Privacy policy
Last updated: May 12, 2026
The short version
Almost everything stays on your phone. We only collect what we need to run the parts of the app you actually use. We don't sell your data.
What's stored on your device
Your tickets, pools (names, members, contributions, photos), favorites, weekly budget, app preferences, practice-game balance and history, and a local cache of lottery results. It lives in the app's private storage - other apps can't see it.
Photos you attach to pool tickets stay on your device. They don't go to our servers (cloud sync covers ticket data only, not photos).
What we get when you sign in
Signing in is optional. You only need it for Pro features like cloud sync, win-alert pushes, and pools across devices. If you use Sign in with Apple, Apple sends us a unique ID and an email (which may be Apple's relay address). If you use email sign-in, we get the email you typed.
We never see your password, payment info, or anything else from your Apple ID.
Cloud sync (Pro)
When you're signed in on the Pro plan, your tickets, pools, and favorites sync to our backend over an encrypted connection so you see the same data on every device you sign in on. Only you can read your own data - access is locked to your account.
Sync is per-row and merge-only: changes on this phone push up, changes from other devices pull down, and nothing on this phone is wiped without your action.
Heads up: photo files don't sync. Only the row data (tickets, pools, favorites) does. We'll update this policy if that changes.
If you delete your account on one device, every other device signed in to the same account is signed out the next time it opens or comes to the foreground. Local data on those devices stays on those phones until you sign in again or delete the app.
Push notifications
Buy reminders and draw-result reminders are scheduled by your device - they don't talk to our servers and work even if you're not signed in.
Live win alerts (the push you get when a ticket actually hits) require sign-in. Your device sends a push token to Expo Push Service (operated by Expo, Inc.); we store it next to your account so the win-checker can deliver the alert.
You can turn any of this off anytime in this app under Settings → Notifications, or revoke notifications entirely in iOS Settings.
Ticket scanning
The scanner exists for one purpose: reading the numbers and draw date off a printed lottery ticket. Only point the camera at a lottery ticket. Do not scan people, faces, ID cards, credit cards, medical records, anything sexual or violent, or anything involving a minor. Misuse can violate our terms and the terms of the AI provider that processes the image.
When you scan, the cropped image is sent over an encrypted connection to our backend, which forwards it to Google Gemini for OCR. We don't keep the image after Gemini returns; only the numbers it extracted get saved on your device. Google may apply its own safety filters and retention policy to the image during processing.
If a scan returns an error or the result looks wrong, double-check by typing the numbers manually instead of repeating the scan.
Subscriptions
Pro is billed by Apple through the App Store. We use RevenueCat to check whether your subscription is active and unlock Pro on your device. Apple sends us a transaction ID and an entitlement status - that's it. We never see your card, billing address, or full Apple ID.
Ads
Free users see banner ads from Google AdMob. AdMob may use your device ID, IP, and in-app activity to personalize ads, subject to your iOS App Tracking choices. You can opt out of personalized ads in iOS Settings → Privacy & Security → Tracking. Pro users don't see ads.
Lottery data
Winning numbers, jackpots, prize-tier info, past winners, and draw videos come from public sources (state lottery sites, Multi-State Lottery Association, NY Open Data, powerball.net, mega-millions.com, and the official Powerball / Mega Millions YouTube channels). This data is about the lotteries, not about you.
Who we share data with
A few service providers run pieces of the app on our behalf, and each only sees what it needs to do its job:
- Our backend service hosts the database, sign-in, and the edge functions (cloud sync, win-checker, OCR forwarding).
- Expo, Inc. - push token delivery and build tooling.
- Google Gemini - ticket OCR. Receives the cropped scan only.
- Google AdMob - banner ads for free-tier users (Pro is ad-free).
- RevenueCat - checks whether your Pro subscription is active.
Apple is also involved as the platform: sign-in with Apple, App Store billing, push delivery to your device.
What we don't collect
We don't touch your contacts, calendar, browsing history, location (beyond what an IP address tells any web server), health data, or financial accounts.
We don't sell or rent your data. Ever.
Your rights
Want a clean slate? Delete the app from your home screen - uninstalling wipes everything we have on the device.
Sign out anytime to stop anything happening on our servers.
Have cloud-synced data you want gone? Email us at the address below and we'll delete it within 30 days.
California residents: you have extra rights under the CCPA. Email us and we'll handle access, correction, or deletion requests.
Kids
This app isn't for kids. You need to be 18+ (or 21+ in some states). We don't knowingly collect anything from anyone under 18. If you think a child gave us their info, email us and we'll delete it.
Updates to this policy
We may change this from time to time. The "Last updated" date at the top tells you when. If you keep using the app after a change, that counts as accepting the new version.
Contact
Questions or requests: support@lottopal.app