Moby Phygital Media Private Limited · Operating www.mobyrewards.com and the Moby Rewards platform (web and app) · Effective Date: 14 July 2026
Moby Phygital Media Private Limited acts as a "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data we process in connection with www.mobyrewards.com, our app-based rewards, and our affiliate network. This Privacy Policy explains what personal data ("Data") we collect from you as a "Data Principal", why we collect it, how it is used, and the rights available to you.
We do not sell your personal data to any third party, and we do not share your personal data with third parties for their own independent marketing use. Where we do share limited data — for example, with the Shopify merchant whose store you are shopping on, or with a payment processor to pay out cashback — it is only to the extent necessary to provide the Services.
Consent for the purposes described in this Policy is collected separately from, and is not bundled into, your acceptance of our Terms & Conditions, in line with the DPDP Act's requirement that consent be free, specific, informed, and given through clear affirmative action.
We use this data only to: (a) log you in and maintain your Moby Rewards account; (b) show and let you redeem exclusive coupon codes; (c) calculate, credit, and notify you about cashback; and (d) send you WhatsApp messages about your own account activity, such as cashback that is about to expire, so you don't lose value already earned.
We access this data because Shopify has authorised us, as an approved partner app, to access the relevant merchant and customer data; the merchant has agreed to Shopify's own platform and privacy terms; and the shopper has, in turn, accepted the merchant's terms, which disclose the use of apps such as ours. We separately seek your affirmative consent on mobyrewards.com for WhatsApp/marketing communication and for any use beyond operating your cashback account.
We do not sell or otherwise share your mobile number or order data with any party outside what is necessary to operate the cashback and coupon service described above.
You may opt out of WhatsApp notifications (other than transactional messages required to operate your account, such as OTPs) at any time by replying STOP or through your account settings, as detailed in the message itself.
In the scratch-card model, the partner app manages the end-user relationship directly, including issuing the scratch card after a user's payment. Moby typically does not directly collect personal data of the partner app's end users; our role is to supply the exclusive offer/coupon content shown on the card and, once a user chooses to redeem an offer with a brand partner, to receive the minimum data needed to attribute and validate that redemption. Because the partner app controls the user experience and initial data collection, the partner app's own privacy policy is the primary disclosure to its users for that stage. Any data Moby receives in this flow is used solely to validate the redemption, attribute it for settlement purposes, and prevent fraud.
What we collect and why is described in full in our Affiliate Network Terms of Service. In summary: registration data (name, email, phone, website/social handles, payment/KYC/tax details), tracking data (clicks, conversions, and sales attributed to your unique link), and payout data. This is used to verify eligibility, attribute sales, calculate and pay commissions, communicate campaign/payout updates, and meet our tax/regulatory record-keeping obligations. We share the minimum necessary data with payment processors and, in aggregated/anonymised form, with brand partners for campaign reporting. We do not sell Affiliate data or share your personal contact details with other Affiliates or unrelated third parties.
Subject to the DPDP Act and its rules, you have the right to:
To exercise any of these rights, write to us at support@mobyads.co.in. We will acknowledge your request and aim to resolve it within the timelines prescribed under the DPDP Act and its rules.
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law, after which it is deleted or anonymised. We use reasonable technical and organisational safeguards — including access controls, encryption in transit, and reliance on Shopify's governed app ecosystem for merchant data — to protect personal data. Where any personal data is processed or stored outside India, we do so consistent with the DPDP Act. Our Services are not directed at, and we do not knowingly collect personal data from, individuals below the age of 18. mobyrewards.com and our affiliate tracking links use cookies and similar technologies to keep you logged in, attribute sales correctly, and improve our Services; disabling cookies may affect attribution and cashback tracking.
Grievance Officer: Mohit Gill
Email: mohit@mobyads.co.in
Phone: +91 88000 12898
Registered address: Plot 406, Sector 37, Pace City 2, Gurgaon 122001, Haryana, India
We will acknowledge grievances promptly and work to resolve them within the timeline prescribed under the DPDP Act. If you remain dissatisfied, you may escalate your complaint to the Data Protection Board of India once it is operational.
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law, including forthcoming DPDP Rules as they take effect. We will post the updated policy on this page with a revised Effective Date, and where changes are material, we will provide additional notice through the Services.
This document is a working draft prepared to reflect the business model described by Moby Phygital Media Private Limited, informed by common industry practice among Shopify-based cashback apps and Indian affiliate networks. It should be reviewed by qualified legal counsel before publication.