Privacy Policy

Effective date: October 1, 2026 · Last updated: October 1, 2026

1. Who we are and what this policy covers

Cache Studios LLC ("Cache Studios," "we," "us," or "our") operates the rewards service offered under the names Easy Task Cash (also written EasyTaskCash) and Earnzy. Your pass, your balance, and your cash-outs are the same account under either name.

This policy applies to the websites easytaskcash.com, app.easytaskcash.com, and earnzy.ai; the Easy Task Cash wallet pass for Apple Wallet and Google Wallet; the home-screen web app; any mobile app we publish in the Apple App Store or Google Play; and our emails, notifications, and support channels (together, the "Service").

It does not apply to the apps, games, surveys, and websites that offers on the Service send you to. Those are run by other companies under their own privacy policies (see section 11).

Your use of the Service is also governed by our Terms of Service.

2. Information we collect

2.1 Collected automatically, before you sign up

The first time you open the Service we create a random identifier (your "pass ID") and store it in a cookie named etc_pass_id. This happens automatically. You do not need an account, and we do not need your name or email, for this ID to exist and for us to start associating activity with it. If you arrive through earnzy.ai, the pass ID is created when you tap to add the wallet pass, and is handed to app.easytaskcash.com when you open the app.

At the same time, and on later visits, we collect:

• Network and location data: your IP address, and the country, region or state, and city derived from it by our network provider. We do not collect GPS or precise location.
• Device and browser data: device type, operating system, browser, full user-agent string, screen size and pixel density, color depth, time zone, language preferences, number of CPU cores, approximate device memory, touch support, network connection type, whether cookies are enabled, whether you are in an in-app browser, whether you appear to use an ad blocker, and whether your browser sends a "Do Not Track" signal.
• Referral and campaign data: the page that referred you, the URL you landed on, campaign parameters (such as UTM values and sub-ID parameters), and advertising click identifiers passed to us by ad platforms and tracking partners — including Meta (fbclid, _fbp, _fbc), OpenAI (oppref), TikTok (ttclid), and Everflow click IDs.

2.2 Activity on the Service

• Browsing: pages viewed, time on page, scroll depth, entry and exit pages, and session start, end, and length.
• Offers: which offers you view and tap, their position on the wall, the provider they came from, the payout shown to you, and the device signals captured at the moment of the tap.
• Earnings: completions and reversals reported to us by offer providers (including in-app purchase events some providers report), points and balance changes, bonuses, daily scratcher results, referral earnings, and your full transaction and ledger history.
• Refer & Earn: if you join through someone's invite link, we record who invited you and when. If you invite others, we record who joined through your link and what each person's activity earned you. The person who invited you can see the date you joined and the amount your activity earned them — not your name, your email address, or which offers you completed.
• Cash-outs: the amount, the method, the payout speed you chose and any fee, the IP address you requested it from, the trust level that applied, the results of the checks described in this policy, and the status of the payout.
• Wallet pass: whether you added the pass to Apple Wallet or Google Wallet, the devices that registered it (including the push token Apple issues for pass updates), the IP address and device details at registration, whether it was removed, and your notification preferences.

2.3 Session recording and replay

We use Microsoft Clarity on app.easytaskcash.com to record your interactions with our pages — taps, scrolling, mouse movement, and page content — so we can replay sessions, build heatmaps, and find where people get stuck. Recordings are stored by Microsoft and linked to your pass ID. We may also use PostHog for product analytics and session replay.

Please do not type sensitive information into any field we have not asked you for. Assume that what you type into a page on the Service can be captured by a replay tool.

2.4 Information you give us

• Account: if you create an account we collect your email address, a password (stored only as a salted hash), and, if you give them, your name and phone number. If you sign in with Google we receive your name, email address, and profile picture from Google.
• Contact details from earlier campaigns: some past campaigns asked for a name, email address, and phone number before you could use the offer wall. We no longer ask, but we keep what was given.
• Profile and quiz answers: answers you give in onboarding quizzes, cash-out quizzes, and profile questions (such as game genres, interests, time and spending preferences, and payout preference), which we use to match you to offers. You can delete your profile answers in the app.
• Support messages: the content of emails, chat messages, and in-app support requests you send us (and any attachments), the email address and name you send them from, and our replies — including any conversation we open with you while reviewing a cash-out.
• Posts you submit for a boost: the link, the platform, your public handle, the public preview the platform returns (such as thumbnail and caption), whether you agreed that we may repost it and when, and the results of our later checks that the post is still up.

2.5 Identity verification (sensitive personal information)

Before we release a cash-out we may require you to verify your identity. Verification is performed by our provider Sumsub, inside a Sumsub window on our page. Depending on the check, Sumsub may collect your legal name, date of birth, address, an image of a government-issued identity document, and a photo or video of your face, and may run a liveness or face-comparison check on it. We receive the outcome (approved, rejected, or pending) and, if you are rejected, the reasons. We do not receive or store copies of your ID images or face images ourselves.

A face scan or facial geometry used to confirm that you are who you say you are may be biometric information under the laws of some states, including Illinois, Texas, and Washington. Section 6 explains how it is handled.

2.6 Payment information

When you request a cash-out we collect what is needed to pay you: the destination email address and, for a direct bank transfer (ACH), the account holder's name, routing number, account number, account type, and the account holder's street address, city, state, and ZIP code.

Bank routing and account numbers and the holder's name are encrypted before they are stored, are entered fresh for each cash-out rather than saved as a reusable payment method, and are readable only through a restricted, audited process. We keep the last four digits and the account type for reconciliation and dispute handling.

2.7 Information we receive from others

• Offer providers tell us when you complete an offer, which offer it was, what it paid, the identifiers they use to track it, and sometimes fraud or device signals they collected. They also tell us when a completion is reversed or charged back. We log every callback we receive, including the technical details of the request, whether or not it is credited.
• Advertising and tracking partners (Meta, OpenAI, TikTok, Everflow) pass us click identifiers when you arrive from an ad, and Everflow reports which affiliate or campaign sent you and what it was paid.
• Partners who embed our offer wall or send us users through an integration may give us the identifier they use for you.
• Sumsub returns the outcome of your identity check.
• IPQualityScore, our IP-reputation provider, tells us whether your IP address belongs to a VPN, proxy, Tor exit, or hosting network, its country, and its network operator. We check this when you request a cash-out and when you join through an invite link. We do not treat Apple's iCloud Private Relay as a VPN.
• Social media platforms (TikTok, Instagram, YouTube, and X) return the public details of a post you submit for a boost, and whether it is still available.
• Apple and Google tell us when you save or remove a wallet pass, and Google shares your profile if you sign in with Google.

2.8 Our mobile apps

If you use an Earnzy or Easy Task Cash app from the Apple App Store or Google Play, we also collect:

• Device and app details: device model, operating system and version, app version, language, time zone, and an identifier for your device that is specific to our apps (on iPhone, the identifier for vendor).
• Advertising identifier, only with your permission: on iPhone we read your device's advertising identifier (IDFA) only if you allow tracking when the app asks. On Android we read the advertising ID unless you have deleted or opted out of it in your device settings. We share it with offer providers so that installs and milestones can be credited to you, and with the advertising companies in section 4.2 for measurement. You do not have to allow tracking to use the app or to earn, but some offers may not credit without it.
• Notification token, only if you turn notifications on: a token from Apple's or Google's notification service so we can send you notifications.
• Sign in with Apple: if you sign in with Apple, we receive your name and an email address, which may be a private relay address that Apple forwards to you.
• Offer-wall components: some offer walls inside the app are run by the offer provider, which collects device information (including the advertising identifier, if you allowed it) directly, under its own privacy policy.
• Diagnostics: crash reports and performance data, so we can fix problems.

The app uses your camera only during identity verification, inside the Sumsub verification screen, and only after you allow camera access. The app does not collect your precise location, contacts, photos, or microphone audio.

3. How we use your information

• To provide the Service: create and recognize your pass, show you offers, and track your balance.
• To decide which offers to show you and in what order, including filtering by device, country, and state, and personalizing based on your activity and quiz answers.
• To credit completions, apply bonuses and boosts, and pay you.
• To detect and prevent fraud and abuse — scoring account quality, flagging suspicious patterns, and detecting duplicate, automated, or VPN-routed accounts — using IP address, device signals, and behavior.
• To keep cash-outs safe: we may refuse a cash-out from a VPN, a proxy, or outside the United States; send a cash-out to a person for review when earnings came from a VPN connection; and give each account a trust level that decides which payout options you can use and whether a person reviews your cash-out. We may ask you questions about a cash-out before we send it.
• To run Refer & Earn and post boosts, including checking that someone who joins through an invite is not the same person, device, or network as the person who invited them, and reviewing posts against the boost rules.
• To verify identity and meet legal, tax, and payment-partner obligations.
• To send you transactional messages (verification, password resets, cash-out status, support replies), wallet pass updates, and, unless you turn them off, notifications about offers and bonuses.
• To respond to support requests.
• To measure and improve the Service, understand where people drop off, and analyze funnels and retention.
• To measure our advertising, attribute sign-ups and conversions to the campaigns that produced them, report results to the affiliates and partners who sent you, and build audiences for further advertising.
• To enforce our Terms, protect our rights and our users, and comply with law.

Automated decisions. Some cash-out checks are automatic: for example, a cash-out from a VPN, a proxy, or outside the United States may be refused before anything is taken from your balance. You can turn off the VPN and try again, or contact support to have a person look at it. A cash-out we flag is reviewed by a person before it is declined.

4. How we share your information

4.1 Offer providers and advertisers

When you tap an offer, your browser goes to the offer provider with your pass ID (or a token standing in for it) and campaign parameters, so your completion can be credited back to you. That provider, and the advertiser behind the offer, then collect their own information about you under their own privacy policies. Our current providers include Adscend Media, Notik, BitLabs, Adgem, Revlum, CPX Research, Lootably, ayeT-Studios, Besitos, and AppSamurai. This list changes as we add and remove partners.

4.2 Advertising and measurement companies

We share identifiers, device and browser information, approximate location, and conversion events with advertising and measurement companies so we can measure and target advertising:

• OpenAI (ChatGPT Ads): a measurement pixel runs on earnzy.ai and app.easytaskcash.com. When your pass is linked to an account, we send OpenAI a one-way hash of your pass ID and of your email address. When you complete offers we also send OpenAI, from our servers, the hashed identifiers, your IP address, user agent, country, region, and city, the amount of the conversion, and OpenAI's click ID.
• Meta (Facebook and Instagram): when you add the wallet pass, we send Meta, from our servers, a hashed pass ID, your IP address, user agent, the page you landed on, Meta's cookie and click identifiers, and a campaign click ID. We may also use the Meta Pixel on our pages.
• Everflow, our affiliate-tracking platform, and the affiliates and media partners who sent you to us: we report sign-up, install, and offer events with the click ID they supplied and the amount involved, so they can be credited and paid. Some campaigns also send these events to a tracking address the campaign's partner gives us.

Some of these companies may combine what they receive from us with information they already hold about you, and use it under their own policies.

4.3 Service providers

We use vendors who process information on our behalf and may use it only to provide their services to us:

• Amazon Web Services — hosting, databases, queues, and storage, in the United States.
• Cloudflare — network delivery and security for all of our websites.
• Resend — sending and receiving email, including support email and attachments.
• Sumsub — identity verification.
• IPQualityScore — IP reputation; receives your IP address.
• Microsoft (Clarity) and PostHog — analytics and session replay.
• Google — sign-in with Google, Google Wallet, and the web fonts our pages load (your browser requests them from Google, which sees your IP address).
• Apple — Apple Wallet pass delivery and updates, Sign in with Apple, and app notifications.
• Google (Firebase Cloud Messaging) — app notifications on Android.
• Banking and payout partners — the partners who send your bank transfers receive the bank details and amount needed to send them.
• Support and operations tools — our support chat (which we host ourselves) and the internal messaging tools our team uses for alerts, which may include your email address and the details of a support request or cash-out under review.

To show a preview of a post you submit for a boost, we send the post's link (not your name, email, or pass ID) to the platform it is on.

4.4 Partners who embed our offer wall

Some partners embed an Easy Task Cash offer wall in their own app or site, or send us users through a partner integration. We report your completions and earnings back to that partner using the identifier they supplied.

4.5 Posts you allow us to repost

If you tick the box allowing us to repost a post you submit for a boost, we may republish it, including your public handle, on our own channels and in our advertising. If you do not tick it, we use the post only to review your boost.

4.6 Legal, safety, and business transfers

We may disclose information to comply with law or legal process, respond to lawful requests from public authorities, enforce our Terms, protect the rights, property, or safety of Cache Studios, our users, or others, and investigate fraud — including reporting suspected fraud to our payment and verification partners. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, and this policy will continue to apply to it.

5. Selling and sharing of personal information

California law defines "sell" and "share" broadly. Because we disclose identifiers, device information, and activity to advertising companies (section 4.2) for advertising purposes and receive value in return, we treat that as selling and as sharing for cross-context behavioral advertising.

In the last twelve months we have sold or shared these categories of personal information: identifiers (including cookie, click, and hashed identifiers, hashed email address, and IP address); internet and device activity; approximate location derived from IP address; and commercial information about offers you engaged with and amounts earned. The recipients are the companies in section 4.2.

We do not sell or share your identity documents, biometric information, bank details, or the contents of your support messages. We do not knowingly sell or share the personal information of anyone under 16.

To opt out, use the Do Not Sell or Share My Personal Information page, linked at the bottom of our site and on your Account page, or email [email protected] with the subject "Do Not Sell or Share My Personal Information" and include the email address on your account or your pass ID. You do not need to verify your identity to opt out. We also treat a Global Privacy Control signal from your browser as an opt-out request, with nothing more needed from you.

Once you opt out, we stop sending your information to the advertising companies in section 4.2 (OpenAI and Meta), both from our servers and through their pixels on our site. We continue to report sign-up, install, and offer events to Everflow and to the affiliates and partners who sent you to us, because that reporting is how they are credited and paid for the users they refer. An opt-out made on the page or by Global Privacy Control applies to the pass on that device and browser; if you use more than one, opt out on each, or email us to opt out everywhere.

6. Biometric information

If identity verification includes a face or liveness check, Sumsub creates and compares facial geometry to confirm that the face matches the ID. By starting verification you consent to that collection and use. We and Sumsub use it only to verify your identity, prevent fraud, and meet legal and payment obligations. It is never sold, leased, traded, or used for advertising, and is not used to train facial-recognition systems.

Biometric information is destroyed when the purpose for collecting it has been satisfied, and in any case within three years of your last interaction with the Service, unless a longer period is required by law or by a valid legal process. Sumsub stores and protects it under its own security program and privacy policy. We do not store it ourselves.

7. Cookies and similar technologies

• etc_pass_id — the anonymous identifier that is your account before you have an account. It lasts 30 days from your last visit and is what connects your wallet pass, your offer taps, and your balance. Blocking or clearing it disconnects you from your balance unless you have linked an account.
• Authentication cookies — keep you signed in.
• Browser storage (local and session storage) — holds display preferences, notification preferences, and short-lived state for the add-to-wallet and sign-in flows.
• In our apps, the same kinds of identifiers and preferences are kept in the app's storage on your device, and are removed when you delete the app.
• Third-party pixels and SDKs — OpenAI (__oppref and related identifiers, on earnzy.ai and app.easytaskcash.com), Microsoft Clarity, and, when used, PostHog and the Meta Pixel set their own cookies and identifiers.

Most browsers let you block or delete cookies. Doing so will break your balance and cash-outs if your pass is not linked to an account.

Do Not Track. We record whether your browser sends a Do Not Track signal and may use it as one of many signals when assessing account quality. We do not currently treat it as an opt-out; see section 9 for the choices we do honor.

8. How long we keep information

We keep personal information only as long as it is needed for the purposes in this policy, using these criteria:

| Information | How long | |---|---| | Account, pass, balance, ledger, and transaction records | While your account exists, then as long as needed for tax, accounting, fraud-prevention, and legal purposes (generally up to 7 years after your last cash-out) | | Activity events (page views, offer taps, provider callbacks) | On a rolling basis for analytics and dispute resolution; older data may be moved to encrypted archive storage | | Connection-check results, fraud flags, and quality scores | With your pass and cash-out requests, as fraud-prevention records | | Bank account and routing numbers | Encrypted, for as long as needed to handle returned payments, disputes, and fraud investigations, then erased; the last four digits and account type are kept with the cash-out record | | Identity verification | Images and biometric data are held by Sumsub under its retention schedule and section 6; we keep the outcome | | Support messages and review conversations | As long as needed to resolve the request and any later dispute about it | | Boost submissions and referral records | With the cash-outs and earnings they relate to | | Session recordings | Under Microsoft's (and, if used, PostHog's) standard retention periods |

9. Your rights and choices

Depending on where you live (including California, Colorado, Connecticut, Virginia, Texas, Oregon, and other U.S. states with privacy laws), you may have the right to:

• know what personal information we hold about you and how we use and disclose it, and get a copy of it;
• correct inaccurate information;
• delete your information;
• opt out of the sale or sharing of your information and of targeted advertising (see section 5);
• limit our use of sensitive personal information (we use it only to provide the Service, verify identity, and prevent fraud, which the law permits without an opt-out); and
• not be discriminated against for exercising these rights.

To make a request, email [email protected] from the address on your account, or include your pass ID if you do not have an account. We will verify your request before acting on it, which may mean asking you to confirm details we already hold. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm it directly. We respond within 45 days, and will tell you if we need up to 45 more.

Appeals. If we decline your request, you can appeal by replying to our decision with the subject "Privacy appeal." We will respond within 60 days. If you are not satisfied with the result, you can contact your state attorney general.

Deleting your data deletes your balance and any unpaid earnings. We cannot restore them afterwards, and we keep records we are required to keep for tax, legal, or fraud-prevention reasons.

You can also:

• delete your account in the app, from the Account screen, or by email as described above;
• turn off notifications in your account settings or device settings;
• on iPhone, turn off tracking for our app in Settings › Privacy & Security › Tracking, and on Android, reset or delete your advertising ID in your device settings;
• remove the wallet pass from Apple Wallet or Google Wallet at any time;
• delete your profile and quiz answers in the app; and
• clear the etc_pass_id cookie, with the consequences in section 7.

Notice of financial incentive (California)

The Service pays you rewards for completing offers, and some programs — such as Refer & Earn, post boosts, the daily scratcher, and sign-up or wallet bonuses — give rewards connected to information you provide or activity we track. Taking part is your choice; you opt in by using the program, and you can stop at any time by no longer using it or by asking us to delete your data (which forfeits unpaid rewards). We estimate the value of your information to be the value of the rewards credited to you, calculated from what our advertising and offer partners pay us for your activity, less our costs.

10. Children

The Service is not directed to children. You must be at least 18 years old to use it, and some offers are restricted to users 21 and over. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. If you believe a minor has given us information, contact [email protected].

11. Third-party offers and links

Offers on the Service take you to apps, games, surveys, and websites we do not operate. What they collect and what they do with it is governed by their privacy policies, not this one. Review them before you install an app or give them information.

12. Security

We encrypt data in transit and at rest, restrict internal access to the people and systems that need it, encrypt bank details at the field level, and audit sensitive reads. No system is perfectly secure, and we cannot guarantee the security of information you send us. If a breach affects your personal information, we will notify you as the law requires.

13. Where your information is processed

We operate in the United States and store and process personal information there. The Service is intended for users in the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

14. Changes to this policy

We may update this policy. When we do, we will change the dates at the top, and for material changes we will give notice through the Service or by email before the change takes effect. If you continue to use the Service after a change takes effect, the updated policy applies.

15. Contact us

Cache Studios LLC, a Wyoming limited liability company (Easy Task Cash and Earnzy)

Privacy questions and requests: [email protected]

Everything else: [email protected]