Effective date: October 16, 2026
AppsPrize is a rewards app for Shopify stores, operated by App Samurai Inc and its affiliates ("App Samurai," "we," "us," or "our"). This Privacy Policy explains how we collect, use, retain and disclose information when merchants use AppsPrize, customers participate in a merchant's rewards program, or individuals contact us.
Our operator is App Samurai, Inc., incorporated in Delaware, with an address at The Farm Soho, 447 Broadway, 2nd and 3rd Floor, New York, NY 10013, United States. For UK users, App Samurai Ltd, at 184 Shepherds Bush Road, London W6 7NL, United Kingdom, acts as controller where applicable. Our role for merchant-directed customer processing is described below.
This policy covers the Shopify application and its storefront rewards widget. The separate AppsPrize mobile application and the rest of this website are covered by our Privacy Policy, which describes the account, SMS and cash-out features.
For privacy questions or requests, contact our Data Protection Officer at ecekockar@appsamurai.com, or app support at support@appsprize.com.
1. Our role
We process customer rewards information on behalf of the participating merchant to provide the merchant's rewards program. Merchants are responsible for their own privacy notices and instructions to us. We also process information for our own merchant relationships, support, service security and legal obligations. Shopify, campaign providers and game publishers may have separate responsibilities for information they process under their own privacy policies.
2. Information we process
Shopify and merchant information. We process store domains and identifiers, installation and authorization information, authenticated merchant or staff identifiers, rewards settings, branding assets and campaign preferences.
Customer rewards information. We process Shopify customer identifiers, selected campaigns, enrollment references and dates, applicable reward terms, reported campaign milestones and verification status, points transactions, balances, discount identifiers and redemption history. Features depend on the merchant's configuration and available integrations.
Attribution and campaign earnings. We process store and enrollment references, campaign identifiers and, where reporting is enabled, attributed installation reports, applicable campaign payment terms, status changes and merchant earnings.
Order reconciliation. Where this functionality is enabled and authorized, we process relevant order and customer identifiers, discount usage, cancellation/refund status and timestamps to reconcile rewards. Our rewards functionality does not require payment-card details or shipping addresses.
Support and privacy requests. We process correspondence and information provided to locate records, verify requests and document their resolution. Shopify privacy notifications may contain an email address. We do not use that address as the rewards database's customer identifier or retain it in the privacy request queue.
Early-access list. If a merchant joins the early-access list on appsprize.com, we collect the email address and store address they enter. We use them only to contact the merchant about the app, keep them in private storage that is not publicly accessible, and delete them on request.
Technical information. Requests to the service involve network and browser information needed to deliver the app. Our infrastructure providers may process request metadata and diagnostic information to operate and secure their services.
3. How we use information
We use information to authenticate access, operate the storefront rewards experience, associate activity with the correct store and customer, verify campaign reports, prevent duplicate or fraudulent transactions, maintain points and redemption records, manage discounts, calculate attributed merchant earnings, provide support, troubleshoot errors and meet legal obligations.
Where enabled, we also reconcile discount usage after eligible cancellations or refunds. We do not describe unverified campaign activity as confirmed rewards.
Legal bases
Where the GDPR or UK GDPR applies and we act as controller, we rely on performance of a contract to provide requested services; legitimate interests in preventing fraud, securing the service and improving it, balanced against individual rights; consent for personalized advertising where required; and legal obligations. Where we act as a processor, we process information under the merchant's lawful instructions. Consent can be withdrawn without affecting the lawfulness of processing before withdrawal.
4. Campaign tracking and external games
When a customer requests a campaign launch or campaign QR code, AppsPrize creates a tracked link containing a pseudonymous enrollment reference and store reference. Opening the link sends those references to App Samurai's campaign service so reported activity can be associated with the correct enrollment and merchant. These references are not anonymous information.
The campaign service redirects the customer to the relevant app-store listing. The tracking service receives network information when its link is opened. Downloading or using a game is also subject to the game publisher's privacy policy and any tracking or permission choices presented by that service.
Generating a QR code associates its tracked link with the customer signed in on the desktop. Scanning the QR opens that link on the phone.
5. Cookies and browser storage
AppsPrize uses authenticated Shopify requests and session information to support access. The storefront widget uses browser session storage to temporarily remember a selected campaign during sign-in. That handoff expires after 15 minutes and is cleared when processed.
Shopify and external campaign services may use their own cookies or similar technologies. Browser settings can restrict cookies or storage, which may affect sign-in or campaign handoff. Restricting cookies alone does not prevent all information from being transmitted when a tracked campaign link is opened.
6. Disclosures and service providers
We disclose information as needed to the participating merchant to administer its program; Shopify to provide authorized platform functionality; App Samurai campaign services for attribution and enabled reporting; and infrastructure providers to operate and secure the app. The current application uses OpenAI Sites and Cloudflare Workers/D1 infrastructure.
We may disclose information where necessary to comply with law, respond to valid legal requests, investigate abuse or protect rights and security. Information may also be transferred in connection with a corporate restructuring, acquisition or sale, subject to applicable legal requirements and notice obligations.
Advertising-related disclosures
We do not sell personal information in exchange for money. AppsPrize's rewards model is advertiser-funded. Disclosure of identifiers and campaign activity for advertising measurement may qualify as a "sale" or "sharing" under California or other US state privacy laws, depending on the actual processing arrangement.
To request an opt-out or ask about this processing, email our Data Protection Officer at ecekockar@appsamurai.com. You do not need to create an account to submit a request. Third-party games and campaign services may have separate privacy choices. This policy does not describe mobile advertising-ID controls as controls over all Shopify campaign attribution.
7. Retention and deletion
We delete or anonymize all shop-related data in our active application databases within 48 hours of receiving the mandatory shop/redact webhook from Shopify following app uninstallation. Historical database recovery copies may persist for up to 30 days under our hosting provider's recovery schedule; the 48-hour deadline does not apply to those copies or to records independently held by Shopify or game providers.
We retain information for the period necessary to provide the service and meet applicable legal, security, accounting and dispute-resolution requirements. Retention depends on whether the store remains active, whether rewards or transactions remain unresolved, whether a deletion request has been received, and whether a lawful retention obligation applies.
We process Shopify customer data-request, customer-redaction and shop-redaction notifications. Customer deletion removes or unlinks the relevant rewards records. Shop deletion removes the applicable store's app records, subject to validating the installation lifecycle and any applicable legal requirements.
Some pseudonymous financial transaction references may remain after customer redaction to reconcile reversals or disputes. They remain subject to data protection and retention requirements. Deleting information from AppsPrize does not automatically delete records held independently by Shopify or game providers.
8. Your rights and requests
Depending on applicable law, you may have rights to access, correct, delete or receive a portable copy of your information; restrict or object to processing; and withdraw consent where processing relies on consent.
US state privacy laws may also provide rights to opt out of sale, sharing or targeted advertising, limit certain uses of sensitive information, and appeal a request decision, where applicable. We will not unlawfully discriminate against you for exercising privacy rights.
Email ecekockar@appsamurai.com and identify the relevant store. Customers may also contact their merchant. We may verify your identity and an authorized agent's authority, and coordinate with the merchant where we process information on its behalf. Do not send passwords or payment-card information. We respond within applicable legal deadlines, including any permitted extensions.
Where applicable, you may complain to your local data protection authority.
9. International processing and security
App Samurai operates internationally, including in the United States and Europe. Our operator and infrastructure providers may process information outside your state or country. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers out of the EEA or UK. Contact our Data Protection Officer for information about safeguards applicable to your data.
We use HTTPS, authenticated requests and store/customer access controls designed to protect information. No method of transmission or storage guarantees absolute security. We will provide incident notifications where required by law.
10. Children and participation age
AppsPrize is intended for adults and is not directed to children. Participants must meet the minimum age stated in our Terms of Service: at least 16 years old or the applicable age of majority. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided information through AppsPrize, contact us so we can investigate and delete it as appropriate.
11. Changes and contact
We may update this policy to reflect changes in the service, our practices or applicable law. We will update its effective date and provide additional notice where required.
Privacy questions and requests: ecekockar@appsamurai.com (Data Protection Officer). App support: support@appsprize.com.
App Samurai Inc
The Farm Soho, 447 Broadway, 2nd and 3rd Floor
New York, NY 10013, United States
UK office / App Samurai Ltd
184 Shepherds Bush Road, London W6 7NL, United Kingdom