Privacy Policy - Crest Reels

Crest Reels Privacy Policy

Last updated: September 11th, 2026

Crest Reels is a short-form video experience. This policy explains what personal data we process when you scroll reels, engage with content, see ads, or use optional rewards — and which choices you retain under the GDPR, CCPA/CPRA, and VCDPA. Use the tabs below to jump between topics.

What Do These Terms Mean?

Application
Crest Reels, the mobile short-form video app covered by this policy.
Personal Data
Information that identifies you or could reasonably be linked to you.
Usage Data
Signals generated as you watch — reels opened, watch time, scrolls, session length.
Device
Any phone, tablet, or hardware used to run Crest Reels.
Service Provider
A third party that processes data on our behalf.
Account
The profile or session used to access preferences, progress, and optional payouts.

What Data Do We Gather?

Collected automatically

  • Device Info — model, OS, WebView, screen size
  • Identifiers — GAID, ANDROID_ID, IDFA, or equivalents
  • Network — IP address, connection type
  • Usage Data — reels viewed, watch duration, timestamps
  • Diagnostics — crash logs, performance metrics

Collected with permission

  • Advertising identifiers for personalization
  • Engagement and in-app event signals
  • PayPal email and name (payouts only)
  • Details you include in support messages

Why Do We Need Your Data?

  • Feed delivery — serving reels, syncing watch progress, restoring preferences
  • Account operations — authenticating sessions and remembering settings
  • Payouts — processing PayPal withdrawals, fraud screening, compliance checks
  • Improvement — diagnosing crashes, refining the feed, testing features
  • Advertising — serving ads, capping frequency, attributing installs, measuring campaigns
  • Support — answering enquiries and sending operational notices
  • Corporate events — evaluating or completing a merger, acquisition, or asset transfer

When Is Data Shared?

RecipientReason
Service ProvidersHosting, analytics, ad delivery, payments, support
Business TransfersMerger, acquisition, reorganization, or asset sale
AffiliatesEntities under common control, bound by this policy
Business PartnersJoint promotions or content partnerships
Legal ObligationsLaw, regulation, subpoena, court order, or government request
Your ConsentAny further purpose you specifically approve
PayPal data protection. We do not sell or rent user PayPal account email addresses. Disclosure occurs only with your explicit consent or where applicable law requires it, and the data is used solely to complete reward payouts.

What Can You Do About Your Data?

GDPR — EEA / UK

  • Access — confirmation of processing and a copy of your data
  • Rectification — correction of inaccurate or incomplete records
  • Erasure — deletion where no overriding basis for retention exists
  • Restriction — limits on processing in defined situations
  • Objection — oppose processing based on legitimate interests, including marketing

CCPA / CPRA — California

  • Know — categories, specific pieces, sources, and purposes of collection
  • Delete — removal subject to statutory exceptions
  • Opt-Out — direct us not to sell or share personal information
  • Non-Discrimination — equal service and pricing after exercising a right

VCDPA — Virginia

  • Access — confirm and review processing
  • Correct — fix inaccuracies
  • Delete — remove data provided or obtained
  • Portability — receive a portable, readily usable copy
  • Opt-Out — decline targeted advertising, sale, or qualifying profiling

Email truonglimavehoa@gmail.com and name the right you want to exercise. Identity verification may be required.

How Do You Opt Out?

PlatformSteps
AndroidSettings → Google → Ads → enable “Opt out of Ads Personalization”
iOSSettings → Privacy → Advertising → enable “Limit Ad Tracking”
Sale / sharingEmail truonglimavehoa@gmail.com with subject Do Not Sell My Personal Data

Opting out ends interest-based targeting; non-personalized ads may still appear.

How Long Is Data Kept?

After 90 consecutive days of inactivity, Personal Data tied to your Account is permanently deleted from our production systems. Anything retained beyond that exists only as anonymized or aggregated Usage Data. Longer retention applies only where law, tax, accounting, or dispute resolution requires it.

Which Servers Handle Analytics?

Feed delivery, progress sync, configuration, and analytics traffic route through https://ebyz.crestreels.com. Analytics payloads are anonymized before storage and are not structured to carry directly identifying information.

  • TLS 1.2 or higher on every transmission
  • Role-based, need-to-know access controls
  • Data minimization across processing activities
  • Periodic security reviews and vulnerability assessments
  • Data Processing Agreements with third-party processors

What Permissions Does the App Use?

PermissionPurposeData
INTERNETStream reels, load ads, fetch updatesNetwork status, transfer stats
ACCESS_NETWORK_STATEAdapt playback to connectivityNetwork type and status
ACCESS_WIFI_STATEStabilize Wi-Fi sessionsWi-Fi status, signal strength
AD_IDAd personalizationResettable device ad ID
VIBRATEHaptic feedbackNone
ACCESS_ADSERVICES_TOPICSAd interest topicsAdvertising topic data
ACCESS_ADSERVICES_ATTRIBUTIONCampaign attributionAttribution data
ACCESS_ADSERVICES_AD_IDModern ad API complianceAd service identifiers
BIND_GET_INSTALL_REFERRER_SERVICEIdentify install sourceInstall source, campaign params
BIND_APPHUB_SERVICEOptimize ad deliveryAd parameters, impressions
FOREGROUND_SERVICEBackground-critical playback functionsNone
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONSecure internal broadcastsNone

How Is Data Protected?

We maintain commercially reasonable safeguards: TLS 1.2+ in transit, encryption of sensitive stored fields, need-to-know access controls, periodic audits, and contractual security commitments from Service Providers. Absolute security cannot be guaranteed.

Cookies & Tracking Technologies

Certain screens — promotional pages, help articles, and reward flows — may render inside WebViews that set cookies, local storage, or similar identifiers to remember session state and measure campaigns. These do not carry account credentials. You may clear them via device or browser settings, though doing so may reset WebView preferences.

Who Are Our Ad Partners?

Advertising is delivered through AppLovin and its mediated partner network. Only limited categories of data reach partners.

May be shared

  • Resettable advertising identifiers
  • Device model, OS, screen size
  • Session frequency and duration
  • Ad impressions and clicks
  • Non-precise demographics

Never shared

  • Email addresses or phone numbers
  • Account credentials
  • Watch history or reward balances
  • Support message content
  • Precise geolocation

Partner privacy policies

AppLovin Chartboost Google InMobi IronSource Kwai Fyber Mintegral Moloco Bytedance (Pangle) Vungle Unity Ads Yandex BidMachine Verve Bigo TaurusX

Where Does Data Travel?

Personal Data may be transferred to and processed on servers outside your country. Transfers are protected by TLS 1.2+ and, where required, by safeguards such as Standard Contractual Clauses. Continued use of Crest Reels constitutes agreement to these transfers.

Is the App for Children?

Crest Reels is not directed to children under thirteen (13), and we do not knowingly collect Personal Data from them. Parents or guardians who believe a child has provided data should contact truonglimavehoa@gmail.com; we will delete it promptly after verification.

When Else Might We Disclose?

  • Business transactions — data may transfer in a merger, acquisition, or asset sale, with notice where practicable
  • Law enforcement — disclosure may follow law or valid public-authority requests
  • Rights and safety — disclosure may occur in good faith to protect rights, property, or personal safety

What About External Links?

Crest Reels may link to services we do not operate. We are not responsible for their content, privacy practices, or security. Review the privacy policy of any external site you open.

California Shine the Light

California Civil Code Section 1798.83 permits California residents to request, once per calendar year, details of personal information shared with third parties for those parties' direct marketing purposes. We do not share personal information for third-party direct marketing. To confirm, write to truonglimavehoa@gmail.com with the subject Shine the Light Request.

Will This Policy Change?

This policy may be updated as features or laws change. Revisions take effect once published here with a refreshed date. Material changes may also be announced in-app. Review this page periodically.

How to Reach Us

Email: truonglimavehoa@gmail.com

In-App: Settings → Help & Support

Privacy enquiries are answered within 48 hours.

© 2026 Crest Reels · Privacy Policy · September 11th, 2026