Contorta Development

1. Introduction

BountyLoop ("we," "us," or "the app") is a two-sided app-testing marketplace: developers fund testing campaigns, and testers reserve spots, install apps, complete milestones, and submit feedback in exchange for Bounties (spendable currency) and Kudos (reputation). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. Information We Collect

Account information: email address and display name from sign-in, plus optional profile fields you add — bio, specialties, devices, platforms, category interests, and an avatar.
Campaign and app data: if you submit or claim an app, we collect the details you provide about it (store link, description, developer/support contact) and the campaigns you create (objectives, milestones, questions, targeting, budget).
Testing activity: campaigns you reserve, installation and milestone screenshots you upload, your written feedback and bug reports, and the resulting scores, Bounties, and Kudos.
Google account email for Play closed testing: if you reserve a spot on a campaign running as a Google Play closed test, you provide the Google account email you use on Google Play, with explicit consent, so the developer running that campaign can add you to their Play tester list. See Section 4 below.
Economy records: your Bounty and Kudos ledgers — grants, purchases, spends, and transfers — and your current wallet balances.
Payment information: if you purchase Bounties or a developer subscription, payment is handled entirely by Stripe; we never receive or store your card details.
Device/browser data: standard technical data such as IP address and browser type, used for security and abuse prevention.

3. How We Use Your Information

Operate the testing marketplace: match testers to campaigns, verify installs and milestones, score feedback, and settle Bounty/Kudos payouts.
Let developers manage their campaigns, apps, and (on paid plans) see who's completed which milestones.
Process Bounty purchases and subscription payments through Stripe.
Prevent fraud, duplicate or copy-paste feedback, and abuse of the economy.
Communicate with you about your account, reservations, campaigns, and payouts.
Comply with legal obligations.

4. Google Account Email for Google Play Closed Testing

Some campaigns run as a Google Play closed test rather than a public or open-testing release. To join one, you provide the Google account email you use on Google Play and give explicit consent before reserving the spot. That email is shared with the one developer running that specific campaign, for the sole purpose of adding you to their Play Console tester list so you can install the app through Google Play's own opt-in link.

Your email is not visible to any other developer, to other testers, or anywhere else in the app — it is stored in a record only BountyLoop's own systems and administrators, and the one developer you consented to share it with, can access, and is never bundled into our general-purpose data exports. We delete it automatically no later than 14 days after that specific test assignment ends (whether completed, expired, or cancelled). If you'd like it removed sooner, contact us using the details in Section 12.

5. AI Processing

BountyLoop uses Base44's managed InvokeLLM integration, configured to use an OpenAI model, to verify installation and milestone screenshots, score the quality of written feedback, and review campaigns for clarity and policy issues. Base44 provides the application and managed AI-integration layer, and OpenAI operates the underlying model.

The screenshots and text you submit for a testing step are transmitted through Base44 for processing by the configured OpenAI model, and the resulting output (pass/fail, a quality score, review notes) is used to verify your submission and calculate payouts. AI output may be imperfect; developers can review and challenge a result, and admins can intervene.

7. Data Security

Access to your data is controlled by authentication and row-level security policies, so each user can generally only access their own records (plus what's shared with a campaign's developer as described above). Economy-affecting records (Bounty and Kudos balances, transaction ledgers) are only ever written by server-side logic, never directly by a client.

8. Your Privacy Choices

Profile visibility: choose whether your tester profile is public or private in Profile settings.
Account deletion: delete your account from Profile → Delete account at any time. This removes your profile and signs you out; it does not retroactively erase completed economy or testing history records, which we keep for ledger integrity.
Google account email: ask us to delete a Play closed-test consent record early — see Section 4 and Section 12.

9. Data Retention

We retain your data for as long as your account is active. Google account emails collected for Play closed testing follow the shorter retention rule in Section 4. Economy ledger records (Bounty/Kudos transactions) are retained even after an individual campaign or assignment ends, to keep the economy's audit trail accurate.

10. Children's Privacy

The app is not intended for use by children under 16 and we do not knowingly collect data from them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above.

12. Contact Us

BountyLoop is developed by Contorta. For privacy questions, data access, or deletion requests, contact us at contact@contorta.dev. You can also delete your account at any time from Profile → Delete account.