سیاست حریم خصوصی

Privacy Policy (English)

Last updated: September 2026

This policy explains what Vikto (victoapp.ir and the Android app) collects, why we use it, and when we share it. Using the service means you accept this policy.

1. Information we collect

• Phone number: to create an account, sign in with a one-time code, and deliver rewards such as mobile credit or data.
• Device identifiers: Google Advertising ID (GAID) unless you have limited ad tracking; Android ID; manufacturer, model, OS version, and app version.
• Install checks: for install missions we may check whether a target app is already installed. We do not store your full app list.
• Sign-in SMS: with your consent during login, one SMS containing the verification code may be read so the code can be filled in. We do not have ongoing access to your inbox.
• Service activity: missions, coin balance, claimed rewards, and support tickets.
• Session data: sign-in tokens and appearance preferences stored on your device.

We do not collect precise location, contacts, camera, microphone, or photo library data.

2. How we use this information

• Create and secure your account
• Show relevant missions and verify completion
• Deliver rewards to the line or destination you choose
• Measure installs and advertising campaign performance
• Provide support, prevent fraud, and improve the service

3. Sharing

We do not sell personal information. We share data only as needed:

• SMS delivery: your phone number is sent to an SMS provider to deliver the login code.
• Ad measurement: advertising ID and device details may be shared with attribution services (including AdTrace) and the mission advertiser to confirm an install or completed mission.
• Reward fulfillment: for credit or data rewards, the destination number is sent to a telecom/reward partner.
• Legal requests: if required by law or a competent authority.

4. Retention and security

Account data is kept while your account is active. Sign-in uses a one-time SMS code, not a password. Traffic uses HTTPS. No method is perfectly secure; we take reasonable steps to protect your data.

5. Your choices

• You can see your account phone number in the in-app profile.
• To delete your account, send a support ticket in the app. Unused coins cannot be recovered after deletion.
• You can reset or limit your advertising ID in Android settings.

6. Children

The service is intended for people 18 or older, or with parental consent. If you believe a child created an account without consent, contact support.

7. Changes

We may update this policy. The date above shows the latest version. Continued use after an update means you accept the new policy.

8. Contact

For privacy questions, use the contact page or an in-app support ticket: app.victoapp.ir/tickets.