Privacy Policy

What we collect

• Account: email address, display handle, home state, and the timestamps of your age confirmation and your acceptance of the terms and this policy.
• Your work: saved number sets, slips and slip lines, game alert subscriptions, and any push subscription you create.
• Photographs: images you upload of handwritten lists, and the structured lines read from them. Stored in a private bucket, reachable only through short-lived signed links.
• AI usage: a per-request log of which feature was used, which model, token counts and outcome, so we can enforce fair-use limits.
• Device and usage: IP address, browser and device type, and aggregate page and feature counts. Analytics only runs if you turn it on.

What we never collect

• Social Security numbers or any government identifier.
• Payment card, bank account, or any financial account details for lottery play — we take no money for play, ever.
• Precise geolocation. Home state is a self-selected two-letter code, nothing finer.
• Contacts, photo library access beyond the images you explicitly pick, or biometrics.

Why we hold it

To run your account and keep you signed in; to save your slips and number sets so they are there next time; to read a photographed list into lines; to send the alerts you asked for; to enforce usage limits and prevent abuse; and to meet legal obligations. Where the law requires a basis, ours is performance of a contract with you, your consent (analytics, alerts), or our legitimate interest in a service that is not abused.

How long we keep it

• Account and profile: until you delete the account.
• Slips and saved sets: until you delete them, or the account.
• Uploaded photographs: deleted when you delete the set, and automatically after 90 days.
• AI usage log: 12 months, then deleted.
• Server and security logs: up to 30 days.
• Deletion: your data is removed from live systems immediately and from backups within 30 days.

Who processes it for us

• Supabase — database, authentication and private file storage (United States).
• Lovable — application hosting and the AI gateway that routes model requests.
• AI model providers — OpenAI and Google, reached through that gateway, for reading photographs, parsing plain-language plays, and answering Learn questions. Requests are not used to train their models.
• Our results feed vendor — supplies published draw results. It receives no personal data; we fetch results server-side and store them ourselves.
• Analytics — aggregate product analytics, only if you consent.

We do not sell or share personal information for cross-context behavioural advertising.

Your rights

Wherever you live, you can see, export, correct and delete your data. Under the CCPA you additionally have the rights to know, delete, correct, opt out of sale or sharing (we do neither), and not be discriminated against for exercising them. Under the GDPR you additionally have rights of access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority.

Two of these are self-service and immediate on the account page: Export all my data downloads everything we hold as JSON, and Delete my account erases your profile, slips, saved sets, photographs, alerts and logs, then removes the login itself. For anything else, email privacy@lottoslip.app and we will respond within 30 days. You may use an authorised agent.

Cookies and local storage

Strictly necessary storage keeps your session, your draft slip, and your break and reminder settings on your device. Preference storage remembers your last state and game. Analytics storage counts page and feature use in aggregate. Only the strictly necessary category is on by default, "reject all" is honoured in full, and there are no advertising or tracking cookies at all.

Children's privacy

LottoSlip is not directed to children and is not for anyone under 18. Accounts require an explicit age confirmation of 18+, or 21+ where the state's minimum is 21. We do not knowingly collect information from minors; if we learn we have, we delete it and close the account. A parent or guardian can write to privacy@lottoslip.app to have a minor's data removed.

Security and changes

Data is encrypted in transit and at rest, personal rows are protected by row-level security scoped to your user id, and photographs sit in a private bucket. No system is perfect; we will notify affected users of a breach as the law requires. Material changes to this policy appear here with a new date.

Contact

Privacy requests and questions: privacy@lottoslip.app.