AGM Apps ("we," "our," or "us") operates the Lotto Audit mobile application (the "App"), a calculator that estimates what a lottery prize is actually worth after federal and state tax. This Privacy Policy explains what the App does with information, and what your choices are.
No user account is required. Tax calculations and manual ticket entry run on your device. The optional scanner sends the photo you approve to our Firebase service and OpenAI, as described below. Advertising providers also receive device information as described in Section 4.
The App works from what you type into it. That includes:
Manual entries and calculation assumptions are not uploaded to our scan service. Ticket photos you explicitly submit may contain some of the same information. Local storage, platform backup and iCloud behavior are described in Section 3.
The App has no analytics SDK of our own. When you request a scan, our service processes the request and maintains a scan wallet, purchase references and a temporary reading cache; cloud providers process security and operational information. Advertising SDKs separately collect technical information as described in Section 4.
In version 5.0, the optional scanner uses OpenAI GPT-6 Luna through Firebase. It requires an explicit upload action and does not perform the whole reading on the device. You may use the camera or select one photo through the system photo picker. See the processing details in Section 4.
Draw reminders and jackpot alerts are optional and are scheduled locally by iOS. They are not push notifications sent from a server, so subscribing to one tells us nothing. You can turn them off in the App or in iOS Settings at any time.
Your audits, saved numbers, and preferences are written to the App's own private storage area on your device. They are protected by iOS's full-device encryption whenever your iPhone or iPad has a passcode set, and by Apple's app sandbox, which prevents other apps from reading them. Deleting the App removes its locally saved audits and tickets; iCloud data and system backups may remain until you manage those copies separately. The scan installation identifier is kept in the device-only Keychain and may survive an ordinary reinstall. It is not synced or transferred to another device. New saved tickets and detailed 4.2 calculation snapshots are stored locally; existing iCloud history sync carries summary records.
The App can keep your audit history and saved lucky numbers in your own private iCloud account, using Apple's CloudKit private database, so they follow you to your other Apple devices. The control for this lives in Settings → iCloud Sync.
Your iCloud space is governed by Apple's Privacy Policy.
The App displays advertisements through Google AdMob. AdMob may collect and process:
The App requests no location permission and never collects precise location. For more information, see Google's Privacy Policy.
The App also integrates Unity Ads and Liftoff (Vungle) as additional ad networks alongside Google AdMob. Which network is active at any given time is controlled by a remote configuration file we host at agmapps.net/rts-ios-ad-config.json, which the App fetches on launch. This means the network serving you an ad can change without an App update. Whichever network is active may collect:
Refer to each network's privacy policy for full details:
iOS shows Apple's App Tracking Transparency prompt asking whether the App may track you across other companies' apps and websites. Declining means your IDFA is not shared and advertising is not personalized — you will still see ads, but generic ones. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.
If you are in the European Economic Area, the United Kingdom, or Switzerland, the App additionally presents a consent form from Google's User Messaging Platform (UMP) covering how your data may be used for advertising.
To be precise about the sequence, because it matters: the advertising components begin loading as the App starts, which can happen before you have finished answering the consent prompts. That start-up activity may involve a network request to the ad provider. Your answers govern whether personalized advertising is served and whether your IDFA is shared.
Past draw results are requested from data.ny.gov for the selected game and date. The host sees ordinary request information, including your IP address, but we do not send your ticket numbers. See New York State's Privacy Policy.
To show current jackpot amounts, the App downloads a small public data file from GitHub (raw.githubusercontent.com). This is a plain one-way download of public lottery figures — the request carries no information about you beyond what any web request necessarily reveals to the host serving it, namely your IP address, and it contains nothing about your audits or numbers. GitHub's handling of that request is governed by GitHub's Privacy Statement.
Scanning is optional and intended for adults. Manual ticket entry does not upload a photo. Selecting or taking a photo opens a preview; the App sends it only after you approve the OpenAI disclosure and choose to upload.
The App resizes your selected photo and sends it over HTTPS to our Firebase service in the United States, then to OpenAI's GPT-6 Luna API to transcribe the game, purchase state, drawing dates, numbers and printed add-ons. All visible information, including barcodes, can be processed even when the model is instructed to ignore it. Exclude faces, signatures, payment details and unrelated personal information. Review and correct every field before saving. A scan does not validate a ticket or establish a winning status or prize.
Our scan service does not save ticket photographs in its database, on disk or in application logs. Your device may hold a temporary camera or photo-picker copy. To let you retry without spending another credit, our service temporarily caches the extracted reading. Access to that cache expires after 24 hours; automatic database deletion follows and may occur later. We log token counts, estimated model cost and service status, without the photograph or extracted numbers.
Requests use OpenAI's API with response storage disabled. API content is not used to train OpenAI models by default. This does not mean zero retention: OpenAI normally retains abuse-monitoring content for up to 30 days; safety review or legal requirements can require longer retention. Its processing and temporary caching follow its data controls. Firebase and other cloud services also keep operational and security information under their policies. See OpenAI API data controls, OpenAI's Privacy Policy and Firebase privacy information.
Firebase App Check uses Apple app/device attestation to protect the service. A random installation identifier is stored on your device; our server uses its hash with the app identifier to identify a scan wallet. Our server retains the balance, allowance, hashed purchase references, request identifiers and one-way photo hashes to deliver credits and prevent duplicate charges or purchase replay. The App also keeps a short retry journal of photo hashes and request identifiers, without the photo or its extracted numbers. The server's wallet, purchase and request accounting records do not expire automatically. Daily safety counters are scheduled for deletion after eight days; physical deletion can occur later. No named AGM Apps account is required.
The App sends store purchase proof to our service when redeeming a scan pack. Apple verifies it. We keep a hashed reference and its credited amount, not your payment credentials or the raw purchase proof. Store providers retain their own transaction records. Ad-removal purchases are checked through the platform's purchase framework.
Reviewed tickets are saved on your device. Closing the scanner or entering manually stops future uploads, but cannot undo processing already completed. Your own photo-library images remain until you delete them. Contact help.agmapps@outlook.com for cloud privacy requests. Deleting local tickets does not erase accounting records, provider logs, backups or copies in your photo library.
Once a Remove All Ads entitlement is verified, the App stops displaying ads and removes rewarded-ad requirements. Requests already in progress may finish. Existing consent preferences and providers' prior records are not erased by that purchase.
AGM Apps, a software developer established in the State of Florida, United States, is the controller of the limited personal data described in this Policy. Contact details are in Section 12. We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.
Where the App stores data only on your device or in your own iCloud account — your audits, saved numbers, state and filing status, and preferences — these local records are under your control. They are not sent to AGM Apps by local calculation or manual entry. Optional photo uploads are processed separately as described above.
If you are in the EEA, the UK, or Switzerland, the GDPR requires us to tell you the lawful basis for each thing we do:
| What we do | Lawful basis |
|---|---|
| Store your audits, numbers, and preferences so the App can work | Performance of a contract — Art. 6(1)(b) |
| Sync to your own iCloud account when you switch it on | Performance of a contract — Art. 6(1)(b), at your instruction and controlled by your iOS iCloud setting |
| Personalised advertising and tracking | Your consent — Art. 6(1)(a), collected through the consent form and App Tracking Transparency, changeable at any time |
| Non-personalised advertising that keeps a free app viable | Legitimate interests — Art. 6(1)(f): funding the App. You may object at any time |
| Downloading the public jackpot data file | Legitimate interests — Art. 6(1)(f): showing you accurate, current figures |
| Read the ticket photo you choose to upload | Consent, Art. 6(1)(a); you may decline each upload and use manual entry |
| App attestation, scan limits and service security | Legitimate interests, Art. 6(1)(f): preventing abuse and operating a limited scanning service |
| Verify purchases and maintain your scan balance | Performance of a contract, Art. 6(1)(b); fraud prevention relies on legitimate interests, Art. 6(1)(f) |
Entering your state or filing status is not a statutory or contractual requirement — but the App cannot calculate a tax figure without it. There is no automated decision-making producing legal or similarly significant effects, and no profiling of you by us.
AGM Apps is established in the United States. If you use the App from the EEA, the UK, or Switzerland and you receive advertising, personal data is transferred to and processed in the United States by our advertising providers — Google, Unity, and Liftoff/Vungle. Those transfers rely on the EU–U.S. Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses, as set out in each provider's own terms. Optional scan requests are also processed through our Firebase service in the United States and by OpenAI. These providers may process data in other countries where they or their agents maintain facilities. Applicable provider data-processing terms describe transfer safeguards, including Standard Contractual Clauses where required; see the links above.
We do not maintain named user accounts. We may need limited additional information to locate a scan-related record or verify a privacy request. You can inspect and delete locally saved records directly in the App. Contact us about cloud processing or records you cannot manage there.
Manual calculations are not uploaded to our scan service. A security incident could nevertheless affect scan processing, quota records or provider operational information. We assess incidents based on the data actually involved.
If we do become aware of a security incident affecting personal information under our control, we will investigate immediately and:
We want to be straight with you about one limitation: we hold no email address or other contact details for you, so we cannot send you a personal message. Publication in the App and on our website is how you would be told. We would rather state that honestly than promise a notification we have no way to deliver.
You have full control over your data, and most of it is exercised directly in the App rather than by asking us:
Lotto Audit is a tax-calculation utility intended for adults of legal lottery-playing age, and it is not directed at children under 13. We do not knowingly collect personal information from children.
The App and scanner are not directed to children. Delete saved tickets and history within the App and manage device backups or iCloud copies separately. If you believe a child has submitted a photo or other information through the scan service, contact help.agmapps@outlook.com so we can assess the request and any applicable retention obligations.
This section applies if you live in a U.S. state with a comprehensive consumer privacy law — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, plus any other state whose law is in effect when you read this. Where a right below exists only under your state's law, we honor it for residents of that state.
Using the categories named in the California Consumer Privacy Act:
We do not upload your calculation history, filing status or other-income assumptions to the scan service. Optional uploads include ticket photos, which may show numbers, dates, purchase locations and other printed information. Scan requests also involve a random installation identifier, app attestation and provider operational information. We do not ask for names, Social Security numbers, financial account details, contacts or precise location, and you should exclude such information from photos.
We do not ask for sensitive personal information or use submitted photos to infer personal characteristics. A photo can nevertheless contain any information visible in it; exclude unrelated personal information before uploading. Note that your state of residence and filing status stay on your device and are used only to select the correct tax rates for the calculation — they are not transmitted to us or to any advertising partner.
We have never sold personal information for money and do not do so. But we are going to be straightforward about something a lot of apps word carefully: when personalized advertising is on, our ad partners receive your advertising identifier and IP address and may use them to target ads to you in other apps. Under California law that counts as "sharing" for cross-context behavioral advertising, and under several other state laws it counts as "targeted advertising" or a "sale." We would rather tell you that plainly than rely on a narrow reading of the word "sell."
You can stop it at any time, free:
We do not sell or share the personal information of anyone we know to be under 16.
Where these web pages are read in a browser that sends a Global Privacy Control (GPC) or similar signal, we treat it as a valid opt-out of sale and sharing for that browser. iOS does not send GPC to apps, so inside the App the equivalent is App Tracking Transparency — and declining that prompt is treated as a valid opt-out signal by us and by every ad partner we use.
Email help.agmapps@outlook.com with the request type in the subject line. We operate entirely online and deal with you directly, so email is our designated method. We will acknowledge within 10 business days and answer within 45 days, extendable once by another 45 with notice.
About verification: we have no named user accounts and may need limited information to locate a scan-related record or verify a request. Local deletion does not erase provider logs, accounting records, backups or cloud copies. Use the controls described in this Policy and contact us for cloud-processing requests. Advertising opt-outs are separate from deleting saved records.
Authorized agents may act for you with your signed permission or a valid power of attorney. We may contact you to confirm it.
We may update this Privacy Policy from time to time — for example, if we add or change an advertising partner. When we make changes, the "Last Updated" date at the top will be revised, and significant changes will be communicated through an App update. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
help.agmapps@outlook.comDeveloper: AGM Apps · agmapps.net
For EEA, UK, and Swiss users: you have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated. Links are in Section 5.5.