Privacy Policy

The Ximopi rewarded-survey platform is operated by Ximopi Company Limited from 19 Carpenter St, Level 2, Singapore 059908 and serves users across Southeast Asia. Ximopi Company Limited is the controller of the personal data described here. Data enquiries: info@ximopi.com.

• Account: the email address you sign in with.
• Profile: display name, country, university, field of study, year of study, gender.
• Survey responses and metadata: your answers, submission time, and time spent on each question and the whole survey.
• Surveys you post: questions, audience criteria and results.
• Wallet and transactions: coins earned, spent, topped up and withdrawn; transfer references for top-ups.
• Payout details when you withdraw: MoMo number, or account holder name, account number and bank.
• Messages you send us.
• Technical data: IP address, browser and device type, access logs.

We don't intentionally collect sensitive data. Survey owners may not ask for identifying or sensitive data unless it's necessary and clearly explained (see our Terms).

• Create and secure your account (to perform our contract with you).
• Show you surveys that match your profile (contract).
• Check response quality and detect fraud (legitimate interests).
• Credit coins and process top-ups and withdrawals (contract, legal obligation).
• Reply to your messages and requests.
• Comply with accounting, tax and anti-fraud laws.

Where the law requires consent, we ask for it when you create your account, and you can withdraw it at any time. We don't sell personal data, and we don't use it for advertising.

Survey responses are checked automatically (attention check, timing, straight-lining, meaningless text). Responses that fail earn no coins. You see the reason immediately and can ask for a human review by emailing us within 14 days.

Survey owners receive your answers with only a random ID, your country, university, field, year, gender and completion time. They never receive your name, email, phone number or payout details.

We use these providers to run the service, under contracts that require them to protect your data:

• Google (Firebase, Google Cloud) — database, sign-in, sign-in emails
• Vercel Inc. — website hosting
• Banks and e-wallets — only the details needed to send your withdrawal

We may disclose data when required by law, or to protect the rights and safety of our users and of Ximopi.

Your data may be stored and processed outside your country, including outside Singapore. Where that happens, we make sure it is protected to a standard comparable to the law where you live and complete any transfer formalities the applicable law requires.

• Account and profile data: while your account is active; deleted within 30 days of an account-deletion request.
• Coin and money transaction records: for as long as accounting and tax laws require.
• Responses delivered to survey owners: in anonymous form, kept by the survey owner for the research purpose they stated.
• Technical logs: for a limited period, for security.

Depending on where you live, you can: know about and access your data; correct inaccurate data; delete your data; withdraw consent; object to or restrict processing; and receive a copy of your data.

Email info@ximopi.com with the subject “Data request” from your account's address. We reply within 30 days. You can also complain to the data protection authority in your country.

We only use essential storage: keeping you signed in and remembering your language. We don't use advertising cookies or third-party analytics. If we ever add analytics, we'll update this policy and ask for consent where the law requires it.

Ximopi is for people aged 18 and over. We don't knowingly collect data from anyone younger and will delete it if we find out.

The site runs only over HTTPS. Sign-in is passwordless (a link sent by email). Account data is stored separately from survey responses, and internal access is limited to people who need it. If an incident affects you, we'll notify you as the law requires.

We handle personal data under Singapore's Personal Data Protection Act 2012 (PDPA) and the data protection laws of the countries where our users live — including Vietnam's Law on Personal Data Protection and Decree 13/2023/ND-CP, Malaysia's PDPA 2010, Thailand's PDPA 2019, Indonesia's Law No. 27 of 2022, and the Philippines' Data Privacy Act of 2012.

We post changes here with a new effective date. For significant changes, we email you and notify you in the app before they apply.

Ximopi (operated by Ximopi Company Limited), 19 Carpenter St, Level 2, Singapore 059908. Email: info@ximopi.com.