all of our business or assets, including as part of due diligence or negotiations.
  • Security, compliance, and enforcement disclosure. We disclose information to comply with applicable law, lawful requests, or legal process; to respond to requests from public or governmental authorities; and to protect the rights, property, safety, and security of Apptopia, Glynt, users, partners, or others.
  • Recipients at your direction or with your consent. We disclose information where you direct us to do so or where we provide notice and obtain consent.
  • Non-personal information. We may anonymize or deidentify information so it is no longer considered personal information under applicable law. Where we deidentify information, we commit to maintaining and using the deidentified information in deidentified form and not attempt to reidentify it. We may use non-personal information for any purpose permitted by law.

To learn about the choices available to you regarding our disclosure of your information, see Your Privacy Choices.

7. Third Parties

Glynt may incorporate online services controlled by third parties. For example, we may integrate technologies into Glynt, including those described in Tracking Technologies, that are controlled by third parties. Except where third parties act as our service providers processing information on our behalf, such third parties independently determine the purposes and means of processing your information and process information in accordance with their own privacy policies and terms. We encourage you to review the privacy policies of any third‑party websites, services, or applications you interact with.

8. Your Privacy Choices

This section describes the choices available to you regarding your information.

  • Region-Specific Choice. Additional disclosures and rights may apply if you reside in certain regions. For details, please see:
  • U.S. State-Specific Disclosures
  • EEA Disclosures
  • Account Controls. If you have an account with us, you may be able to access, correct, or remove certain account‑level information through your account settings. These controls apply only to information associated with your account and do not apply to other information we may process outside of that relationship.
  • Emails. You may opt out of receiving marketing emails from us by changing your communication preferences in your account settings (if you have an account), following the unsubscribe instructions included in our marketing emails, or emailing us at the address listed in the Contact Us section with “UNSUBSCRIBE” in the subject line. Please note that you cannot opt out of transactional or service‑related communications.
  • Push notifications. To stop receiving push notifications, adjust your device settings or uninstall Glynt.
  • Cookies and pixels. You may be able to manage cookies through your browser settings. When you manage cookies, pixels or similar technologies associated with those cookies may also be affected. If you use multiple browsers or devices, you will need to configure your settings separately for each. If you delete or reset your cookies, you may need to reconfigure your preferences. Your ability to limit cookies is subject to your browser’s settings and limitations.
  • App technologies. Unlike cookies, certain app‑based technologies cannot be controlled through browser settings. You may be able to limit certain data collection or reset or limit use of your device’s advertising identifier through your device settings. The availability and effectiveness of these controls depend on your device and operating system. See your device documentation for details.
  • Third party opt-out tools. Some third parties we work with offer their own opt-out tools related to information collected through cookies and pixels. To opt out of your information being used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout. We are not responsible for the effectiveness of their tools.
  • Industry opt-out tools for targeted advertising. Some third parties we work with follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising, which offers its own opt-outs tools for targeted advertising. For details, visit https://youradchoices.com/control. We are not responsible for the effectiveness of these tools.

9. Children

Glynt is not directed to children under 16 years old, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from children in violation of applicable law, contact us as set out in the Contact Us section below.

10. Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect personal information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please note that transmission via the internet is not completely secure and we cannot guarantee the security of personal information about you.

11. Retention

We retain personal information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

12. International Transfer

We are based in the U.S. Your information may be transferred to and processed in the U.S. or another country where we operate. Where required by applicable law, we will provide appropriate safeguards for data transfers.

13. Changes to this Privacy Policy

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of Glynt indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on Glynt.

14. Contact Us

The controller under this Privacy Policy is:

Apptopia, Inc.

Attn: Glynt Privacy

132 Lincoln St, 3rd Floor, Boston, MA 02111

privacy@apptopia.com

If you have questions about this Privacy Policy or experience difficulty accessing this Privacy Policy, you may contact us using the postal or email address above.

Requests to exercise privacy rights must be submitted using the designated methods described in the applicable sections of this Privacy Policy. The contact details in this section should not be used to submit rights requests except where a specific section of this Privacy Policy expressly permits submission by email or postal mail, or where required under applicable law.

15. U.S. State-Specific Disclosures

This section applies to residents of California or any other U.S. state that has enacted a comprehensive state privacy law (each, a “Covered State“). For purposes of this Privacy Policy, Covered States include Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. This section does not apply to residents of other states except as expressly provided herein.

Notice at Collection

Our data practices are as follows:

  • Collection. In the past 12 months, we have collected the categories of personal information set out in the Collection section above.
  • Sources. The categories of sources from which we collect personal information are set out in the Sources section above.
  • Purpose. The specific purposes (including business and commercial purposes) for collecting and using personal information are set out in the Purposes for Collection and Use section above.
  • Disclosure. The categories of persons to whom personal information is disclosed, including service providers for business purposes, are set out in the Disclosure section above. We disclose the categories of personal information listed in the Collection section above to service providers for business purposes.
  • Sales, Shares, and Targeted Advertising. Some of our disclosures of personal information to third parties may be considered a sale or share for cross-context behavioral advertising purposes under applicable law. We also may process your personal information for purposes of targeted advertising as defined by applicable law. We do not sell or share the personal information of consumers we know are under 16 years old.
  • Profiling. We do not process personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.
  • Sensitive Data. To the extent any personal information we collect is considered sensitive personal information under California law, we collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers.
  • Retention. The criteria used to determine the period of time we retain your personal information is set out in the Retention section above.

Rights

This section sets out your rights. See Exercising Rights below for details on how to exercise your rights.

  • Verifiable Requests.

For California residents, you have the right to:

  • Know what personal information we have collected about you, specifically have the right to know the categories of sources from which personal information was collected, the business or commercial purposes for collecting, selling, or sharing personal information, the categories of personal information that we sold, shared, or disclosed for a business purpose, the categories of third parties to whom we disclosed personal information, and the specific pieces of personal information we have collected about you;
  • Correct inaccurate personal information we maintain about you; and
  • Delete personal information that we have collected from you.

For Covered State residents, you have the right to:

  • Confirm whether or not we are processing your personal information, and in some regions, confirm the categories of personal information we have processed;
  • Access your personal information;
  • Correct inaccuracies in your personal information;
  • Delete your personal information;
  • Obtain a copy of your personal information that you previously provided to us in a portable and readily usable format

If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data.

If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed personal data.

If you are a Connecticut or Rhode Island resident, you also have the right to obtain a list of the specific third parties to which we have sold personal information.

  • Opt-Out of Sales, Shares, and Targeted Advertising. You have the right to opt-out of us selling or sharing for cross-contextual advertising purposes your personal information to third parties, or processing your personal information for targeted advertising purposes.
  • Revocation of Consent. You have the right to revoke consent previously given to us that we rely on to process your personal information. If you withdraw consent, you may not be able to receive certain services dependent on that consent.
  • Nondiscrimination. You have the right not to be discriminated against for exercising any of your rights.
  • Appeals. You have the right to appeal our decision in response to your requests.
  • Authorized Agents. You may exercise your rights through an authorized agent.

Exercising Rights

This section sets out how to exercise your rights. Note that rights relating to personal information we process on behalf of a business client as a processor or controller must be exercised through that client.

  • Verifiable Requests. Verifiable requests require us to verify your identity before fulfilling them. To exercise any of these rights, submit a request through our form here (specifying the rights you wish to exercise) or call our toll-free number at (855) 277-8674. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.
  • Sales, Shares, and Targeted Advertising. You may opt out of our sale, sharing, and use of your personal information for targeted advertising using the options described here. How your request is applied depends on how we process your information.

You may submit a request through “Your Privacy Choices” in the footer of our website or use a recognized browser-based opt-out preference signal, such as Global Privacy Control. We will treat such a signal as a request to opt out for that browser. Because information collected through website tracking technologies is not typically linked to information maintained in our other systems, this opt-out generally applies only to information collected through that browser. Also, if you use a different browser or device, or reset cookies, you will need to re-enable your preferences.

You may also submit a request through our webform here or use the opt-out setting in our app’s settings menu. When you submit a request in this way, we will apply your opt-out to the information associated with the account or identifiers you provide. Because we do not typically link this information with information collected through website tracking technologies, this request generally will not apply to information collected through your browser or device.

If you would like to opt out of both website-based targeted advertising and the processing of information maintained in our other systems, you should submit an opt-out request through both methods.

  • Consent. To revoke consent, write us at the email or postal address set out in the Contact Us section above (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.
  • Authorized Agents. Authorized agents must submit requests through the specific methods designated herein. Except where prohibited by law, we will require written and signed proof of the agent’s permission.
  • Appeals. To appeal, write us at the email or postal address set out in Contact Us and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows: Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.
  • Limitations. Your rights are subject to exceptions and our data retention practices. To the extent permitted by law, rights requests must be exercised through the applicable designated method specified herein.

Additional California Disclosures

  • Financial Incentives. Glynt allows consumers to earn points and redeem rewards in exchange for using the app and providing personal information (as described above). Under California law, our Glynt rewards program may be considered a financial incentive. We value each consumer’s personal information associated with the loyalty program at \$0.01-5.00. This estimate is based on the cost of providing the reward and a reasonable estimate of the value derived from consumer data used to improve our services and research offerings. The terms of the reward program are available are set out in our Rewards Program Terms. You have the right to withdraw your participation in the rewards program at any time by deleting your account and uninstalling the app. Note that if you withdraw, you will not be eligible to earn points and redeem rewards.
  • Shine the Light. If you are a California resident and have an established business relationship with us, you have the right to request a list of the categories of personal information (as defined by Shine the Light) disclosed by us to third parties for their own direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of such third parties. To exercise this right, write us at the email or postal address set out in the Contact Us section above and specify that you are making a “California Shine the Light Request.” We will respond to requests received in accordance with Shine the Light.
  • Do Not Track. We do not respond to Do Not Track signals.

Additional Connecticut Disclosures

Large Language Models. We do not collect or use personal data to train large language models. However, when we sell personal data to third parties, they may use the data to train their own large language models. See their privacy policies for details.

Disclosures for Nevada

For Nevada residents, you have the right to opt-out of sales of your personal information to third parties. To exercise your right, follow the opt-out process in Exercising Rights above.

16. EEA, Switzerland, and the UK

Data Practices

For individuals located in the European Economic Area, Switzerland, or the United Kingdom, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

Lawful Basis for Processing

Data protection laws in your region require a “lawful basis” for processing personal data. Our lawful bases include where: (a) you have given consent to the processing for one or more specific purposes, either to us or, where applicable, our business clients acting as controllers; (b) processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into such contract; (c) processing is necessary for compliance with a legal obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, except where those interests are overridden by your interests or fundamental rights and freedoms. Where we process personal data on behalf of a business client as a processor, the lawful basis is determined by the client as controller. Where applicable, we will transfer your personal data to third countries subject to appropriate safeguards, such as standard contractual clauses.

Requests

You have the right to access, rectify, or erase any personal data we process as a controller. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.

To exercise any of these rights, submit a request through our form here or write us at the email or postal address set out in the Contact Us section above (specifying the rights you wish to exercise).

Where we process personal data on behalf of a business client acting as controller, requests to exercise these rights must be submitted directly to that client.

Complaints

You also have the right to lodge a complaint with the data protection regulator in your jurisdiction.