Rich Market
Privacy Policy
How we collect, use, and protect your personal information
Effective Date — May 9th, 2026
Privacy is not a formality at Rich Market — it is the bedrock of the trust you place in us every time you open the app. This document explains, in plain and honest language, exactly what personal information we gather, why we need it, who can see it, and what choices you have. We believe you deserve full transparency, so read on and hold us to it.
What Do These Terms Mean?
To make this policy clear and unambiguous, the following definitions apply throughout:
- Application
- Rich Market — the mobile software program made available by the Company
- Company
- The entity that operates Rich Market, referred to below as "we," "us," or "our"
- Personal Data
- Any information that directly identifies, or could reasonably be used to identify, a natural person
- Usage Data
- Data generated and collected automatically whenever you interact with the Application
- Device
- Any smartphone, tablet, or computing device used to access Rich Market
- Service Provider
- A third-party company or individual engaged by us to process data on our behalf and support the operation of the Application
- PayPal Account
- The digital payment account you may link to Rich Market for withdrawal processing
- Account
- A unique profile created for you to access Rich Market's features and track your activity
What Data Do We Gather?
Data Collected Automatically
When you open Rich Market, certain technical details are recorded in the background to keep the service running and help us troubleshoot issues. This includes:
- Network identifiers — your IP address and connection type (Wi-Fi, cellular)
- Device specifications — device model, operating system version, and screen resolution
- Advertising identifiers — GAID (Google Advertising ID) and ANDROID_ID, both resettable via device settings
- Session metrics — screens visited, time spent per session, frequency of use
- Diagnostic data — crash reports, error logs, and performance readings
- Carrier information — mobile network operator and country code
Data You Provide Voluntarily
We collect the following only when you actively share it or grant us permission:
- PayPal email address and registered name — used exclusively to process withdrawal requests; never stored after the transaction is complete
- Advertising preferences — IDFA (iOS) or GAID (Android) for personalized ad delivery, with your prior consent
- In-app activity — engagement signals and interaction patterns within Rich Market
"We subscribe to the principle of data minimalism — if we do not need it to run the service, we do not ask for it."
Why Do We Need Your Data?
Every piece of data collected serves at least one specific, documented purpose:
- Service operation — running, maintaining, and monitoring Rich Market to ensure reliable performance
- Account management — maintaining your user profile, preferences, and session continuity
- Payment processing — securely routing withdrawal requests to your linked PayPal account
- Communications — sending important service updates, responding to support inquiries, and delivering notifications you have opted into
- Analytics and improvement — understanding how users interact with the app to fix bugs and develop new features
- Advertising delivery — serving relevant ads through our third-party ad partners based on anonymized signals
- Legal compliance — meeting our obligations under applicable laws and regulations
- Business continuity — facilitating orderly transitions in the event of a merger, acquisition, or restructuring
When Is Your Information Shared?
We do not sell, rent, or trade your personal data. Disclosure occurs only in the limited circumstances below:
- Service providers — vendors who support our operations (hosting, analytics, payments) under strict data processing agreements
- Business transfers — if Rich Market undergoes a merger, acquisition, or asset sale, your data may transfer as part of that transaction; you will be notified before your data becomes subject to a different policy
- Affiliates — companies within our corporate group, all bound by this same privacy policy
- Business partners — for joint offerings and co-branded promotions, with your prior awareness
- Legal and regulatory authorities — when required by law, court order, subpoena, or governmental request
- Safety disclosures — to protect the safety of users or the public, or to defend against legal claims
- With your consent — for any other purpose you explicitly authorize
"Your PayPal email address is never sold or rented to third parties under any circumstance."
Where Does Your Data Go? — Our Servers & Analytics
Application Server
Rich Market communicates with its backend infrastructure at:
https://zohmz.richmrt.com/
This endpoint handles core application delivery, account state synchronization, withdrawal processing, and in-app support requests.
Endpoint Security Standards
- All data in transit is encrypted with TLS 1.2 or higher
- Role-based access controls ensure only authorized personnel can access user data
- Data minimization principles are enforced at the infrastructure layer
- Regular penetration testing and security audits are conducted
- Data Processing Agreements (DPAs) are in place with all third-party processors
Our Advertising Partners
Rich Market delivers advertisements through AppLovin and its mediation network. The data we share with ad partners is strictly bounded — no sensitive personal information is ever included.
Data We Share with Ad Partners
- Resettable advertising IDs (GAID / IDFA)
- Device model, OS version, screen size
- Session frequency and engagement duration
- Ad impressions and click interactions
- Country and language preference
Data We Never Share
- Email addresses or phone numbers
- Account credentials or passwords
- PayPal account details
- User-generated content
- Precise geolocation
Ad Partner Privacy Policies
Why Does the App Need These Permissions?
Rich Market requests only the permissions strictly necessary to function. Every permission is declared before installation:
| Permission |
Purpose |
Data Accessed |
INTERNET | Network access for gameplay, ads, and service updates | Network traffic data |
ACCESS_NETWORK_STATE | Adapt app behavior to connection type | Connection type and availability |
ACCESS_WIFI_STATE | Detect Wi-Fi for optimized data transfers | Wi-Fi status and signal quality |
AD_ID | Deliver personalized advertisements | Resettable advertising identifier |
VIBRATE | Haptic feedback during in-app interactions | None |
ACCESS_ADSERVICES_TOPICS | Interest-based ad signals via Privacy Sandbox | Topic preference data |
ACCESS_ADSERVICES_ATTRIBUTION | Measure ad campaign effectiveness | Attribution metrics |
BIND_GET_INSTALL_REFERRER_SERVICE | Identify the source of app installation | Referrer and campaign identifier |
BIND_APPHUB_SERVICE | Ad delivery optimization via AppHub | Ad parameters and impression data |
ACCESS_ADSERVICES_AD_ID | Compliance with modern advertising APIs | Ad service identifiers |
FOREGROUND_SERVICE | Sustain critical processes when the app is backgrounded | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal broadcast receiver communications | None |
How Long Do We Store Your Data?
We follow the principle of data necessity: retain only what is required, for as long as it is required — and no longer.
90 days
After 90 consecutive days of inactivity, your Personal Data is permanently and irreversibly deleted from our systems. Any residual usage data is fully anonymized before further use.
- Active user data is retained only for the duration needed to fulfill the purposes described in this policy
- Anonymized or aggregated analytics may be retained indefinitely for internal research
- All data is protected by appropriate technical and organizational safeguards throughout its lifecycle
International Data Transfers
Rich Market operates globally, which means your data may be processed on servers located outside your home country. We take this responsibility seriously:
- All cross-border transfers are encrypted using TLS 1.2+ protocols
- Contractual data protection clauses (Standard Contractual Clauses where required by GDPR) govern international transfers
- We partner only with hosting and analytics providers that meet or exceed applicable data protection standards
- Your data receives equivalent protection regardless of where it is processed
What Rights Do You Have?
Your rights depend on where you live. We honor all of them — unconditionally.
CCPA & CPRA — California Residents
- Right to Know — request a full disclosure of data we collect, use, and share about you
- Right to Delete — ask us to erase your personal information from our systems
- Right to Opt-Out of Sale — direct us not to sell your personal data to third parties
- Right to Non-Discrimination — exercise any of the above without receiving degraded service or pricing
GDPR — European Economic Area Residents
- Right of Access — obtain a copy of the personal data we hold about you
- Right to Rectification — have inaccurate or incomplete data corrected
- Right to Erasure — request deletion under qualifying circumstances ("right to be forgotten")
- Right to Restrict Processing — limit how we use your data while a dispute is resolved
- Right to Object — object to processing based on legitimate interests or direct marketing
- Right to Data Portability — receive your data in a structured, machine-readable format
VCDPA — Virginia Residents
- Right of Access — confirm whether we process your personal data and obtain a copy
- Right to Correct — fix inaccuracies in your personal data
- Right to Delete — request deletion of personal data you have provided
- Right to Portability — receive your data in a portable, usable format
- Right to Opt-Out — opt out of targeted advertising, data sales, or automated profiling
To exercise any of these rights, contact us at stephenellison4853@gmail.com. We will respond within the timeframe required by your applicable law, and in no case later than 30 days.
How Can You Opt Out?
Ad Personalization
You can limit personalized advertising directly from your device at any time:
- Android: Settings → Google → Ads → "Opt out of Ads Personalization"
- iOS: Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track"
Data Sale Opt-Out
To request that we stop selling your personal data, send an email to stephenellison4853@gmail.com with the subject line "Do Not Sell My Data". Your request will be processed within 15 business days.
Automated Profiling
Rich Market does not engage in automated decision-making that produces legal or similarly significant effects on users. If you have any concerns, reach out to stephenellison4853@gmail.com.
Is Your Data Safe?
We invest seriously in security. Our protective measures include:
- Encryption in transit and at rest — all sensitive data is encrypted using industry-standard protocols
- Strict access controls — only authorized personnel with a legitimate need can access personal data
- Regular security assessments — scheduled vulnerability scans and penetration tests
- Partner security requirements — all Service Providers must contractually meet our security standards
- Incident response protocols — a documented process for detecting, containing, and reporting security incidents
"No electronic storage system is 100% immune to breach. While we apply commercially reasonable protections, absolute security cannot be guaranteed."
Data Breach Notification
In the unlikely event of a security breach that affects your personal information, we are committed to swift and transparent action:
We will notify affected users within 72 hours of becoming aware of a qualifying breach. Notification will be delivered via in-app alert and email (where available), and will describe the nature of the incident, the data involved, steps we have taken, and recommended actions for you.
We will also notify the relevant regulatory authority (e.g., the supervisory authority under GDPR) within the legally required timeframe when applicable.
Do Not Track Signals
Some browsers and devices allow you to transmit a "Do Not Track" (DNT) signal to indicate that you prefer not to be tracked across websites and services. Currently, there is no universally accepted standard for how applications should respond to DNT signals. Rich Market does not alter its data collection practices in response to DNT signals at this time. If an industry standard emerges, we will update this policy accordingly.
Disclosure Requirements
Business Transactions
If Rich Market is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your Personal Data may be transferred as part of that transaction. We will provide advance notice before your data becomes subject to a materially different privacy policy.
Law Enforcement & Legal Process
We may disclose personal data when required to do so by applicable law, regulation, court order, or lawful governmental request. We will limit such disclosures to the minimum information necessary and, where legally permitted, will notify you of the request.
Protecting Rights and Safety
Disclosure may also occur to protect the safety of our users or the general public, to prevent fraud or illegal activity, or to defend the legal rights of the Company.
Keeping Kids Safe
13+
Rich Market is designed for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child has submitted information to us, please contact stephenellison4853@gmail.com immediately — we will delete the data without delay.
Third-Party Links & Services
Rich Market may contain links to external websites, services, or resources operated by third parties. We have no control over the content, privacy practices, or security of those external sites and accept no responsibility for them. We encourage you to review the privacy policy of any site or service you visit through a link in our app.
Will This Policy Change?
We may update this Privacy Policy from time to time as our practices evolve or legal requirements change. When we do:
- The revised policy will be published at this URL with an updated effective date
- For material changes, we will notify you via in-app notice or email at least 7 days before the new policy takes effect
- Continued use of Rich Market after the effective date constitutes acceptance of the updated policy
- If you disagree with any changes, you may contact us or delete your account
How to Reach Us
Questions, concerns, or requests regarding this Privacy Policy? We want to hear from you. Every inquiry is taken seriously and handled with care.
48 hrs
We commit to acknowledging every privacy-related inquiry within 48 hours and to resolving it within the timeframe required by applicable law.