1. Introduction

Tini ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

2. Information We Collect

2.1 Personal Information You Provide

When you register and use our App, we collect:

• Email Address - For account creation and authentication
• Name - For personalization and account identification
• Phone Number (optional) - For account recovery and notifications
• Password - Encrypted and stored securely using industry-standard bcrypt hashing

2.2 Lottery Validation Data

• Lottery Ticket Numbers - Numbers you submit for validation
• Lottery Draws - Which lottery draws you're interested in (Nicaragua, Costa Rica)
• Validation History - Record of tickets you've validated
• Validation Results - Whether your tickets won or lost

2.3 Account Activity Data

• Login History - Dates and times of your logins
• Device Information - Device ID, operating system, app version
• Notification Preferences - Your notification settings
• Points and Rewards - Your accumulated points and reward claims
• Referral Activity - Referral codes you've used or shared

2.4 App Usage Data

• App Activity - Screens and lotteries you view and features you use, to improve the app. Also recorded when you use the app without an account.
• Approximate Country - Derived from your connection's IP address, at country level only. We do not store your IP address or precise location, and we do not request location permission.

3. How We Use Your Information

3.1 Core Services

• Validating lottery tickets against official results
• Providing real-time lottery results
• Managing your account and authentication
• Sending push notifications about lottery results

3.2 Features & Functionality

• Points and rewards system management
• Referral program tracking
• Historical data and pattern analysis
• Personalized notifications based on your preferences

4. How We Share Your Information

5. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted using HTTPS/TLS encryption
• Password Security: Passwords hashed using bcrypt (industry standard)
• Secure Storage: Database hosted on secure Supabase infrastructure
• Access Controls: Strict role-based access to user data

6. Your Privacy Rights

You have the right to:

• Request a copy of your personal data
• Update your profile information
• Request account deletion
• Opt-out of promotional notifications
• Manage notification preferences

7. Data Retention

• Active Accounts: As long as your account is active
• Validation History: 2 years from last validation
• Deleted Accounts: 30 days backup retention, then permanent deletion

8. Third-Party Services

Google Sign-In

Privacy Policy: https://policies.google.com/privacy

Used for: OAuth authentication. Data shared: Email, name, profile picture (optional)

Supabase

Privacy Policy: https://supabase.com/privacy

Used for: Database and authentication. Data shared: All user data and app data

Apple Sign-In

Privacy Policy: https://www.apple.com/legal/privacy/

Used for: Signing in with your Apple ID on iOS. Data shared: Email (it may be an Apple private relay address) and name, if you choose to share them.

RevenueCat

Privacy Policy: https://www.revenuecat.com/privacy

Used for: Managing the Básico plan subscription. Data shared: An app user identifier and purchase history. Payments are processed by Google Play and the App Store; we never receive card details.

Meta (Facebook SDK) — Android only

Privacy Policy: https://www.facebook.com/privacy/policy/

Used for: Measuring app installs and opens that come from our Facebook campaigns. Data shared: App events (install and open) and basic device information. We do not collect the device advertising identifier.

Expo (push notifications)

Privacy Policy: https://expo.dev/privacy

Used for: Sending the notifications you turn on. Data shared: Your device's notification token.

YouTube API Services

YouTube Terms of Service: https://www.youtube.com/t/terms · Google Privacy Policy: https://policies.google.com/privacy

Used for: Publishing short videos with each day's official results to our own YouTube channel (@tinitiempos). The uploads are made by our servers using YouTube API Services. Data shared: none of your data. The App does not ask you to connect a YouTube account, and we do not access, store or share any YouTube data about you. When you watch our videos on YouTube, the YouTube Terms of Service and the Google Privacy Policy apply. If you ever grant access to your Google account, you can revoke it at any time at https://myaccount.google.com/permissions.

DB-IP

IP Geolocation by DB-IP

Used for: Deriving the approximate country from the IP address. The lookup runs on our servers with a downloaded database; no data is sent to DB-IP.

9. Children's Privacy

10. International Users

Our App shows lottery results from Nicaragua, Costa Rica, the Dominican Republic, Panama, Honduras and El Salvador, and is intended for users in those countries. If you access our App from another country, your data may be transferred to and processed in countries where our servers are located (United States via Supabase/AWS).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

• Updating the "Last Updated" date
• Sending an in-app notification
• Requiring you to accept updated terms on next login