AGM Apps ("we," "our," or "us") operates the Lottery Tax Audit mobile application (the "App"), a calculator that estimates what a lottery prize is actually worth after federal and state tax. The App is distributed through Google Play. This Privacy Policy explains what the App does with information, and what your choices are.
No user account is required. Tax calculations and manual ticket entry run on your device. The optional scanner sends the photo you approve to our Firebase service and OpenAI, as described below. Advertising providers also receive device information as described in Section 4.
The App works from what you type into it. That includes:
Manual entries and calculation assumptions are not uploaded to our scan service. Ticket photos you explicitly submit may contain some of the same information. Local storage and Android backup behavior are described in Section 3.
The App has no analytics SDK of our own. When you request a scan, our service processes the request and maintains a scan wallet, purchase references and a temporary reading cache; cloud providers process security and operational information. Advertising SDKs separately collect technical information as described in Section 4.
Draw reminders and jackpot alerts are optional and are scheduled entirely on your device. They are not push notifications sent from a server, so turning one on tells us nothing. You can turn them off in the App or in Android Settings at any time.
Your audits, saved numbers, and preferences are written to the App's own private storage area on your device, using Android's SharedPreferences. They are protected by Android's file-based encryption on devices that have it enabled, and by Android's app sandbox, which prevents other apps from reading them.
The scan installation identifier and retry journal are kept in device storage excluded from Android backup and device transfer. Removing the App or clearing its data can therefore make unused scan credits inaccessible.
There is no AGM Apps account-based sync for your records. Android backup and device-transfer services may copy or restore app data depending on your device and settings. Removing the App clears its local data but may not erase an existing system backup. Manage backups in your device or Google account settings. AGM Apps cannot restore your local history for you.
The App displays advertisements — banner, interstitial, and opt-in rewarded video ads. Ads are delivered through Unity LevelPlay, a mediation service that lets several advertising networks compete for each ad slot. The networks that may serve ads in the App are Google AdMob, Unity Ads, and Liftoff Monetize (Vungle), together with LevelPlay's own ironSource network. To serve, measure, and protect against fraud in their ads, these partners may collect and process:
The App requests no location permission and never collects precise location. Each partner's own policy describes what it does with this data: Google, Unity (LevelPlay, Unity Ads, and ironSource), and Liftoff Monetize (Vungle).
If you are in the European Economic Area, the United Kingdom, or Switzerland, the App presents a consent form built on Google's User Messaging Platform (UMP) before loading personalized advertising. It covers how your data may be used for advertising, and your answer determines whether personalized or only non-personalized ads are served.
You can change your answer at any time from Settings → Privacy Options inside the App, which reopens the same consent form.
To be precise about the sequence, because it matters: the advertising component begins loading as the App starts, which can happen before you have finished answering the consent prompt. That start-up activity may involve a network request to Google. Your answer governs whether personalized advertising is served and whether your AAID is shared for that purpose.
To show current jackpot amounts, the App downloads a small public data file from GitHub (raw.githubusercontent.com). This is a plain one-way download of public lottery figures — the request carries no information about you beyond what any web request necessarily reveals to the host serving it, namely your IP address, and it contains nothing about your audits or numbers. GitHub's handling of that request is governed by GitHub's Privacy Statement.
To show official past winning numbers, the App also downloads public draw-result data from data.ny.gov, an open-data service operated by New York State. This is likewise a one-way download of public figures, and it works the same way: your IP address is visible to the host serving the request, and nothing about your audits or numbers is sent. New York State's handling of that request is governed by the State of New York's Privacy Policy.
Scanning is optional and intended for adults. Manual ticket entry does not upload a photo. Selecting or taking a photo opens a preview; the App sends it only after you approve the OpenAI disclosure and choose to upload.
The App resizes your selected photo and sends it over HTTPS to our Firebase service in the United States, then to OpenAI's GPT-6 Luna API to transcribe the game, purchase state, drawing dates, numbers and printed add-ons. All visible information, including barcodes, can be processed even when the model is instructed to ignore it. Exclude faces, signatures, payment details and unrelated personal information. Review and correct every field before saving. A scan does not validate a ticket or establish a winning status or prize.
Our scan service does not save ticket photographs in its database, on disk or in application logs. Your device may hold a temporary camera or photo-picker copy. To let you retry without spending another credit, our service temporarily caches the extracted reading. Access to that cache expires after 24 hours; automatic database deletion follows and may occur later. We log token counts, estimated model cost and service status, without the photograph or extracted numbers.
Requests use OpenAI's API with response storage disabled. API content is not used to train OpenAI models by default. This does not mean zero retention: OpenAI normally retains abuse-monitoring content for up to 30 days; safety review or legal requirements can require longer retention. Its processing and temporary caching follow its data controls. Firebase and other cloud services also keep operational and security information under their policies. See OpenAI API data controls, OpenAI's Privacy Policy and Firebase privacy information.
Firebase App Check uses Google app/device attestation to protect the service. A random installation identifier is stored on your device; our server uses its hash with the app identifier to identify a scan wallet. Our server retains the balance, allowance, hashed purchase references, request identifiers and one-way photo hashes to deliver credits and prevent duplicate charges or purchase replay. The App also keeps a short retry journal of photo hashes and request identifiers, without the photo or its extracted numbers. The server's wallet, purchase and request accounting records do not expire automatically. Daily safety counters are scheduled for deletion after eight days; physical deletion can occur later. No named AGM Apps account is required.
The App sends store purchase proof to our service when redeeming a scan pack. Google Play verifies it. We keep a hashed reference and its credited amount, not your payment credentials or the raw purchase proof. Store providers retain their own transaction records. Ad-removal purchases are checked through the platform's purchase framework.
Reviewed tickets are saved on your device. Closing the scanner or entering manually stops future uploads, but cannot undo processing already completed. Your own photo-library images remain until you delete them. Contact help.agmapps@outlook.com for cloud privacy requests. Deleting local tickets does not erase accounting records, provider logs, backups or copies in your photo library.
Once a Remove All Ads entitlement is verified, the App stops displaying ads and removes rewarded-ad requirements. Requests already in progress may finish. Existing consent preferences and providers' prior records are not erased by that purchase.
AGM Apps, a software developer established in the State of Florida, United States, is the controller of the limited personal data described in this Policy. Contact details are in Section 12. We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.
Where the App stores data only on your device — your audits, saved numbers, state and filing status, and preferences — these local records are under your control. They are not sent to AGM Apps by local calculation or manual entry. Optional photo uploads are processed separately as described above.
If you are in the EEA, the UK, or Switzerland, the GDPR requires us to tell you the lawful basis for each thing we do:
| What we do | Lawful basis |
|---|---|
| Store your audits, numbers, and preferences on your device so the App can work | Performance of a contract — Art. 6(1)(b) |
| Schedule the draw reminders you ask for, locally on your device | Performance of a contract — Art. 6(1)(b) |
| Personalised advertising and the rewarded-video option | Your consent — Art. 6(1)(a), collected through the UMP consent form, changeable at any time in Settings → Privacy Options |
| Non-personalised advertising that keeps a free app viable | Legitimate interests — Art. 6(1)(f): funding the App. You may object at any time |
| Downloading the public jackpot and draw-results data files | Legitimate interests — Art. 6(1)(f): showing you accurate, current figures |
| Read the ticket photo you choose to upload | Consent, Art. 6(1)(a); you may decline each upload and use manual entry |
| App attestation, scan limits and service security | Legitimate interests, Art. 6(1)(f): preventing abuse and operating a limited scanning service |
| Verify purchases and maintain your scan balance | Performance of a contract, Art. 6(1)(b); fraud prevention relies on legitimate interests, Art. 6(1)(f) |
Entering your state or filing status is not a statutory or contractual requirement — but the App cannot calculate a tax figure without it. There is no automated decision-making producing legal or similarly significant effects, and no profiling of you by us.
AGM Apps is established in the United States. If you use the App from the EEA, the UK, or Switzerland and you receive advertising, personal data is transferred to and processed in the United States by Google. Those transfers rely on the EU–U.S. Data Privacy Framework and its UK and Swiss extensions where Google is certified, and otherwise on the European Commission's Standard Contractual Clauses, as set out in Google's own terms. Optional scan requests are also processed through our Firebase service in the United States and by OpenAI. These providers may process data in other countries where they or their agents maintain facilities. Applicable provider data-processing terms describe transfer safeguards, including Standard Contractual Clauses where required; see the links above.
We do not maintain named user accounts. We may need limited additional information to locate a scan-related record or verify a privacy request. You can inspect and delete locally saved records directly in the App. Contact us about cloud processing or records you cannot manage there.
Manual calculations are not uploaded to our scan service. A security incident could nevertheless affect scan processing, quota records or provider operational information. We assess incidents based on the data actually involved.
If we do become aware of a security incident affecting personal information under our control, we will investigate immediately and:
We want to be straight with you about one limitation: we hold no email address or other contact details for you, so we cannot send you a personal message. Publication in the App and on our website is how you would be told. We would rather state that honestly than promise a notification we have no way to deliver.
You have full control over your data, and most of it is exercised directly in the App rather than by asking us:
Lottery Tax Audit is a tax-calculation utility intended for adults of legal lottery-playing age, and it is not directed at children under 13. We do not knowingly collect personal information from children.
The App and scanner are not directed to children. Delete saved tickets and history within the App and manage device backups separately. If you believe a child has submitted a photo or other information through the scan service, contact help.agmapps@outlook.com so we can assess the request and any applicable retention obligations.
This section applies if you live in a U.S. state with a comprehensive consumer privacy law — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, plus any other state whose law is in effect when you read this. Where a right below exists only under your state's law, we honor it for residents of that state.
Using the categories named in the California Consumer Privacy Act:
We do not upload your calculation history, filing status or other-income assumptions to the scan service. Optional uploads include ticket photos, which may show numbers, dates, purchase locations and other printed information. Scan requests also involve a random installation identifier, app attestation and provider operational information. We do not ask for names, Social Security numbers, financial account details, contacts or precise location, and you should exclude such information from photos.
We do not ask for sensitive personal information or use submitted photos to infer personal characteristics. A photo can nevertheless contain any information visible in it; exclude unrelated personal information before uploading. Note that your state of residence and filing status stay on your device and are used only to select the correct tax rates for the calculation — they are not transmitted to us or to any advertising partner.
We have never sold personal information for money and do not do so. But we are going to be straightforward about something a lot of apps word carefully: when personalized advertising is on, Google receives your advertising identifier and IP address and may use them to target ads to you in other apps. Under California law that counts as "sharing" for cross-context behavioral advertising, and under several other state laws it counts as "targeted advertising" or a "sale." We would rather tell you that plainly than rely on a narrow reading of the word "sell."
You can stop it at any time, free:
We do not sell or share the personal information of anyone we know to be under 16.
Where these web pages are read in a browser that sends a Global Privacy Control (GPC) or similar signal, we treat it as a valid opt-out of sale and sharing for that browser. Android does not send GPC to apps, so inside the App the equivalent is the Settings → Privacy Options control described above — and withdrawing consent there is treated as a valid opt-out signal by us and by our advertising partner.
Email help.agmapps@outlook.com with the request type in the subject line. We operate entirely online and deal with you directly, so email is our designated method. We will acknowledge within 10 business days and answer within 45 days, extendable once by another 45 with notice.
About verification: we have no named user accounts and may need limited information to locate a scan-related record or verify a request. Local deletion does not erase provider logs, accounting records, backups or cloud copies. Use the controls described in this Policy and contact us for cloud-processing requests. Advertising opt-outs are separate from deleting saved records.
Authorized agents may act for you with your signed permission or a valid power of attorney. We may contact you to confirm it.
We may update this Privacy Policy from time to time — for example, if we add or change an advertising partner. When we make changes, the "Last Updated" date at the top will be revised, and significant changes will be communicated through an App update. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
help.agmapps@outlook.comDeveloper: AGM Apps · agmapps.net
For EEA, UK, and Swiss users: you have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated. Links are in Section 5.5.