JigsawBonus Privacy Policy - Android

Draft prepared: November 13, 2026. Effective date: November 13, 2026.

This Privacy Policy explains how the operator of JigsawBonus ("JigsawBonus," "we," "us," or "our") collects, uses, discloses, retains, and otherwise handles personal information when you use the JigsawBonus Android application, contact our support team, or use our official website at https://www.jigsawbonus.com when it becomes available (together, the "Services"). JigsawBonus is operated by the same service operator as ClipBonus, operating from Hong Kong.

The Services are intended only for people aged 18 or older who have reached the age of legal majority where they live. This Policy describes actual data practices; it is not a request for blanket consent. Where a particular activity requires your consent, that consent must be obtained separately.

Features differ by release, region, account eligibility, and configuration. References to a wallet, redemption, or withdrawal apply only where that feature is actually offered to you. A feature being unavailable does not necessarily stop the account, advertising, security, or transaction-record processing described below.

1. Scope and Responsibility

This Policy covers the information processed for JigsawBonus. It does not replace the independent privacy notices of advertisers, payment providers, app stores, or other third parties whose services you choose to use. We remain responsible for our own collection and disclosure of information, including through integrated software development kits (SDKs).

For privacy questions and requests, contact [email protected]. The contact details in Section 14 also apply to questions about the service operator and our role as a controller or data user.

2. Information We Process

Device-associated account and authentication information. The app can establish a backend account automatically using a device-associated identifier without a conventional email-and-password sign-up. We process an internal user ID, authentication tokens, account status, registration information, and a stored identity value. Depending on availability, that value may originate from an Android Advertising ID, Android ID, or an app-generated identifier. The app may also obtain the currently available advertising ID separately. These identifiers can associate sessions and server records with your installation or device; the absence of a named profile does not make the account anonymous.

Puzzle and gameplay information. We process selected picture and theme identifiers, difficulty, session information, puzzle starts and completions, time spent, placement or task progress, hint usage, scores, star ratings, daily activity, levels, in-game resources, and achievement milestones. Detailed board snapshots, completed-picture records, settings, and achievements are maintained on your device. Selected usage, content, task, and resource events also go to our servers; local storage does not mean that all gameplay-related information stays on your device.

Device, network, and installation information. This includes IP address visible to our network services; device manufacturer and model; operating-system and app version; app identifier; language; screen size, density, and refresh rate; network type; installation time and source; Google service availability; SIM presence, carrier, and country information made available by Android; and approximate region inferred from network or device information.

Security and technical information. Integrated security modules can process root or emulator indicators, VPN and network-interface status, developer-mode and debugging status, CPU and memory specifications, storage capacity, system uptime, battery and charging state, temperature or thermal state, brightness, and sensor availability or specifications. Where enabled, short sensor-sampling summaries, such as movement averages and variation, may be transmitted to assess device integrity and automated activity. Network-interface diagnostics include interface names and active status; these diagnostics are not intended to read the content of your communications.

Advertising and measurement information. We and integrated advertising providers may process advertising identifiers, device and app information, IP address, approximate region, ad requests, impressions, clicks, video completion, ad-reward verification, campaign information, delivery errors, and fraud signals. An ad request or preload can involve processing before an advertisement is displayed.

Wallet and withdrawal information, only where applicable. If you use an available redemption or withdrawal feature, we process balances, conversion or quote information, eligibility, selected payment channel, payout-account details you supply, request and transaction identifiers, status, and related support or fraud-review records. Where enabled, the app can check for the presence of specific supported payment applications; this does not provide access to those applications' messages, passwords, or account balances. Payment providers may independently request identity, tax, or other verification information under their own notices.

Support information. If you contact us, we receive your email address, the content of your correspondence, and any identifiers, screenshots, or other material you choose to send. Please do not send passwords, full payment-card details, or identity documents unless specifically requested through an appropriate verification process.

The current puzzle experience does not provide a public profile, social feed, user-video upload, or contact-discovery feature. Ordinary puzzle play does not ask you to provide contacts, microphone recordings, camera images, or precise GPS location. This statement does not exclude the device, advertising, and security processing expressly described above.

3. Why We Use Information

We use account, device, and gameplay information to establish and maintain sessions; authenticate requests; deliver and cache puzzle content; apply language and content settings; save progress; maintain tasks, resources, levels, and achievements; and provide customer support.

We use operational events and diagnostics to understand feature use, measure reliability, diagnose errors, reconcile resource changes, and improve the Services. We use advertising and campaign information to deliver and measure ads, limit frequency, validate completed rewarded ads, and assess advertising performance.

We use security signals and activity records to detect automated, duplicated, manipulated, or otherwise invalid activity; protect accounts and systems; investigate abuse; and review access or transaction eligibility. Where a withdrawal feature is offered, we use the required account and transaction information to process and reconcile eligible requests.

We also process information to respond to rights requests, comply with applicable law and valid legal process, maintain necessary records, resolve disputes, and establish or defend legal claims. We may produce aggregate or de-identified statistics that do not reasonably identify you.

4. Legal Bases Where Required

Where applicable data-protection law requires a legal basis, we rely on contractual necessity for processing genuinely needed to provide the Services you request; legitimate interests for proportionate security, fraud prevention, service operation, and improvement after considering your rights; legal obligations for required compliance; and consent for processing that requires consent, such as certain advertising or tracking activities.

A contractual term does not by itself authorize unnecessary processing. Agreeing to the User Agreement, choosing a rewarded ad, or granting a notification permission is not blanket consent to unrelated tracking or all SDK processing. You may withdraw consent where processing relies on it; withdrawal does not invalidate processing that was lawful before withdrawal.

5. Automated Processing and Security Review

Automated systems use account status, device and activity information, configuration, and security signals to determine content or feature availability, assess suspicious activity, and support ad and transaction validation. Some checks can restrict access or delay or prevent a reward or withdrawal.

If you believe a restriction or transaction decision is incorrect, contact [email protected] with the relevant account or transaction information so that we can investigate. Where the law grants rights concerning a solely automated decision with legal or similarly significant effects, you may request meaningful information, human review, and an opportunity to contest the decision.

6. When We Disclose Information

Service providers. Hosting, backend infrastructure, content delivery, technical operations, customer support, and security providers may receive information needed to perform their functions for us. Payment or payout providers receive information needed to process an available transaction and may act as independent controllers for their own obligations.

Advertising providers. Information described in Section 2 may be transmitted directly by integrated SDKs or through our services to advertising mediation, demand, and measurement providers. Their role and independent uses are explained in their privacy notices.

Legal and business circumstances. We may disclose information where reasonably necessary to comply with law or valid legal process, investigate abuse, protect rights or safety, or establish or defend claims. Information may also be transferred as part of a merger, acquisition, reorganization, or sale of the relevant business, subject to applicable safeguards and notice requirements.

At your request. We may share information with a recipient you ask us to involve, including a selected payout provider. Sharing an operator with ClipBonus does not, by itself, mean your puzzle records are public or that you have opted into another product's marketing.

Advertising disclosures can fall within the legal definitions of 'sale,' 'sharing,' or 'targeted advertising' in some jurisdictions even without a payment for the information. The applicable choices are described in Sections 7, 9, and 10.

7. Advertising, SDKs, and Website Technologies

JigsawBonus contains advertising, including optional rewarded video ads. The Android integration includes TopOn/Anythink mediation and advertising components for AppLovin, Mintegral, Pangle, and Anythink ADX/SmartDigimkt. Adapters and demand sources actually used can vary by configuration, device, region, and available inventory; not every provider serves every user.

Providers may process device and advertising identifiers, IP address, approximate region, app information, ad interactions, and delivery or security diagnostics to serve ads, measure performance, and identify invalid traffic. A provider's notice describes its independent processing; it does not mean JigsawBonus collects every category listed for that provider's other products.

Provider privacy resources: TopOn — https://help.toponad.net/docs/Privacy-Policy ; AppLovin — https://legal.applovin.com/privacy/ ; Mintegral — https://www.mintegral.com/en/privacy ; Pangle — https://www.pangleglobal.com/privacy/policy . Contact us for information about a particular ad or other configured provider.

Use the advertising-ID and ad-privacy controls available in your Android or Google settings, and any consent or privacy controls presented by the relevant service. Availability and wording vary by Android version and region. Limiting personalized advertising does not necessarily remove contextual ads or permitted security and measurement processing.

Because the app also maintains a stored device-associated account identity, changing an advertising setting or resetting an advertising ID must not be assumed to delete the existing account or historical server records. Use the deletion-request procedure in Section 9 for that purpose.

This Policy also applies to our website when it becomes available at https://www.jigsawbonus.com. Website delivery may involve IP addresses, browser and request information, and essential storage. If additional website analytics, advertising cookies, or comparable non-essential technologies are introduced, their purposes and applicable choices will be explained before use, with consent obtained where required.

8. Retention, Security, and International Processing

Local information. Board snapshots, settings, cached pictures, progress, and achievements remain on the device until removed or overwritten through app controls, device settings, or applicable storage behavior. Some authentication or identity information is held in secure device storage. An in-app progress reset is a gameplay action, not confirmation that all personal information has been deleted.

Server information. We retain account, resource, event, and support records for as long as reasonably needed for the relevant service or request. Transaction and security records may be retained longer where needed for settlement, fraud investigations, disputes, recordkeeping, or legal obligations. Retention is assessed by information category, purpose, sensitivity, applicable legal periods, and whether deletion or de-identification can meet the remaining need. You may contact us for information about the retention period or criteria applicable to a particular record.

When information is no longer needed, we delete or de-identify it, subject to lawful restrictions and backup cycles. Information retained in restricted backups is not to be restored for ordinary use except for recovery or another lawful need. A deletion response will explain material categories retained and the reason where applicable.

We use safeguards appropriate to the information and risk, including HTTPS for app-to-backend communications and secure device storage for selected credentials. No system is completely secure, and these measures do not guarantee that every device, recipient, or data store is immune from loss or unauthorized access.

The Services operate from Hong Kong and may use providers in other jurisdictions. Information may be processed outside your place of residence, where laws differ. Where a transfer requires safeguards, an adequacy basis, contractual protections, or another lawful mechanism, those requirements apply. Contact us for details of the destinations and safeguards relevant to your information.

9. Your Rights, Choices, and Deletion Requests

Depending on applicable law, you may have rights to access and obtain a copy of personal information; correct inaccuracies; request deletion; receive portable information; restrict or object to processing; withdraw consent; opt out of specified advertising disclosures or profiling; and seek review of certain automated decisions. Hong Kong law provides rights of access and correction, while additional rights may apply in your jurisdiction.

To request account closure or deletion of associated personal information, email [email protected] with the subject 'JigsawBonus account and data deletion.' Identify the app and, if available, your in-app user ID or relevant support or transaction reference. If you cannot find an ID or no longer have the app, explain that in your request so that we can arrange proportionate verification. Do not email an authentication token or password.

Uninstalling the app, clearing local storage, or using Reset Progress does not by itself submit a server-side deletion request. Closing an account is separate from resetting a puzzle. Upon a verified deletion request, we will delete associated information unless a lawful retention ground applies; merely suspending access is not a substitute for deletion.

We may ask for information reasonably necessary to verify identity or authority. An authorized representative may act where the law permits. We respond within applicable legal time limits, explain permitted extensions or material refusals, and provide available appeal instructions. You may reply to our decision to request reconsideration and contact a competent privacy regulator. Exercising a privacy right will not result in unlawful discrimination.

Device settings can manage notification permissions and advertising choices. App settings can manage available gameplay preferences and reset local progress. These controls have different effects and should not be treated as interchangeable.

10. Additional Regional Rights

For residents of the EEA, UK, or Switzerland, applicable rights may include objection to processing based on legitimate interests, withdrawal of consent, portability, restriction, and a complaint to the competent supervisory authority. You can ask for information about the legal basis or transfer mechanism relevant to your data.

For residents of California or other U.S. states with applicable comprehensive privacy laws, the categories described in Section 2 include identifiers, internet or electronic activity, device information, approximate location, commercial or transaction information where relevant, and security-related inferences. Account credentials or payout information can be sensitive information under applicable law. Sources, purposes, and recipients are described in Sections 2, 3, and 6.

Where applicable, you may opt out of a sale or sharing of personal information, targeted advertising, or qualifying profiling, and exercise access, correction, deletion, portability, or appeal rights by contacting the address in Section 9. Legally required treatment of recognized browser opt-out signals also applies where relevant; the Android app's controls and a website's controls may differ.

If another country's privacy law applies, including Brazil's LGPD, rights available under that law are preserved. This Policy does not impose a universal response deadline or waive rights that local law makes mandatory.

11. Adults Only

JigsawBonus is intended for users aged 18 or older who have also reached the legal age of majority in their jurisdiction. A parent or guardian's permission does not lower this minimum age.

We do not knowingly permit use by people under 18. If we learn that personal information has been collected from an underage user, we will take appropriate steps to restrict access and delete information that is not lawfully required to be retained. To report a concern, contact [email protected].

12. Support Material and External Content

The current app is not a public-content publishing platform. Pictures supplied as puzzles are service content; gameplay does not upload your personal photo library as user content.

Information you send to support is used to handle the request and for related security, recordkeeping, or legal needs. Advertisements and external links may lead to third-party services with their own notices and controls. Avoid sending sensitive information that is unnecessary to your request.

13. Changes to This Policy

We may update this Policy to reflect changes in the Services, our practices, or applicable law. The published version will identify its effective and updated dates. Material changes will receive additional notice where required, and a new use that requires consent will not be authorized merely by posting an updated policy.

The website's future launch does not, by itself, establish that any proposed feature, tracking tool, or privacy control is already available.

14. Contact Us

JigsawBonus Privacy Team

Operator: the same service operator as ClipBonus, operating from Hong Kong.

Email: [email protected]

Official website: https://www.jigsawbonus.com — planned; available after deployment.

For access, correction, deletion, advertising choices, complaints, or questions about this Policy, use the email address above.