Privacy Notice

WHERE THE WORDS "WE", "US" OR "OUR" ARE USED IN THIS DOCUMENT, THEY ARE ALL REFERENCES TO NUDJ, INC.

How Do We Collect Information About You?

We collect information about you when you register with us or use our mobile applications, products, services or technologies. We may also receive information about you from third parties.

What Information Do We Collect?

The type of information we collect about you depends on how you use our products and services and what products and services you use. We may collect the following information about you:

Information to Identify You

Including your name, addresses, email addresses, phone numbers, or date of birth. We may also ask you for information when you report a problem with our products and services.

Information Sourced from Third Parties

Such as specialist companies that supply information, credit reference agencies, and fraud prevention agencies.

Information About Your Usage

Including details of your use of any of our mobile applications, websites, or viewing details for example (such as traffic data, web logs, or other communication information).

Internal Account Attributes

Including information on your ranking or scoring across our products and services (i.e. account balance, available credit, active challenges, rewards earned).

Your Preferences

Including how you use your account and how you'd like us to communicate with you (i.e. favorite challenges, content preferences, notification settings).

Information About Your Network, Hardware, and Website

Including information about the devices you use (like IP addresses, browser type and mobile device identifiers).

Payment and Card Information

Including your card number, expiry dates, card verification number, or bank account details.

Surveys and Feedback

Including feedback requests, survey completion data, testimonials, and product reviews you choose to provide.

Professional Details

Including your company name, job title, business address, or professional interests if you use our services for business purposes.

Limited Use Compliance Statement

Nudj's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

What Do We Use Your Information For?

We will use your information for a number of purposes including:

Performance of a Contract

Where you have entered into a contract or agreement with us, we will process your personal information in order to fulfill that contract (i.e. provide gamification services, process reward redemptions, manage your account).

Legitimate Interest

We may use your information where we have a legitimate business interest to do so, including:

• Improving our products and services and developing new ones
• Understanding how customers use our products and services to personalise content and offers
• Analysing engagement metrics, user behaviour patterns, and platform performance
• Detecting, investigating, and preventing fraud or abuse
• Maintaining the security and integrity of our systems and services
• Conducting market research, analytics, and data science initiatives

Legal Obligation

Where we are required to process your information to comply with a legal or regulatory obligation (i.e. identity verification, anti-money laundering checks, tax reporting).

Consent

Where you have consented to us processing your information for a particular purpose (i.e. marketing communications, location tracking, mobile push notifications). You can withdraw your consent at any time.

How Do We Protect Your Information?

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and role-based permissions
• SOC 2 Type II compliance and annual audits
• Employee security training and background checks
• Incident response procedures and breach notification plans

Who Do We Share Your Personal Data With and Why?

Third Party Service Providers

We work with third party service providers who provide website and application development, hosting, maintenance, backup, storage, payment processing, marketing, and other services for us. These third parties may have access to or process your information as part of providing those services. We limit the information provided to these providers to that which is reasonably necessary and require them to protect your information.

Sharing with Customers or Business Partners

If you use our services through a brand, agency, or enterprise customer, we may share your information with that customer for their business purposes (i.e. community analytics, engagement reports, user behavior insights). Their use of your information is subject to their own privacy policies.

Linking Your Accounts

If you choose to link your Nudj account with third party services (i.e. social media, CRM, marketing automation), we will share information necessary to enable that integration as you have authorized.

Payment Service Providers (PSP)

If you make purchases or redeem rewards, we share payment information with our payment service providers to process transactions securely. We do not store complete card details.

Unique Identifier Numbers

We assign unique identifiers to your account and devices for technical purposes (session management, analytics, fraud prevention). These identifiers do not directly reveal your identity.

Other Uses

We may also use or share your information:

• To comply with legal obligations, court orders, or government requests
• To enforce our terms of service or protect our rights and property
• In connection with a merger, acquisition, or sale of assets (with appropriate safeguards)
• With your explicit consent for purposes not covered in this notice

How Long Do We Store Your Information For?

We will keep your information for as long as you have an account with us or for as long as needed to provide you with our services. We may retain your information for a longer period if:

• We are required to do so by law or regulatory requirements (i.e. tax records, transaction logs)
• We need it for legitimate business purposes (i.e. fraud prevention, legal defense)
• It is necessary to enforce our agreements or resolve disputes

When we no longer need your information, we will securely delete or anonymize it. Anonymized data may be retained indefinitely for analytics and research purposes.

Additional Disclosures for Individuals in Europe

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain data protection rights under GDPR, UK GDPR, and the Swiss Federal Act on Data Protection:

• Right of Access: You can request a copy of your personal information
• Right to Rectification: You can ask us to correct inaccurate information
• Right to Erasure: You can request deletion of your information in certain circumstances
• Right to Restrict Processing: You can ask us to temporarily stop processing your information
• Right to Data Portability: You can request your information in a portable format
• Right to Object: You can object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: You can request human review of automated decisions

To exercise any of these rights, please contact us at privacy@wenudj.com. We will respond within one month of your request.

Complaints

If you have concerns about how we handle your personal information, please contact us first at privacy@wenudj.com. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO) at ico.org.uk
• EU: Your local supervisory authority (see EDPB member list)

Your Choices

Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies. See our Cookie Policy for more details about the cookies we use and how to manage them.

Location Information

You can disable location tracking through your device settings or mobile app preferences. Some features may not work properly if you disable location services.

Communications Preferences

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or updating your communication preferences in your account settings. We will still send you transactional emails about your account and services.

Mobile Push Notifications

You can disable push notifications through your device settings or mobile app preferences. This will not affect in-app notifications related to your account activity.

Updating Our Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated notice on this page with a new "Last Updated" date
• Sending you an email notification if the changes significantly affect your rights
• Displaying a prominent notice in our applications or website

We encourage you to review this Privacy Notice periodically. Your continued use of our services after changes take effect means you accept the updated notice.

Additional Information About Us

Company Name: NUDJ, INC.
Company Registration: 15506029
Registered Address: 6 Burgoyne Road, London, England, N4 1AD
Contact Email: privacy@wenudj.com