Privacy

Privacy Policy

What PixaEarn knows about you, why we have it, and what you can do about it. Written to be understood rather than to be defensible.

Last updated: 26 August 2026
In effect from: 26 August 2026

The short version

We do not sell your personal information.
We collect what the product needs: your account, what you publish, what you do here, your conversations, and the technical data any app generates.
PixaEarn now has earnings and withdrawals in it, so we do hold financial information — what you earned, what you bought, and the payout details you saved. Payout details are stored encrypted, and card details for purchases are handled by Google Play, never by us.
The app shows adverts through Google AdMob, which uses device advertising identifiers to serve and measure them.
You can edit your profile, change your privacy settings, and delete your account from Settings. For anything else, one address answers: support@pixaearn.com.

A summary, not a substitute — the sections below are the ones that apply.

1. Who this is about

This policy covers the PixaEarn app, this website, and everything that links to it. IONICWEB CREATOR Pvt. Ltd., the developer of PixaEarn, is the controller of the personal data described here — the party that decides why and how it is used.

For anything in this document, including a request about your own data, write to support@pixaearn.com. We aim to answer within thirty days, and sooner where the law requires it.

2. What we collect

What you give us

Account and sign-in: You sign in with Google. From that we receive your Google account identifier, your email address and whether Google has verified it, and the name and profile picture on that account. We never receive your Google password. We store the identifier and the email so we can recognise you next time; we do not use the identifier for anything else.
Profile: Your handle, display name, and anything else you choose to add — a photo, a craft line, a bio, a location, what you make, and optionally your gender. All of it is optional apart from a handle and a name, and all of it is public.
What you publish: Posts, photos, galleries, videos, moments, audio and podcast recordings, chapters and books, moods, comments and replies, and the Sparks you leave. Public unless you published it as Exclusive.
Uploaded media: The image, video, audio and document files you upload, including anything embedded in them by the device that made them. We generate our own previews and thumbnails from them.
Conversations: The messages you send and receive, including attachments, voice notes and the cards you share into a chat.
Interests and setup: The topics and intents you pick during first-run setup, and the ones you change later.
Settings: Who can follow or message you, whether gifts are on, autoplay, whether sensitive media is blurred, your muted words, and your notification choices.
Payout details: Where you want money sent: a UPI ID, a PayPal email, or a bank account number with its IFSC and the account holder's name, plus a label you choose. The full value is stored encrypted; the app and our support screens show only a short tail of it, such as the last four digits.
Support and reports: What you tell us when you report something, contact support, or send feedback — including which topic you picked and anything you write.

What we collect as you use PixaEarn

Activity: What you open, watch, read and listen to, how far you got, what you Spark, save, share or skip, who you follow and block, and what you report. This is what the Stream and Discover are built from, and what qualified activity is assessed against.
Games: Your PixaClimb and Orbit Dash sessions: runs, scores, progress, missions completed, and the rewards a run produced.
Rewards and earnings: Coins earned, bought and spent; gifts sent and received; Spark and reward records; Activity Earnings and Creator Earnings; and the withdrawal requests you make and what happened to them.
Purchases: For coin packs and creator subscriptions: the purchase token and order identifier Google gives us, which product it was, and when it was confirmed, refunded or cancelled. We do not receive or store your card, bank or UPI details for a Google Play purchase — Google processes the payment.
Advertising: Which advert placement was shown, on which surface, when, and the impression-level value AdMob reports back to us. We use it to measure the placement and to check that reported impressions are consistent with what actually happened on the account.
Device and connection: Device platform, app version, the push notification token for the device, an IP address, and the request data any server records. We derive an approximate country from the connection; we do not collect precise or GPS location.
Security and abuse signals: Sign-in and session records, the sessions you have open, rate-limit and refusal records, and patterns that indicate automation, duplicate accounts, or manipulation of the reward system.

What we get from others

Google — the sign-in details above, and confirmation of purchases and subscriptions made through Google Play, including renewals, cancellations, refunds and chargebacks.
Other people — if somebody reports you, mentions you, follows you, messages you or sends you a gift, that produces information about you.

The app asks for the device permissions its features need — camera, microphone, photos and files for creating and uploading, and notifications. You can refuse any of them and use the rest of PixaEarn; the feature that needed the permission is what stops working.

3. Why we use it

Every use below is tied to a lawful basis. Where you are in the EEA or the UK, these are the GDPR bases; where you are in India, they map to the equivalent grounds under the Digital Personal Data Protection Act.

To run your account: Creating and maintaining it, signing you in, keeping sessions valid, and applying your settings. Basis: performance of our contract with you.
To deliver content: Storing, transcoding and serving what you and other people publish, including the public web pages for shared links. Basis: contract.
To run the social features: Follows, Sparks, comments, sharing, gifts, notifications and the public profile. Basis: contract.
To carry your messages: Delivering conversations and their attachments, and applying who is allowed to message you. Basis: contract.
To run the games: Saving progress, scoring a run, keeping boards, and paying whatever a run is worth. Basis: contract.
To decide what you see: Using your interests and what you engage with to order the Stream and Discover. Basis: legitimate interest in a product worth opening.
To operate rewards and earnings: Assessing whether activity qualifies, calculating and settling Activity Earnings and Creator Earnings, and keeping the ledgers behind them accurate. Basis: contract, and legitimate interest in a system that cannot be farmed.
To handle purchases: Verifying a Google Play purchase, crediting coins or a subscription, and handling refunds and chargebacks. Basis: contract.
To pay withdrawals: Checking eligibility, reviewing a request, and sending the money to the destination you saved. Basis: contract, and legal obligation for the records that follow.
To show and measure advertising: Serving adverts through AdMob, counting impressions, and measuring what a placement produced. Basis: legitimate interest in funding a free product, and consent where local law requires it for advertising identifiers.
To prevent fraud and abuse: Detecting automation, duplicate accounts, falsified activity, advert fraud and manipulation; investigating reports; enforcing our rules. Basis: legitimate interest in a safe, honest service, and legal obligation.
To keep the Service secure: Sessions, rate limits, logs, and investigating incidents. Basis: legitimate interest and legal obligation.
To fix and improve things: Diagnostics from server logs and aggregate measures of which features get used. Basis: legitimate interest. We use aggregated or de-identified data wherever it will do the job.
To meet legal obligations: Tax and accounting records for purchases and payouts, responding to lawful requests, and our obligations around child safety and other illegal content. Basis: legal obligation.
To talk to you: Service messages you cannot opt out of — a security alert, a change to these documents — and notifications you can turn off. Basis: contract for the first, consent for the second.

Decisions with real consequences — closing an account, withholding or reversing earnings, declining a withdrawal — are made or confirmed by a person, and you can always write to us and have one look again.

4. Purchases, earnings and payouts

What you pay

Pixa Coins and creator subscriptions are bought through Google Play. Google processes the payment and holds the payment instrument. We receive a purchase token, an order identifier, which product it was, and its status. We never receive your card number, and we cannot charge you ourselves.

What you earn

We keep the records behind your balances: what qualified, what was granted, what it was worth, and what has been paid out. These are financial records and are kept for longer than ordinary account data — see §10.

What we need to pay you

A withdrawal needs a destination. The full UPI ID, PayPal email or bank account details you save are encrypted in our database, and only a short identifying tail is shown back to you or visible to our team in ordinary use. The full value is decrypted when a withdrawal is being paid.

Withdrawals are reviewed and sent by a person at PixaEarn rather than by an automated gateway, so a member of our team handling your request will see the destination details needed to send the money.

5. Advertising

The app shows adverts supplied by Google AdMob, including adverts in feeds and rewarded adverts you choose to watch in a game. This website carries no advertising.

AdMob is an advertising network run by Google. To serve and measure adverts it uses device-level identifiers, including the advertising identifier your device provides, along with information about the device and the request. That processing is Google's, under Google's own policies, and by default the adverts in PixaEarn are personalised.

Your device is where the advertising identifier lives, and Android lets you reset it or turn off ad personalisation entirely in system settings. That choice applies to PixaEarn like any other app.

6. Messages and conversations

Conversations on PixaEarn are private between the people in them. We do not read them to build advertising profiles, we do not sell their contents, and we do not use them to decide what to show you.

Messages are stored on Google Cloud Firestore, and who may write into a conversation is decided by our own servers — which is how blocking and your message settings are enforced rather than merely displayed.

A person at PixaEarn may look at a specific conversation where it is reported to us, where it is necessary to investigate a serious breach of our rules, or where the law requires it. Messages are not scanned automatically.

7. Cookies and device storage

This website uses the smallest set of storage it can. There are no third-party analytics or advertising cookies on it.

pixa-theme: Browser local storage. Remembers whether you chose light, dark or system, so the site does not flash the wrong theme when you come back. Strictly necessary for the preference to work; no personal data, never sent to us.
Session cookie: Set only when you sign in to a web feature. It holds the token that keeps you signed in, and it is httpOnly, so page scripts cannot read it. Strictly necessary.

The app uses the equivalent device storage for the same purposes: your session — kept in the device keystore — your preferences, and cached content so things load quickly.

9. Where your data is processed

PixaEarn is operated from India and uses infrastructure and providers that may process data in other countries, including ones whose privacy laws differ from the ones where you live.

Where we move personal data out of a region with transfer rules, we rely on an adequacy decision where one exists, and otherwise on Standard Contractual Clauses with our providers. You can ask us which applies to you.

10. How long we keep it

We keep personal data for as long as it is needed for the purpose it was collected for, and then delete or anonymise it.

Your account and content: For as long as your account is open. Deleting it from Settings starts a 30-day window — signing in cancels the request — after which the account is removed and your handle is released.
After deletion: Some records outlive the account, deliberately: the record that this sign-in identity had an account, so it cannot silently become a new one; moderation and safety records; and financial records. Content you shared into other people's conversations stays with them.
Messages: For as long as the conversation exists for the people in it.
Server and security logs: Up to 90 days.
Purchase, earning and payout records: Up to 8 years, because tax and accounting law requires it.
Safety records: Records of serious enforcement — fraud, threats, anything involving a minor — are kept for as long as needed to stop the same person coming back and to meet our legal obligations.
Backups: Deleted data cycles out of backups on their own schedule, within ninety days.

11. Security

Data is encrypted in transit. Payout details are encrypted in the database as well, and session tokens are stored only as a hash, so a leak of the database does not hand somebody a working session. Access to production data is restricted to the people who need it.

No service is perfectly secure. If a breach happens that puts your rights at risk, we will tell you and the relevant regulator within the time the law allows.

Found a vulnerability? Please report it to support@pixaearn.com before disclosing it publicly. We will not pursue anyone who reports a genuine issue in good faith and does not access other people's data.

12. Your controls

Most of what you might want to do is a switch in the app.

Edit your profile — your name, handle, photo, bio and the rest, at any time.
Audience — publish publicly or as Exclusive, per post.
Who can reach you — choose who may follow you and who may message you, and turn gifts off.
Interests — change what you told us you are interested in.
Muted words and blocking — stop a word appearing in your Stream, or stop a person reaching you at all. Blocking takes effect immediately.
Notifications — turn any category down or off.
Deactivate — hide your account without deleting it. Signing in brings it back.
Delete — schedule your account for deletion from Settings.

There is no self-serve data export in the app yet. If you want a copy of your data, write to support@pixaearn.com from the address on your account and we will put one together.

13. Your rights

Depending on where you live, you have some or all of the following rights. We honour them for everyone, wherever you are, because operating one standard is simpler and fairer than operating five.

Access — ask what personal data we hold about you and get a copy.
Correction — have inaccurate data fixed.
Deletion — have your data erased, subject to the retention exceptions in §10.
Portability — receive your data in a machine-readable format where that is technically feasible.
Objection — object to processing based on legitimate interests, including personalisation.
Restriction — ask us to pause processing while a dispute about accuracy or legitimacy is resolved.
Withdraw consent — where we rely on consent, take it back at any time, without affecting what was done before.
No retaliation — we will never degrade the Service because you exercised a right.

How to use them

Use the controls in Settings where they exist, or write to support@pixaearn.com. We will verify it is really you before acting on a request, which usually means proving control of the account. An authorised agent may act for you with written proof.

If we get it wrong

You can complain to your data protection authority — the Data Protection Board in India, the supervisory authority in your EEA country, or the Information Commissioner's Office in the UK. We would rather you came to us first, but it is your right either way.

14. Public content, and what that means

Anything you publish publicly is public. It can be seen by people who are not signed in, it can appear on a public web page when somebody shares it, and search engines can index those pages.

Deleting content removes it from PixaEarn and takes its public page down, but copies other people already made, and search engine caches, are outside our control.

So the rule is the old one, and it is the only privacy advice that never stops being true: decide before you publish, not after.

15. Children and young people

PixaEarn is not for children under 13, and we do not knowingly collect their data. Where local law sets a higher age for consenting to online services, we apply that age and require verifiable parental consent below it. Real-money features — earnings, payout methods and withdrawals — require you to be at least 18.

If you believe a child under 13 has an account, write to safety@pixaearn.com and we will remove the account and the data behind it.

Our standards on child safety, and how to report anything that puts a minor at risk, are on the Child Safety & Community Standards page.

16. Changes to this policy

We update this policy when the product changes or the law does. The date at the top always reflects the current version.

If a change materially affects how we use data you have already given us, we will tell you in the app or by email before it takes effect, and where the law requires consent we will ask for it rather than assume it.

17. Contact

Controller: IONICWEB CREATOR Pvt. Ltd.
Privacy requests and everything else: support@pixaearn.com
Child safety: safety@pixaearn.com
Website: www.pixaearn.com