Made on
Tilda
Privacy Policy ("Policy") of the Mobile App "Crypto Apex" ("App").
Last updated: November 5, 2026
We, Riseforward Ltd., limited liability company, registered office at Level 1, Blue Harbour Business Centre, Ix-Xatt Ta' Xbiex, Ta' Xbiex XBX 1027, Malta, Registration number: C110851, VAT: MT31634902 (the "Company", "we", "us"), publish the App on Google Play under the package name com.crypto.apex and set forth this Policy.
We are committed to protecting the privacy of the people who use our App. This Policy explains which Personal Data we collect when you use the App, why and on which legal basis we collect it, with whom we share it, how we protect it and which rights you have over it. Please take the time to read this Policy thoroughly. By installing or using the App you, the end user, agree to this Policy. If you do not agree with it, please do not install the App, or uninstall it.
The Policy applies to the App and to every feature, lesson, tournament, advertisement and service delivered through it (collectively, our "Services"). The Company is the controller of the Personal Data collected via the App according to Art. 4(7) GDPR.
Crypto Apex is a trading-education simulator. All balances, positions, coins, rewards, tournament prizes and items in the App are virtual, have no monetary value and cannot be withdrawn, exchanged or converted into real money or real crypto-assets. The App does not connect to any exchange or wallet, does not execute real trades and does not process payments.
Information that identifies you or can be used to identify or contact you is defined as "Personal Data". We collect Personal Data that you provide when you create or use an account, Personal Data generated by your activity in the App, and Personal Data that is automatically collected from your device as outlined in this Policy. We never ask for your real name, telephone number, date of birth, identity documents, bank or card details, or the keys of any real crypto wallet.
We collect the following categories of Personal Data:
The App does not request access to your contacts, camera, microphone, photos, files or precise location. The only Android permissions it uses are Internet access and, on Android 13 and later, permission to show notifications.
Your access token, App settings, language and consent choices are stored on your device. They are excluded from Android cloud backup and are deleted when you uninstall the App or clear its storage. Your account, profile and Activity Information are stored on secure servers operated for us under the relevant service and data processing agreements, so that your progress is available when you sign in again.
The App is not directed to children. By using the App you confirm that you are at least 16 years old, or older where the law of your country sets a higher age, and that you use the App in accordance with the age restrictions set by Google Play. The App does not take part in Google Play's "Designed for Families" program. We do not knowingly collect Personal Data from minors below the applicable age. If you are the parent or legal guardian of such a minor who has used the App, please contact us at info@riseforward.biz: we will delete the minor's account and Personal Data from our systems and ask our service providers to do the same.
In this section we outline exactly how and why your Personal Data is collected and processed and the legal basis for this collection and processing.
The legal basis of processing will be one of the following:
You can contact us using the contact details below if you require more information on the collection and legal basis for processing your Personal Data.
We use Account Information, Activity Information and Automatically Collected Information to create and authenticate your account, to run the trading simulation on our servers (prices, orders, positions and virtual balances are calculated server-side), to keep your progress, to deliver academy content in your language, to run tournaments and ratings, to grant daily rewards, achievements and other in-game rewards, and to send you the confirmation and password-reset codes you request. The legal basis is the performance of the contract with you (Art. 6(1)(b) GDPR).
When you take part in tournaments or appear in ratings, your username, avatar and results are visible to other users of the App. Your email address is never shown to other users. Please do not use your real name or other personal information as your username if you do not want it to be seen by others. The legal basis is the performance of the contract with you (Art. 6(1)(b) GDPR).
The App is free to use and is financed by advertising. Banner, interstitial and rewarded video advertisements are delivered through the AppLovin MAX mediation platform and the advertising networks listed in the section "Third-party advertising networks and other third-party features" below. To request and display an advertisement, and to grant you the in-game reward after a rewarded video, those networks receive your Advertising ID, IP address, device information and information about the advertisement you saw or tapped.
Advertisements may be non-personalized, i.e. selected from the context of the App, your language and your approximate location only. The legal basis for such processing is our legitimate interest (Art. 6(1)(f) GDPR) in financing a free App.
Advertisements may be personalized, i.e. selected on the basis of an interest profile that the advertising networks build from your Advertising ID and your activity across apps and websites. The legal basis for such processing is your consent (Art. 6(1)(a) GDPR), which we ask for in the consent form described in the section "Consent, the Advertising Identifier and SDK storage" below. You are not required to give it; without it you will still be able to use the App and will see non-personalized advertisements instead.
We use Adjust to learn which marketing campaign or store link brought you to the App and how much advertising revenue an installation generates, and Firebase Crashlytics to receive crash reports and diagnostics so that we can fix errors. Adjust is started only after the consent step has been completed, and it receives your Advertising ID only where your consent choices allow it.
The legal basis for attribution is your consent (Art. 6(1)(a) GDPR) where the applicable law requires consent, and otherwise our legitimate interest (Art. 6(1)(f) GDPR) in running our marketing responsibly. The legal basis for crash reporting is our legitimate interest (Art. 6(1)(f) GDPR) in keeping the App stable and secure.
On Android 13 and later the App asks for permission to show notifications. If you allow it, the App schedules reminder notifications locally on your device; they are not sent from a server and no Personal Data leaves your device for them. Separately, the App shows in-app messages (for example about tournament results or rewards) inside its notification center. The legal basis is the permission you give in the Android system dialog and the performance of the contract with you; you can switch reminders off at any time in the App's settings or in the Android notification settings.
Should you contact us with a question or a request, we will respond to it and manage it. The communication channel is email at info@riseforward.biz or post at the address above. The legal basis for processing the Personal Data in your message is our legitimate interest (Art. 6(1)(f) GDPR) in supporting the users of the App and, where you exercise a legal right, our legal obligation (Art. 6(1)(c) GDPR) to respond. We will be unable to answer you without the Personal Data contained in your message.
We may be required to process your Personal Data to protect our company, our users and our business; for the purpose of complying with laws, regulations, court orders and other legal obligations; to assist in an investigation; to enforce this Policy and the applicable Terms of Use, or any other agreements with third parties; to promote the safety and security of the App; to detect or prevent fraud, abuse of rewards and tournaments, invalid advertising traffic, emulators and other harmful practices; or for any other reason permitted by law.
The legal basis for such processing is the compliance with our legal obligations (Art. 6(1)(c) GDPR), our legitimate interest in the security of the App (Art. 6(1)(f) GDPR) and the protection of your and/or other persons' vital interests.
The App does not collect information that falls under the special categories of Personal Data, including but not limited to health-related information, sexual orientation and ethnic origin information. Should such data ever be needed, we would only process it with your prior explicit consent, according to Art. 9(2)(a) GDPR, except where permitted or required by applicable law.
The App is a native Android application and does not use browser cookies. Its software components (SDKs) nonetheless use comparable mechanisms: the Google Advertising ID, a resettable identifier that Android assigns to your device, random identifiers that the advertising and measurement SDKs create for your installation, and small files in the App's private storage in which those SDKs keep your preferences and the state of your consent.
On first start, where the law requires it, the App shows a consent form provided by Google's User Messaging Platform through AppLovin MAX:
Your choice is stored on your device and passed to each advertising and measurement SDK as a technical signal (the consent string). Your ad privacy choice is independent of the notification permission.
You have the ability to change your choices at any time:
If you wish to opt out of tracking by the Company beyond these settings, you can contact us at info@riseforward.biz.
While the App may contain advertisements and links leading to third-party apps and websites (for example the in-app review prompt of Google Play), third-party apps and websites are not covered by this Policy, which only covers the practices regarding the Company's use of your Personal Data. We are not responsible for third parties' privacy policies and/or procedures. You are strongly advised to read the privacy policy of third-party apps and websites when linking to them.
Advertising in the App is mediated by AppLovin MAX (AppLovin Corporation). Whenever an advertisement placement is shown, your device establishes a direct connection to the servers of AppLovin and of the advertising network that wins the placement. This means the advertisement is transferred by the network directly to your device, and the network receives your Advertising ID, IP address, device information and information about the advertisement at that moment, whether or not you interact with it. Each network acts as an independent controller of the data it collects through its SDK and processes it under its own privacy policy.
| Provider | Purpose | Privacy policy |
|---|---|---|
| AppLovin MAX (AppLovin Corp., USA) | Ad mediation and advertising | applovin.com/privacy |
| Google AdMob / Ad Manager, User Messaging Platform (Google LLC / Google Ireland Ltd.) | Advertising, consent form | policies.google.com/privacy |
| Meta Audience Network (Meta Platforms Ireland Ltd.) | Advertising | facebook.com/privacy/policy |
| Unity Ads (Unity Technologies) | Advertising | unity.com/legal/privacy-policy |
| Liftoff Monetize / Vungle (Liftoff Mobile, Inc.) | Advertising | liftoff.io/privacy-policy |
| Mintegral (Mintegral International Ltd.) | Advertising | mintegral.com/en/privacy |
| Pangle (Bytedance Pte. Ltd.) | Advertising | pangleglobal.com/privacy |
| InMobi (InMobi Pte. Ltd.) | Advertising | inmobi.com/privacy-policy |
| DT Exchange (Digital Turbine, Inc.) | Advertising | digitalturbine.com/privacy-policy |
| Chartboost (Chartboost, Inc.) | Advertising | chartboost.com privacy policy |
| Moloco (Moloco, Inc.) | Advertising | moloco.com/privacy-policy |
| BidMachine (BidMachine Inc.) | Advertising | bidmachine.io/privacy-policy |
| Bigo Ads (BIGO Technology Pte. Ltd.) | Advertising | bigossp.com/privacy |
| LINE Ads / FiveAd (LY Corporation) | Advertising | lycorp.co.jp privacy policy |
| Yandex Mobile Ads (Yandex) | Advertising | yandex.com/legal/confidential |
| Adjust (Adjust GmbH, Germany) | Install attribution, ad revenue measurement | adjust.com/terms/privacy-policy |
| Firebase Crashlytics (Google LLC) | Crash reporting | firebase.google.com/support/privacy |
Please bear in mind that the Right to erasure and all other rights apply also to your data held by these advertising networks. Please contact us at info@riseforward.biz in case you wish to delete your data, including data held by the advertising networks, and we will forward your request and tell you how to contact them directly.
We will not sell your Personal Data to third parties and we will not share, transfer or otherwise distribute your Personal Data to third parties, unless required by law, unless the third party acts as a data processor on our behalf (for example our hosting and email-delivery providers), unless the third party is an advertising or measurement provider acting as described above, or you have given us express consent to do so. Your username, avatar and results are visible to other users as described in "Tournaments and Ratings".
The sharing of Personal Data with other entities or service providers will be done in accordance with the applicable and relevant laws on data protection and is limited to the extent necessary. These companies have been selected carefully, and we regularly monitor how they comply with our instructions. These companies are prohibited from using your Personal Data for any other purposes than those described in this Policy. The sharing of your Personal Data with such companies is based on our legal entitlement to engage third-party processors to carry out the processing on our behalf, on the condition that we only use processors that provide sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the applicable law and ensure the protection of the rights of users.
Some of the companies with which we may share your Personal Data are located outside of the European Economic Area, in particular in the United States and in Asia. In order to maintain sufficient protection of your Personal Data in this context, we ensure that the said companies are located in third countries that offer an adequate level of protection based on a European Commission adequacy decision (including the EU-US Data Privacy Framework for certified companies), or we implement additional safeguards, e.g. the standard data protection clauses adopted by the European Commission. You can request further details by contacting us at the contact details below.
We may be required to disclose your Personal Data to government or law enforcement officials, in response to a lawful request by a public authority or when we have to comply with a legal obligation, including the need to meet national security requirements according to Art. 6(1)(c) GDPR.
We may also disclose your information in order to respond to any claims, to protect our rights or the rights of a third party, to ensure the safety of any person, to prevent any illegal activity, or to pursue our legitimate interest in applying or enforcing our Terms of Use (including for the purposes of fraud protection), according to Art. 6(1)(f) GDPR.
Should the Company be involved in a merger, acquisition, reorganization or sale of assets, your Personal Data may be transferred as part of that transaction; we will require the recipient to honour this Policy.
We will obtain your consent prior to sharing your Personal Data with other companies if required under applicable data protection laws. In such instances, the legal basis is Art. 6(1)(a) GDPR.
Your Personal Data will only be used for the purposes laid out in this Policy or otherwise explicitly disclosed purposes at the time of requesting such Personal Data. We will provide you with the relevant information about using your Personal Data if handled outside of this Policy's scope.
You have the following rights:
You can delete your account at any time directly in the App under Settings ‚Üí Delete Account. Deletion removes your account, profile, email address, progress, virtual balances and items from our servers; it cannot be undone. You can also request deletion without the App by writing to info@riseforward.biz from the email address registered to your account (or, for a guest account, including your username). We may keep limited records where the law requires it, as described in "Data retention".
To process a request we may need to verify that the account belongs to you, for example by sending a code to your registered email address. We respond within one month, which may be extended by two further months for complex requests as the GDPR allows, and free of charge unless a request is manifestly unfounded or excessive.
If you live in California or in another US state with a comprehensive privacy law, you additionally have the right to know what personal information we collect, use and share, to delete and correct it, and to opt out of its "sale" or "sharing" for cross-context behavioural advertising. We do not sell personal information for money; personalized advertising through the networks named above may count as "sharing", and you can opt out of it through the consent form and the device settings described in this Policy. We do not knowingly sell or share the personal information of anyone under 16.
You can execute your abovementioned rights by contacting us on the contact details mentioned below.
You have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that our processing of your Personal Data infringes the applicable data protection laws. The supervisory authority competent for the Company is the Information and Data Protection Commissioner of Malta (idpc.org.mt). Please contact us at the contact details mentioned below, and we will assist you in identifying the respective competent supervisory authority.
We have implemented technical and organizational measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. All traffic between the App and our servers, including your password and access token, travels over encrypted connections (TLS). Data stored on your device is kept in the App's private storage, which other apps cannot read, and is excluded from cloud backup. Access to data on our servers and in our tools is restricted to the people who need it to operate the App. However, no security measures can be completely secure. We cannot ensure or warrant the security of any information transmitted through the App, and you do so at your own risk. Please use a password that you do not use for other services. Should a breach affecting your Personal Data ever occur, we will notify the competent authority and, where the law requires it, you.
Your Personal Data is stored along with other information for as long as it is needed to ensure you can use the App, to comply with relevant laws (including those regarding document retention) and to provide the Services to you. Your Personal Data is also stored in order to resolve any disputes that may arise with any parties, which are otherwise deemed necessary for us to conduct our business.
To determine the appropriate retention period for Personal Data, we consider a number of factors, including what Personal Data we are processing, the risk of harm from any unauthorized disclosure, why we are processing your Personal Data and whether we can achieve this outcome by another means without having to process it. In particular:
When we no longer need to process your Personal Data for the purposes set out in this Policy, we will delete it from our systems.
Please contact us at the contact details listed below if you have any questions regarding the specific retention times for certain types of Personal Data.
We do not use your Personal Data to make decisions by automated means with legal or similar effects for you. Tournament rankings and in-game rewards are calculated automatically from your simulated results under the rules of the App and have no real-world value. The selection of a personalized advertisement according to your consent choices is automated profiling for advertising purposes only, and you can refuse it as described in this Policy.
If you have any concerns, queries, or questions regarding this Policy, please contact us at info@riseforward.biz or by post at Riseforward Ltd., Level 1, Blue Harbour Business Centre, Ix-Xatt Ta' Xbiex, Ta' Xbiex XBX 1027, Malta. Please mention "Crypto Apex" in the subject line so that your message reaches the right person.
This Policy may be amended occasionally, for example when the App, its software components or the law change. Any such changes will be made available through updates of this page, which will show a new "Last updated" date at the top; for material changes we will also inform you inside the App. Therefore, please refer back to this Policy regularly.