1. Introduction

Tini ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

2. Information We Collect

2.1 Personal Information You Provide

When you register and use our App, we collect:

• Email Address - For account creation and authentication
• Name - For personalization and account identification
• Phone Number (optional) - For account recovery and notifications
• Password - Encrypted and stored securely using industry-standard bcrypt hashing

2.2 Lottery Validation Data

• Lottery Ticket Numbers - Numbers you submit for validation
• Lottery Draws - Which lottery draws you're interested in (Nicaragua, Costa Rica)
• Validation History - Record of tickets you've validated
• Validation Results - Whether your tickets won or lost

2.3 Account Activity Data

• Login History - Dates and times of your logins
• Device Information - Device ID, operating system, app version
• Notification Preferences - Your notification settings
• Points and Rewards - Your accumulated points and reward claims
• Referral Activity - Referral codes you've used or shared

3. How We Use Your Information

3.1 Core Services

• Validating lottery tickets against official results
• Providing real-time lottery results
• Managing your account and authentication
• Sending push notifications about lottery results

3.2 Features & Functionality

• Points and rewards system management
• Referral program tracking
• Historical data and pattern analysis
• Personalized notifications based on your preferences

4. How We Share Your Information

5. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted using HTTPS/TLS encryption
• Password Security: Passwords hashed using bcrypt (industry standard)
• Secure Storage: Database hosted on secure Supabase infrastructure
• Access Controls: Strict role-based access to user data

6. Your Privacy Rights

You have the right to:

• Request a copy of your personal data
• Update your profile information
• Request account deletion
• Opt-out of promotional notifications
• Manage notification preferences

7. Data Retention

• Active Accounts: As long as your account is active
• Validation History: 2 years from last validation
• Deleted Accounts: 30 days backup retention, then permanent deletion

8. Third-Party Services

Google Sign-In

Privacy Policy: https://policies.google.com/privacy

Used for: OAuth authentication. Data shared: Email, name, profile picture (optional)

Supabase

Privacy Policy: https://supabase.com/privacy

Used for: Database and authentication. Data shared: All user data and app data

9. Children's Privacy

10. International Users

Our App is primarily designed for users in Nicaragua and Costa Rica. If you access our App from outside these regions, your data may be transferred to and processed in countries where our servers are located (United States via Supabase/AWS).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

• Updating the "Last Updated" date
• Sending an in-app notification
• Requiring you to accept updated terms on next login