Summary

Below is a summary of some key terms of this Privacy Policy. This summary is for your reference only and does not form part of the Privacy Policy.

We, GetFuture Inc. listen to our users and we are committed to protecting the principles of privacy and fair use that underpin our values to offer a transparent and secure service. We want you to be confident that your personal data is safe and secure with us.

This Privacy Policy explains the following

how we collect your personal data;
what personal data we collect;
how we use your personal data;
who we share your personal data with;
what measures we take to keep your personal data safe;
how long we keep your personal data;
age limits and;
the rights and choices you have when it comes to your personal data.

Privacy Policy

Last updated – November 2025

1. Who are we?

Surfio (referred to herein as “Surfio”, “our”, “we” or “us”) gives utmost importance to your (referred to herein as “User” or “you”) privacy and the protection of your personal data. We prepared this Privacy Policy to inform you on which personal data we collect, how and why we process personal data and how can you practice your rights pertaining to your personal data. It should be read together with our Terms of Service Cookie Policy and Purchase, Cancelattion and Refund Policy.

2. Data controller

Surfio is the data controller with respect to your personal data we process over Surfio website, related features and services, and other linked channels, mobile websites or applications (“Platform”). You can find our contact details below:

GetFuture Inc.
E-mail: hey@surf.io

3. How do we collect personal data?

We may obtain personal data from you through the websites, mobile applications or other similar devices, channels or applications operated by or on behalf of Surfio.

4. What personal data do we collect?

Surfio provides applications, content and other digital products and other in-app services and related services over the Platform (“Services”).

We collect personal data about you when you submit your data in the course of registering for and/or using our Services for example we may collect your name surname, username, e-mail address, phone number.

Note that it is your responsibility to check and ensure that all data, content, material or data you provide us is correct, complete, accurate and not misleading.

This Privacy Policy does not apply to the privacy practices of third parties that we do not own or control, including but not limited to any third party websites, services, applications, online resources to which this Site may link or otherwise reference (collectively Third Party Services or TPS) that you may access through the Services. We take no responsibility for the content or privacy practices of any TPS. We encourage you to carefully review the privacy policies of any TPS you access.

Data that you may provide voluntarily

Certain parts of our Services may ask you to provide personal data voluntarily. For example, we will ask for certain data in order for you to register for an account with us, to begin using our Services, to subscribe to marketing communications from us, and/or to submit enquiries to us, such as:

ID information and Contact Information: (such as name, surname, phone number and email address);
Information security data (username, password, IP address, logs, device, browser, operating system, authentication tokens)
Marketing information (cookie records)
Purchase Metadata: we do not collect or store payment card details directly. Instead, we may receive limited transaction-related metadata (e.g., transaction ID, purchase timestamp, currency, and status) from third-party platforms such as Apple, Google, or payment processors to fulfill your purchase and comply with refund requests or fraud prevention requirements.
Transactional information (purchase information, subscriptions, support tickets); and
Other data you choose to give us (such as data to identify a lost account).

We will try to explain to you at the point we ask you to provide your personal data which personal data that you are asked to provide, and the reasons why you are asked to provide it.

When using our services, in addition to providing data about yourself by creating a profile during your account creation process, you also provide data when you take certain actions that are intended to be public in nature such as when you sign up for our newsletter, create an account, request more information on our contact us page or respond to a survey or questionnaire.

Data that may be collected automatically

When you use our Services and if you have given express consent, we may also collect data automatically from you and/or your device which may be considered personal data under applicable data protection laws, such as:

Data and analytics about your use of our Services;
Your IP address and mobile device identifiers (such as your device ID, advertising ID, MAC address, IMEI);
Data about your device, such as device name and operating system, browser type and language;
Data we collect with cookies and similar technologies;
Broad geographic location based on your IP address;
Precise geo-location data (GPS, with your consent); and
Data about your use of our Services, such as in application interaction and usage metrics.

Advertising ID means Apple Identifier for Advertisers (“IDFA”) on Apple and Google Advertising Identity (“GAID”). These are unique identifiers for mobile device that advertisers use for interest based advertising. They are consistent across all apps and thus allow cross-app tracking. On Apple you can opt-out this by choosing “limit ad tracking” option from privacy settings. On Google Android you can opt-out by choosing “Opt-out of interest based ads”.

Advertising IDs are non-permanent, non-personal identifiers, which are uniquely associated with your device. Similar technologies include tracking pixels within ads. These technologies allow companies (including marketers and advertisers) to recognise your device when you use websites and applications.

Data about your device refers to data about your device type, device model, device maker, device operating system and its language or other technical data like screen size or processor, or combination of this data available from a device for a developer for checking the device compatibility with a particular application.

Some of this data may be collected using cookies and/or similar technologies (such as "SDKs" or software development kits), as explained further below.

Data that we may obtain from third party sources

We may receive personal data about you from third party sources. For example, if you clicked on an advertisement to direct you to one of our Services we may be provided with data from which ad-network and advertising campaign the install originated from.

You may choose to connect to our Services via your social media account. Exactly what data we receive from your social media will depend on your social media privacy settings, but it would typically include your basic public profile data such as:

your username;
age range; and
gender

The data that we may collect from our partners could include;

Data we receive if you link a third-party tool with our Services (such as Facebook, Apple or Google);
Demographic data (such as to determine the location of your IP address);
Data to fight fraud (such as click fraud in advertising);
Data from platforms that our Services run on (such as to verify payment); and
Data for advertising and analytics purposes, so we can optimise the Services we deliver to you.

We do not request or intend to collect any special or sensitive categories of data such as any data on health, race, religion, political opinions, sexual preferences or orientation.

You may opt-out of receiving marketing information at any time: such marketing emails tell you how to opt-out. Please note, even if you opt out of receiving marketing emails, we may still send you non-marketing emails. Non-marketing emails include emails about your account with us (if you have one) and our business dealings with you; to process payments you make via the Services; and as we believe necessary or appropriate (a) to comply with applicable laws; (b) to comply with lawful requests and legal processes, including to respond to requests from public and government authorities; (c) to enforce our Policy; and (d) to protect our rights, privacy, safety or property, and/or that of you or others.

You may contact us anytime to opt-out of: (i) direct marketing communications; (ii) our collection of sensitive personal data; (iii) any new processing of your personal data that we may carry out beyond the original purpose. Please note that your use of some of the Services may be ineffective upon opt-out. You may also: (A) access the data we hold about you at any time via your account or by contacting us directly; (B) update or correct any inaccuracies in your personal data by contacting us; (C) in certain situations, for example when the data we hold about you is no longer relevant or is incorrect, you can request that we erase your data. You may contact us at hey@surf.io anytime for any other questions you may have about your personally identifiable information and our use of it.

5. Third parties whom the personal data is shared with

We may share your personal data with public authorities and institutions if we are required by laws, regulations or other legal obligations to do so.

We also share your personal data with our business partners within the context of the above purposes and legal grounds, in order to be able to provide our services over the Platform (such as IT service providers).

You understand that your personal data will be transferred to merchants, mobile applications, web based products and websites you purchase or subscribe to. Please note that additional information may be requested from you by applications and websites. You will be subject to relevant agreements and policies provided by the applications and websites including the end user license agreements and privacy policies. Please review such privacy policies to get informed about the processing of your personal data specifically by the relevant application or website.

6. How do we use your personal data?

We may use your personal data:

to enable you to access and use the Services. For example;
- To create user accounts and profiles;
- To provide you with the correct versions of our applications and/or games; and
- To send you service related communications including confirmations, technical notices, updates, security alerts, and support or administrative messages
- to provide the Services
- to enable transactions with respect to Services
- to enable you to track your transactions
- based on the legal grounds that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract and processing is necessary for compliance with a legal obligation to which the controller is subject.
to personalise and improve aspects of our Services. For example;
- To respond to your customer support requests;
- To receive error messages about any issues you / your device encounters with our Services to enable us to fix bugs and interoperability issues;
- To detect and prevent illegal activities;
- To track application installs, for purposes of measuring the effect of our marketing campaigns;
- To conduct optional user feedback surveys;
- To remember you next time you visit one of our Services; and
- Communicate with you about promotions, rewards, upcoming events, and other news about products and services offered by us.
to communicate with you, including some or all of the following:
- To provide you with in-app offers and rewards based on your interaction with our Services;
- To serve you with relevant targeted advertisements;
- To make you offers to purchase in-app items on discount based on your activity with our application and your purchase history; and
- To send you marketing communications and/or newsletters if you have subscribed for them about rewards and promotions.
for research, such as analysing market trends and customer demographics;
to comply with legal obligations, including to prevent and/or detect fraud or provide disclosure to the authorities when required by applicable law.

7. Why do we process your personal data?

We will only collect and use your personal data (as described in section 4) in accordance with data protection laws. Our grounds for processing your personal data are as follows:

Consent – Where necessary we will only collect and process your personal data if you have given your clear and affirmative consent for us to do so.
Legitimate Interests – We may use and process some of your personal data where we have sensible and legitimate business grounds for doing so. Under European privacy laws there is a concept of “legitimate interests” as a justification for processing your personal data. Our legitimate interests for processing your personal data are for us to enable you access and use of our Services, to communicate with you about our Services and to improve our Services.
Legal obligations – We may need to process your personal data when we are required to comply with a legal obligation.
Provided that it is directly related to the establishment or performance of the contract, it is necessary to process the personal data of the parties to the contract - We may need to process your personal data when we provide Services to you or when we communicate with you about the Service. It includes that the receive and administering premium services and packages; and processing personal data to handle payment processes.

8. Who do we share your personal data with?

When you use any of our Services, we may only disclose your personal data to the following parties:

to our group companies, third party services providers and partners who provide data processing services to us. For example, to support the delivery of, provide functionality on, or help to enhance the security of our Services, or who otherwise process personal data for purposes that are described in this Privacy Policy or notified to you when we collect your personal data.
to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary.
to any other person with your consent to the disclosure.
your information regarding the payment and payment methods (including payment institutions, disclosed to PSP (payment service provider), payment broker, payment service provider, technical integrator) of the Services, including those located outside of your region, in the performance, development and analysis of the core service we provide under our Terms of Service agreement; and information on payment and payment methods are transferred to our Business Partners as a third party so that our Company, as data controller, can fulfill its legal obligation.

In addition, your personal data may and will be transferred abroad and processed by our Group Companies, third party service providers and partners located outside the borders of your country, based on your approval. By accepting our terms of Service, you are deemed to have consented to the processing and transfer of your personal data abroad. If you do not accept the processing and transfer of your personal data abroad, you may choose not to use our Services.

9. What cookies do we use?

A cookie is a very small text file placed on your computer or device. We and our partners use cookies and similar technologies to provide and personalise our Services, analyse use, target advertisements and prevent fraud. You can disable cookies in your browser settings, but some parts of our Services may then not function properly.

We use two broad categories of cookies: (1) first party cookies, served directly by us to your computer or mobile device, which are used only by us to recognize your computer or mobile device when it revisits any site or application that is part of the Services; and (2) third party cookies, which are served by service providers on sites or applications and can be used by such service providers to recognize your computer or mobile device when it visits other websites.

8. What advertisements do we show on our Services?

The advertisements that you see displayed on our Services are delivered on our behalf by certain third-party advertising companies. No data which identifies you, for example your name, address, email address or telephone number, is used to provide this advertising. In order to display advertising most likely to be relevant to you, these third-party advertisers may place or recognise a unique cookie on your browser. This cookie does not collect personal data about you nor is it linked to any identifiable data about you. By using our Services, you are consenting to the use of these third-party cookies for these purposes.

If you would like to learn more about online advertisements and your choices about how this data may be used by these companies, please find more information here http://www.youronlinechoices.com/uk/your-ad-choices.

10. What steps do we take to keep your personal data safe?

Your personal data’s security is very important to us. This is why, where it’s appropriate, we use HTTPS to help keep data about you secure. However, no data transmission over the internet can be guaranteed to be totally secure.

We do our best to keep the data you disclose to us secure. However, we can't guarantee or warrant the security of any data which you send to us, and you do so at your own risk. By using our Services, you accept the inherent risks of providing data online and will not hold us responsible for any breach of security.

11. How long do we keep your personal data?

Unless a longer retention period is required or permitted by law, we will only retain your personal data only for as long as reasonably necessary to fulfil the purposes outlined in this Privacy Policy and for our legitimate business interests, such as to comply with our legal obligations, resolve disputes, and enforce our agreements. We will for example periodically de-identify unused user accounts and regularly review our data sets.

12. Do we transfer your personal data outside of the country you are resident?

Our Services are global by nature and your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country. We take steps to ensure adequate safeguards are in place to protect your data as explained in our Privacy Policy.

Your personal data will be transferred to our Group Companies, third party service providers and partners located outside the borders of your residence country, based on your consent. By accepting our terms of service, you are deemed to have consented to the processing and transfer of your personal data abroad. If we do not accept the processing and transfer of your personal data abroad, you can choose not to use our Services.

The Service is owned by Surfio and may be accessed in Europe, USAand etc. For data protection purposes, Surfio is the controller and, unless otherwise noted, is also the processor of data. Information collected may be retained, and may be stored, processed, accessed, and used in jurisdictions whose privacy laws may be different and less protective than those of your home jurisdiction.

It may also be necessary to disclose and transfer some data to third parties in order to ensure optimal 24/7 service fulfillment. All third parties involved have been engaged under a binding confidentiality agreement and have a limited access to Surfio database for the purposes of providing support.

13. Age Limits

We do not knowingly collect or solicit personal data about or direct or target interest based advertising to anyone under the age of 18 or knowingly allow such persons to use our Services. If you are under 18, please do not send any data about yourself to us, including your name, address, telephone number, or email address. No one under the age of 18 should provide us any personal data. If we learn that we have collected personal data about a child under the age 18, we will delete that data as soon as it is practicably possible.

14. Your personal data rights and how to contact us

You have certain rights under existing data protection legislation including the right to request a copy of the personal data we hold about you, if you request it from us in writing.

Your right to learn whether your personal data is being processed and to request information about it if it is;
Your right to learn the purpose of processing your personal data and whether they are used in accordance with the purpose;
Your right to know the third parties to whom your personal data is transferred, at your resident country or abroad;
Right to access: the right to request copies of your personal data from us;
Right to correct: the right to have your personal data rectified if it is inaccurate or incomplete;
Right to erase: the right to request that we delete or remove your personal data from our systems;
Your right to request notification of the transactions set forth in the article v. and vi. to third parties to whom personal data has been transferred.
Right to restrict our use of your data: the right to ‘block’ us from using your personal data or limit the way in which we can use it;
Right to data portability: the right to request that we move, copy or transfer your personal data;
Right to object: the right to object to our use of your personal data including where we use it for our legitimate interests.
Your right to object to the emergence of a result against the person himself by analyzing your processed data exclusively through automated systems; and
Your right to demand the compensation of the damage in case your personal data is damaged due to unlawful processing.

To make enquiries, exercise any of your rights set out in this Privacy Policy and/or make a complaint please contact us at hey@surf.io with fulfilled Data Subject Request Form.

15. Changes to this Privacy Policy

We may change this Privacy Policy at any time. The latest version of the Privacy Policy will be published on the Platform in case of any changes. You are responsible for periodically checking the latest version on the Platform.

16. Information Relating to Children

Our Services are intended for general audiences over the age of 18 years old. We do not knowingly collect information from children under the age of 18 years old. If you are not over 18 years old then do not download or use our services. If you believe that we may have personal information from or about a child under the age of 18 years old, please contact us at the applicable email hey@surf.io (please include your name, mailing address, and email address). Note that we'll attempt to delete the account of any child under the age of 18 that's reported to us as soon as possible. You are responsible for any and all account activity conducted by a minor on your account.

Checking your device…