Privacy policy

Last updated: May 12, 2026

The short version

Almost everything stays on your phone. We only collect what we need to run the parts of the app you actually use. We don't sell your data.

What's stored on your device

Your tickets, pools (names, members, contributions, photos), favorites, weekly budget, app preferences, practice-game balance and history, and a local cache of lottery results. It lives in the app's private storage - other apps can't see it.

Photos you attach to pool tickets stay on your device. They don't go to our servers (cloud sync covers ticket data only, not photos).

What we get when you sign in

Signing in is optional. You only need it for Pro features like cloud sync, win-alert pushes, and pools across devices. If you use Sign in with Apple, Apple sends us a unique ID and an email (which may be Apple's relay address). If you use email sign-in, we get the email you typed.

We never see your password, payment info, or anything else from your Apple ID.

Cloud sync (Pro)

When you're signed in on the Pro plan, your tickets, pools, and favorites sync to our backend over an encrypted connection so you see the same data on every device you sign in on. Only you can read your own data - access is locked to your account.

Sync is per-row and merge-only: changes on this phone push up, changes from other devices pull down, and nothing on this phone is wiped without your action.

Heads up: photo files don't sync. Only the row data (tickets, pools, favorites) does. We'll update this policy if that changes.

If you delete your account on one device, every other device signed in to the same account is signed out the next time it opens or comes to the foreground. Local data on those devices stays on those phones until you sign in again or delete the app.

Push notifications

Buy reminders and draw-result reminders are scheduled by your device - they don't talk to our servers and work even if you're not signed in.

Live win alerts (the push you get when a ticket actually hits) require sign-in. Your device sends a push token to Expo Push Service (operated by Expo, Inc.); we store it next to your account so the win-checker can deliver the alert.

You can turn any of this off anytime in this app under Settings → Notifications, or revoke notifications entirely in iOS Settings.

Ticket scanning

The scanner exists for one purpose: reading the numbers and draw date off a printed lottery ticket. Only point the camera at a lottery ticket. Do not scan people, faces, ID cards, credit cards, medical records, anything sexual or violent, or anything involving a minor. Misuse can violate our terms and the terms of the AI provider that processes the image.

When you scan, the cropped image is sent over an encrypted connection to our backend, which forwards it to Google Gemini for OCR. We don't keep the image after Gemini returns; only the numbers it extracted get saved on your device. Google may apply its own safety filters and retention policy to the image during processing.

If a scan returns an error or the result looks wrong, double-check by typing the numbers manually instead of repeating the scan.

Subscriptions

Pro is billed by Apple through the App Store. We use RevenueCat to check whether your subscription is active and unlock Pro on your device. Apple sends us a transaction ID and an entitlement status - that's it. We never see your card, billing address, or full Apple ID.

Ads

Free users see banner ads from Google AdMob. AdMob may use your device ID, IP, and in-app activity to personalize ads, subject to your iOS App Tracking choices. You can opt out of personalized ads in iOS Settings → Privacy & Security → Tracking. Pro users don't see ads.

Lottery data

Winning numbers, jackpots, prize-tier info, past winners, and draw videos come from public sources (state lottery sites, Multi-State Lottery Association, NY Open Data, powerball.net, mega-millions.com, and the official Powerball / Mega Millions YouTube channels). This data is about the lotteries, not about you.

Who we share data with

A few service providers run pieces of the app on our behalf, and each only sees what it needs to do its job:

Apple is also involved as the platform: sign-in with Apple, App Store billing, push delivery to your device.

What we don't collect

We don't touch your contacts, calendar, browsing history, location (beyond what an IP address tells any web server), health data, or financial accounts.

We don't sell or rent your data. Ever.

Your rights

Want a clean slate? Delete the app from your home screen - uninstalling wipes everything we have on the device.

Sign out anytime to stop anything happening on our servers.

Have cloud-synced data you want gone? Email us at the address below and we'll delete it within 30 days.

California residents: you have extra rights under the CCPA. Email us and we'll handle access, correction, or deletion requests.

Kids

This app isn't for kids. You need to be 18+ (or 21+ in some states). We don't knowingly collect anything from anyone under 18. If you think a child gave us their info, email us and we'll delete it.

Updates to this policy

We may change this from time to time. The "Last updated" date at the top tells you when. If you keep using the app after a change, that counts as accepting the new version.

Contact

Questions or requests: support@lottopal.app