Privacy Policy

This Privacy Policy describes how EVQ AGENTIC LLC ("we," "us," "ScratchFrenzy") collects, uses, and shares information when you use the ScratchFrenzy website at scratchfrenzy.app, the ScratchFrenzy mobile application for iOS and Android (the "Mobile App"), and related services (collectively, the "Platform").

1. Information We Collect

1a. Information you provide directly

• Account data: email address, username, and password when you create an account.
• Inventory reports: store name, game, and quantity for any sightings you choose to submit.
• Ticket scans: photographs of lottery tickets you take or upload through the Mobile App. Images are processed to extract game data (e.g., game name, ticket grid, prizes). See Section 2 for retention.
• Support correspondence: the contents of any message you send us.

1b. Information collected automatically

• Usage data: features used, screens viewed, timestamps, app version, device model, OS version, language, and crash/diagnostic logs. We use this to operate and improve the Platform.
• Approximate location (web): derived from IP address.
• Precise location (Mobile App, only if you grant permission): used to show nearby lottery retailers on the in-app map. Location is requested only when you open features that need it and is never collected in the background.
• Camera access (Mobile App, only if you grant permission): used to capture and flatten lottery ticket photos for on-device scanning and OCR. Photos are sent to our ticket-scanning service for processing.
• Photo library access (Mobile App, only if you grant permission): used to attach existing photos of tickets you choose.
• Identifiers: a generated user identifier we associate with your account, plus standard identifiers your device provides to PostHog (see Section 3).
• Advertising identifiers (Mobile App): Google AdMob may access your device's advertising identifier (Apple IDFA on iOS or Google Advertising ID on Android) to serve and measure ads within the Mobile App. On iOS, you will be shown Apple's App Tracking Transparency prompt and can decline; on Android, you can reset or opt out of the advertising ID in your device settings. See Section 3a for details.

1c. Information from third parties

• Apple App Store / Google Play (via RevenueCat): when you purchase a ScratchFrenzy Pro subscription in the Mobile App, the App Store or Play Store transmits transaction metadata to our subscription provider, RevenueCat. We receive entitlement status (whether you are an active Pro subscriber), the product purchased, renewal/expiration dates, and a transaction identifier. We do not receive your credit card number, Apple ID, Google account, or billing address.
• Stripe (web only): if you subscribe via the website, Stripe processes payment and we receive a Stripe customer ID and subscription status.

2. How We Use Your Information

• Operate the Platform and the features you request (e.g., scanning a ticket, showing a retailer map, granting Pro access).
• Display aggregated, anonymized inventory data to other users — individual submissions are not attributed to your account in the public UI.
• Send service communications (e.g., password reset).
• Detect and prevent abuse, fraud, and policy violations.
• Measure how the Platform is used, in aggregate, to improve features and diagnose crashes.

Ticket scan retention. When you scan a ticket, the photograph is transmitted to our scanning service and processed to extract game data. We do not use ticket scans for advertising or share them with third parties for their own purposes. Extracted text and game metadata may be retained to operate ticket history features within your account.

3. Service Providers (Subprocessors)

We use the following third-party services that process limited data on our behalf:

• RevenueCat — manages mobile subscriptions and receipt validation. Receives entitlement status and the user identifier we provide.
• PostHog — product analytics and crash diagnostics. Receives a generated identifier, app interaction events, device metadata, and app version. We do not configure PostHog to collect ad identifiers or precise location.
• Cloudflare — content delivery and our ticket-scanning edge service. Receives uploaded scan images during processing.
• Stripe — payment processing for web subscriptions only.
• Google Maps — renders retailer maps inside the Mobile App. Map tile requests include approximate viewport coordinates.
• Google AdMob (Mobile App) — serves banner and rewarded advertisements inside the Mobile App and measures ad performance. Receives your device's advertising identifier (if permitted), coarse device and network information, and interaction events with the ads shown. Google acts as an independent controller for the advertising data it collects. See Section 3a.
• Hosting providers — host our website and backend (e.g., Vercel, AWS).

These providers act as our service providers / processors and are contractually limited to the purposes above, except Google AdMob, which acts as an independent controller for advertising data.

3a. Advertising in the Mobile App

The Mobile App is supported by advertising served through Google AdMob. Ads may include banners and optional rewarded video ads that users choose to watch in exchange for unlocking premium features. We do not share your account email, username, ticket scans, or precise location with AdMob or advertisers.

Before requesting any personalized ads, the Mobile App runs Google's User Messaging Platform (UMP) consent flow to collect any required consent (for example, in the EEA/UK) and, on iOS, presents Apple's App Tracking Transparency (ATT) prompt. If you decline tracking, AdMob serves only non-personalized ads and does not use your advertising identifier for cross-app tracking. You can change your choice at any time in your device's Settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads).

Google's use of information collected through AdMob is governed by the Google Privacy Policy and the How Google uses information from sites or apps that use our services page.

4. Data Sharing

We do not sell or rent your personal information. We do not share your personal information with third parties for their own marketing. We may disclose information when required by law, to enforce our Terms, or to protect the rights, property, or safety of ScratchFrenzy or others.

5. Your Choices & Rights

5a. Mobile permissions

You can grant or revoke camera, photo library, and location permissions at any time from your device's Settings. The Mobile App will continue to work without these permissions; only the features that depend on them will be unavailable.

5b. Account access, correction, and deletion

You can delete your account and associated personal data at any time:

• In the Mobile App: Profile → Delete Account.
• On the web: visit /delete-account or email us at support@scratchfrenzy.app.

Deletion removes your account record, email, username, password hash, preferences, ticket scan history, and any tie between your account and inventory reports. Aggregated, anonymized inventory data may remain in the Platform. We may retain limited records where required by law (e.g., transaction records for tax purposes).

5c. California (CCPA/CPRA) and Other US State Rights

If you are a California resident (or a resident of another US state with comparable privacy laws), you have the right to know what personal information we collect, to request deletion, to request correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as defined by CCPA/CPRA. To exercise your rights, contact us at support@scratchfrenzy.app.

5d. EEA / UK Rights

If you are in the European Economic Area or the United Kingdom, you have rights of access, rectification, erasure, restriction, portability, and objection under GDPR/UK GDPR. Our legal bases are contract (to provide the service you requested), legitimate interests (to operate and secure the Platform), and consent (where required for permissions).

6. Subscription Data & Apple App Store

If you subscribe to ScratchFrenzy Pro in the Mobile App, the transaction is processed by Apple or Google. Their privacy policies govern that processing. We receive only the limited subscription metadata described in Section 1c. To cancel an Apple App Store subscription, open the App Store app → your profile → Subscriptions. To cancel a Google Play subscription, open Google Play → Account → Payments & subscriptions.

7. Data Retention

We retain account data while your account is active. After you delete your account, we remove personal data within 30 days, subject to limited backup retention not exceeding 90 days and any legal-hold obligations.

8. Security

We use industry-standard security practices including TLS in transit, PBKDF2 password hashing, and access controls. No method of transmission or storage is 100% secure.

9. Children's Privacy

ScratchFrenzy is intended only for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete it.

10. International Transfers

We are based in the United States and process data there. If you access the Platform from outside the US, your information will be transferred to and processed in the US.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact

EVQ AGENTIC LLC
Email: support@scratchfrenzy.app
Contact form: scratchfrenzy.app/contact