Privacy Policy

This policy explains what LottoBind collects, why, who it is shared with and the choices you have. LottoBind is made by Abizvo Inc. ("Abizvo", "we", "us"), which is responsible for your information. This is a draft for review by a lawyer before LottoBind is offered publicly.

What we collect

• Your account: your email address, the name your group sees, your country and region, your time zone, that you confirmed you meet the lottery age where you live, and which version of the Terms of Use you accepted and when. LottoBind does not use passwords for new accounts: you sign in with a code we email you, or with Apple, Google or Facebook.
• If you sign in with Apple, Google or Facebook: the account identifier that service gives us, and the email address and name it shares. We do not receive your password for those services, your contacts, your posts or your friends.
• Your pools: what you and the other members record — contributions and their payment method label, tickets and their numbers, which draws you took part in, prizes and payouts, notes, and the pool's rules.
• Ticket photos: photos of tickets the group adds. They are encrypted with a key that belongs to that pool and can be seen only by its members.
• Your signature: when you sign a pool's agreement, your typed name and the signature you draw, with the date. A signed agreement cannot be changed afterwards, because the group relies on it.
• Your devices: the push notification token of each phone you sign in on, so we can send the notifications you choose.
• Security records: when someone signs in, fails to sign in or changes account security, we keep the time, a shortened network address (the last part removed), the app or browser name, and a one-way hash of the email address typed. We use these to stop attacks on accounts.

We do not collect your location, your contacts, your photo library (only the photo you choose), your payment card or bank details, or anything about you from other apps or websites. LottoBind holds no money and processes no payments.

How we use it

• To run the app: show your pools, keep the records, send sign-in codes and the notifications you choose, and check tickets against official results.
• To keep accounts safe and investigate abuse.
• To follow the law and answer lawful requests.

We do not sell or rent your information, do not show advertising, and do not use your information to profile you for marketing. We do not put advertising or tracking software in the apps; the Facebook sign-in component is set not to send app events or advertising identifiers to Facebook.

Who sees it

• The members of your pools see what the pool records: your name, your contributions, the tickets, your participation, your share of prizes, your payouts and your signed agreement. Nobody outside a pool can see its records.
• Service providers who run parts of LottoBind for us, under contracts that limit them to that work: our hosting and database provider, our email delivery provider (to send sign-in codes and notices), Google Firebase Cloud Messaging and Apple Push Notification service (to deliver notifications), and Apple, Google or Facebook only if you choose to sign in with them. When LottoBind fetches official lottery results it sends nothing about you.
• Authorities, only when the law requires it.

How long we keep it

• Your account details stay while you have an account.
• Pool records — contributions, tickets, prizes, payouts and signed agreements — are kept for as long as the pool exists, because the other members' balances depend on them. If you delete your account they stay, shown as "Former member", without your email address.
• Security records are deleted after 400 days. Spent sign-in codes and links after 30 days. Ended sessions after 90 days. Notifications you have read after a year.
• Backups are encrypted and replaced on a rolling basis.

Your choices and rights

• See and download your information: in the app, Settings → Export my data.
• Correct it: change your name and region in Settings; ask your captain to correct a pool record.
• Delete your account: in the app, Settings → Delete account, or see lottobind.com/delete-account. Your personal details are erased, every session and device is signed out, and your pool records remain as "Former member".
• Notifications: turn them off or set quiet hours in Settings.
• Depending on where you live (for example under Canada's PIPEDA, Quebec's Law 25 or a US state privacy law) you may have further rights, such as to access, correct, delete or move your information, or to complain to a privacy regulator. Ask us and we will answer within 30 days.

Where it is stored and how it is protected

Your information is stored with our hosting provider in North America. It is encrypted in transit, ticket photos are encrypted with a key for each pool, and access by our staff is limited to what their work needs and is logged.

Children

LottoBind is only for people who meet the lottery age where they live (18 or 19 in Canada, 18 to 21 in the United States). We do not knowingly collect information from anyone younger, and we delete it if we learn we have.

Changes

If we change this policy we will show the new version in the app before it applies to you, and update the version date above.

Contact

Questions or requests about your information: [email protected]