Privacy Policy

1. Data controller

The data controller for the processing described in this policy is RISUP, a simplified joint-stock company (SASU) with a share capital of €1,000, whose registered office is located at 26 rue Bosquet, 75007 Paris, France, registered with the Paris Trade and Companies Register under number 984 046 896 (“KashDay”, “we”), publisher of the KashDay service, within the meaning of Article 4 of Regulation (EU) 2016/679 (the “GDPR”).

Contact: hello@kashday.app

2. Data we collect

Depending on how you use the site or the app, we may collect:

• Waitlist (website) — the email address you provide to hear about the launch.
• Account data — first name, last name, date of birth, email address, mobile phone number, and optionally postal address.
• Profile & activity — answers to daily questions and questionnaires (interests, habits, life situation), only if you take part.
• Rewards data — Kash balance, conversion / withdrawal requests, and payment details needed to pay you (e.g. PayPal account, payout email, or gift-card related data).
• Technical & security data — device identifiers and characteristics, IP address, operating system, and in-app activity logs.
• Consent records — date, time, IP address, and the version of the text you accepted when consent is required.

We never knowingly collect data from persons under 18. Minors cannot register, and any account found to belong to a minor is closed.

3. Why we use your data, and on what legal basis

• Waitlist & launch updates — to email you about KashDay availability. Legal basis: consent (voluntary sign-up).
• Creating and managing your account, crediting Kash, and processing conversions / withdrawals. Legal basis: performance of our contract with you (Terms of Use).
• In-app advertising and performance measurement, where applicable. Legal basis: consent, collected through a dedicated tool.
• Marketing campaigns (email, SMS, postal mail) on behalf of advertisers, only if you consent channel by channel. Legal basis: consent.
• Connecting you with a specific offer when you expressly ask to be contacted about a named advertiser. Legal basis: specific consent.
• Preventing fraud, duplicate accounts, referral misuse, and securing the service. Legal basis: our legitimate interest in protecting users and the service.
• Legal obligations (e.g. responding to an authority, accounting retention related to payouts). Legal basis: legal obligation.

4. Recipients & processors

Your data is processed by KashDay and, where needed, by technical providers (hosting, email, analytics, payments, ad measurement) acting on our instructions.

Where you have consented, certain contact details may be shared with advertisers or their providers (e.g. a call center) for the relevant campaign or offer. The list or sector concerned is disclosed when consent is collected.

We do not sell your data.

5. Retention periods

• Waitlist — until launch plus a reasonable follow-up period, or until you ask to be deleted / unsubscribed.
• Active account — for as long as you use the service, then limited archiving as required by law.
• Consent & security records — for as long as needed to demonstrate GDPR compliance and prevent abuse.

6. Transfers outside the EU / EEA

If a provider is located outside the European Economic Area, we ensure appropriate safeguards (e.g. European Commission standard contractual clauses) in line with the GDPR.

7. Cookies & trackers

The website may use technical cookies required for it to work. Any analytics or advertising cookies will only be placed with your consent, where applicable.

8. Your rights

Under the GDPR, you have in particular the right to:

• access, rectification, and erasure;
• restriction of, and objection to, processing;
• data portability, where applicable;
• withdraw consent at any time, without retroactive effect;
• lodge a complaint with your supervisory authority (in France: the CNIL — cnil.fr).

To exercise your rights: hello@kashday.app

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration.

10. Changes

This policy may change. The update date appears at the top of the page. For material changes, we will notify you appropriately (website, email, or in-app notice).