Lotto Owl privacy policy

App and publisher

Lotto Owl is published by Md Yousuf Ali Khan. This policy explains data practices in the app. Email support and this website are separate from app use.

Policy version

This is version 1.0, updated on 2026-11-05. This policy takes effect on November 5, 2026. Any recorded changes appear below.

What we collect

There is no Lotto Owl account. We never ask for your name, email address, phone number or payment details, and the app never uploads your ticket numbers or ticket photos.

If you allow notifications, our server keeps a record for your phone. It holds your phone's push token from Apple and the push environment (production or test), the token Apple gives Live Activities so a push can start one, and a random device ID that our server creates. It also holds the app version, your language and time zone, and your alert choices: which games, jackpot amounts, quiet hours, morning summary time, daily limit and whether Live Activities are on. It holds the draws you follow, which are the game, date and draw time of upcoming draws you have a saved ticket for, never your numbers and never how many tickets you have. If your subscription is set not to renew, it holds the date your alert access ends. It also holds when the record was created and last used, and App Attest records, described under Notifications and server data.

The app also sends anonymous usage analytics to PostHog and anonymous crash reports to GlitchTip. Those are described in their own sections below.

Like any internet service, our server, and Cloudflare, which sits in front of it, receive your phone's IP address and basic request details whenever the app loads results or registers for alerts.

In Apple's App Privacy terms, we collect these data types: Device ID, Product Interaction, Purchase History, Other Usage Data, Other Data, Crash Data, Performance Data and Other Diagnostic Data. Apple's definition of "linked to you" includes data tied to a device or install ID, so the App Privacy label lists all of them as linked to you, although we don't know your name or who you are. We use them only for the app's functions and for analytics. We don't use them for tracking and we never sell them.

If you email support, we receive the information you choose to send. The email support section explains this separately.

Subscriptions and payments

Subscriptions renew automatically unless you cancel. The yearly plan starts with a 7-day free trial if Apple says you are eligible, and it becomes a paid subscription unless you cancel at least 24 hours before the trial ends. The monthly plan has no free trial and is billed from the first day. You can manage or cancel in your Apple Account settings.

Family Sharing is not available.

Apple processes payments. We do not receive your card details. We do not verify purchases on our server: the app checks your subscription with Apple on your iPhone. The analytics described below record subscription steps, such as a purchase starting or finishing and whether the plan is yearly or monthly, but never prices, receipts or your Apple Account.

Your private iCloud data

These items can sync through your own private iCloud database (Apple's CloudKit): your saved tickets and their photos, favorite games, saved numbers and the scratch-off games you follow. Your alert settings sync through iCloud Key-Value Storage. We cannot read your private iCloud data. Apple processes it under its privacy policy, in locations Apple chooses: https://www.apple.com/legal/privacy/

Without iCloud, the data stays on that iPhone.

Deleting the app does not delete its iCloud data. Delete individual tickets in Tickets. To remove the rest from iCloud, open iPhone Settings, your Apple Account, iCloud, Manage Storage, Lotto Owl, and delete its data. Labels vary by iOS version. To stop alerts, turn them off in More, Alerts & notifications.

App analytics

We use PostHog, a product analytics service, on its European Union cloud (Frankfurt) to learn which parts of Lotto Owl people use and where they get stuck. PostHog acts as our service provider. The data is anonymous in the sense that it carries no name, email or account, but it is tied to a random ID, which is why Apple's App Privacy label lists it as linked to you.

What is sent: a random ID that the PostHog software creates for each installation (it is not your Apple Account, advertising ID, push token or any account, and a reinstall creates a new one), the app version, iOS version, device model and language, whether the build is from the App Store or TestFlight, your plan state (free, trial or subscribed) and whether notifications are allowed. Each screen you open is sent, along with the events listed below: opening a link from a widget, Live Activity, Siri or a notification; onboarding steps; permission answers; the paywall and purchase steps (yearly or monthly, but no prices); ticket scans and checks (the game, whether you used the camera, a photo or typing, and whether the result was a win, no win or not drawn yet); saved tickets and numbers; number generator use; alert changes; followed draws; and errors you see. The PostHog software also sends when the app is installed, updated, opened or sent to the background.

What is never sent: lottery numbers, ticket contents, photos, prize amounts, the dates of your tickets, text you type, names, email addresses, push tokens, App Attest IDs or iCloud IDs.

What is turned off: session replay, automatic capture of taps and text, crash capture, surveys and location. We tell PostHog not to work out a location from your IP address. As with any internet connection, PostHog's servers still receive your IP address.

Events: link_opened, notification_opened, onboarding_started, onboarding_step_completed, onboarding_completed, permission_answered, paywall_viewed, paywall_closed, purchase_started, purchase_completed, purchase_failed, restore_completed, plan_changed, manage_subscription_opened, scan_started, ticket_read, scan_dead_end, ticket_checked, ticket_saved, ticket_deleted, numbers_saved, numbers_generated, number_story_viewed, content_shared, take_home_used, claim_reminder_saved, budget_set, alert_changed, draw_followed, scratch_game_followed, error_shown.

PostHog keeps the data for up to 365 days. It is used for analytics only, not for tracking you across other companies' apps or websites.

You can turn analytics off in More, About Lotto Owl, Share usage analytics. After that, nothing is sent or queued. The switch is stored on that iPhone only, not in iCloud, so set it on each device. PostHog's anonymous ID is not shown in the app, so we usually cannot find one phone's analytics to delete it. A reinstall starts a new ID. PostHog's privacy policy is at https://posthog.com/privacy.

Crash reports and diagnostics

If Lotto Owl crashes, freezes (the screen is blocked for 2 seconds or more) or is ended by iOS, it sends a report to GlitchTip, an error-tracking service that we run ourselves at glitchtip.selleazyy.com. See International processing for where it runs. The app uses Sentry's open-source Sentry Cocoa software to build the reports, but they do not go to Sentry's cloud.

A report contains the technical trace of where the problem happened, the app and iOS versions, the device model and similar technical details the software attaches, and whether the build is from the App Store or TestFlight. It also contains up to the last 100 steps before the problem: screen names, the names of app events without their details, the app moving to the foreground or background, notification taps, and the method, path and status of requests to our server. When Share usage analytics is on, it carries the random analytics ID, so a crash can be matched to the same installation's analytics. Reports are also sent when our own code fails to read a server answer or open the local database, at most 3 of each kind per launch.

Before a report leaves your phone, the app removes any name, email address, user ID and IP address, and all request bodies, headers, cookies and query strings. Numbers in addresses that identify a record are replaced, and any step text that does not come from the app itself is dropped. Screenshots, screen layouts, session replay, performance tracing and profiling are off. Our GlitchTip project is also set to scrub IP addresses.

Reports are deleted after 90 days.

Crash reports are sent even when Share usage analytics is off, because most fixes start from a crash. The app has no separate switch for them. They carry no name, email address, user ID or IP address, are used only to fix the app, and are not used for tracking.

Camera and notification permissions

The camera reads the numbers on your ticket and takes a ticket photo on your iPhone. The text is read on your iPhone, and we do not upload ticket images to our servers. If you save a ticket with its photo, the photo may sync to your private iCloud.

You can also choose an existing ticket photo with Apple's system photo picker. The app receives only the image you select, with no access to your whole photo library.

Notifications are optional and deliver the alerts you choose. Turn off notifications or camera access in iPhone Settings for Lotto Owl. You can always enter a ticket by hand, without camera access.

Lotto Owl does not ask for microphone, contacts or location access.

Notifications and server data

Notifications are optional. The Lotto Owl notification service sends them through Apple Push Notification service, and only after you turn alerts on and allow notifications on your iPhone. Alerts need an active trial or subscription.

For this, our server keeps the record for your phone described under What we collect: push tokens, a random device ID, app version, language, time zone, alert choices, followed draws and the date your alert access ends. It does not keep ticket contents, ticket numbers, photos or payment details.

To make sure registration requests come from a genuine copy of Lotto Owl, our server uses Apple's App Attest. It keeps a public key ID, a counter and Apple's receipt for each App Attest key. They contain no name or contact detail and are not linked to your device record. We do not delete them automatically.

We delete a device record, and its alert and followed-draw records, 30 days after Apple's push service rejects its token, or 90 days after the phone was last seen. If you open the app again after that, it registers again.

Turn off alert choices in More, Alerts & notifications. Turning off iOS notifications stops their display; it does not immediately delete the server record. Contact support about deletion requests. You can also turn off notifications in your device settings.

Camera

The camera reads ticket numbers with text recognition on your iPhone and takes a ticket photo. Images are not uploaded to our servers. If you save a ticket with its photo, the photo is stored on your iPhone and, when iCloud is on, synced to your private iCloud.

You can remove camera permission in your device settings, then type the ticket in or choose a photo instead.

Storage and deletion

Your tickets, photos and saved choices are on your iPhone and, when iCloud is on, in your private iCloud. Public results are cached on your iPhone. Settings also use iCloud Key-Value Storage. Deleting the app does not delete its iCloud data or cancel your subscription. See Your private iCloud data and Your choices for how to remove it.

Our server stores notification and App Attest registration data, not ticket contents or payment details. Device records and their alert records are deleted 30 days after Apple's push service rejects the token or 90 days after the phone was last seen. App Attest records are kept until we delete them.

Backups of our server database are made every night and the latest 30 are kept. Our server also writes operational logs, which record that requests happened (route, result and time) and may include the sender's IP address. They stay on the server only until the service is next updated or restarted, and are deleted within a day after that. Our web proxy does not keep access logs.

PostHog keeps analytics for up to 365 days. GlitchTip keeps crash reports for 90 days.

Age restriction

Lotto Owl is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone under 18.

If you think information from a minor reached us, email support@shopwiselane.com. We will follow the deletion process in Your choices.

Third parties and links

Apple processes subscription payments and provides iCloud and push notifications. Apple's privacy policy is at https://www.apple.com/legal/privacy/.

PostHog (European Union) provides our anonymous usage analytics, with session replay, automatic tap capture, crash capture and surveys off. Its privacy policy is at https://posthog.com/privacy.

Crash reports go to GlitchTip, which we run ourselves. It is described in this policy.

Our servers run on Leaseweb in the United States. Cloudflare sits in front of them to deliver and cache public results and to protect them from abuse, so it handles the requests the app makes to our server. We also use Grafana Cloud for operational monitoring of our servers, such as request counts, timings and error rates, and a Cloudflare storage service for database backups.

Public draw results come from the Florida Lottery and other public results sources. They do not receive data about you.

Lotto Owl contains no advertising software and no other third-party analytics. External links open services with their own privacy policies.

International processing

Lotto Owl is made for Florida players, but the App Store may offer it elsewhere. Wherever you use it, your data is handled in the places below.

Our notification service runs on a server in the United States (Leaseweb USA, Manassas, Virginia) behind Cloudflare. Database backups are stored with Cloudflare R2. Monitoring data (request counts, timings and traces, without your data) is stored with Grafana Cloud in the United States.

PostHog processes analytics in the European Union. Our GlitchTip server runs in the United States (Oracle Cloud, Phoenix, Arizona) behind Cloudflare.

Apple processes iCloud data and push notifications in locations it chooses.

Each provider's own privacy policy explains how it handles transfers between countries.

Your choices

Analytics: turn off Share usage analytics in More, About Lotto Owl. Nothing is sent or queued after that. The switch is stored on that iPhone only. Crash reports have no switch; they are anonymous and sent even when analytics is off.

Alerts: change them in More, Alerts & notifications. You can remove notification and camera permission in iPhone Settings. Removing notification permission stops alerts from showing but does not immediately delete the server record. The record is deleted automatically 30 days after Apple's push service rejects its token, or 90 days after the phone was last seen.

Tickets and iCloud: delete tickets in Tickets. Deleting the app does not delete iCloud data. Remove it in iPhone Settings, your Apple Account, iCloud, Manage Storage, Lotto Owl.

There is no Lotto Owl account to close.

To ask about data we hold or to request deletion, email support@shopwiselane.com. We cannot search by name or email address, because the server record for your phone is identified only by its push token and random IDs, which the app does not show. So we cannot look up one phone's records on request. To remove them, turn off alerts and delete the app: the server record is then deleted automatically within the time above. To stop analytics, turn off Share usage analytics in More, About Lotto Owl; analytics already sent are deleted after 365 days.

Your privacy questions and requests

Contact support@shopwiselane.com to ask about information we hold about you or to request its correction or deletion. We will explain what information we have and how we can respond.

We cannot access or delete information stored only in your app. Use the app controls described above. For questions about your legal rights or a complaint, contact the relevant privacy authority in your country.

Changes to this policy

We will update this page when the app's data practices change, and record the new version and date. Check the policy before using a new version of the app.

When you email support

Emailing support@shopwiselane.com shares your email address, message and any attachments with us. We use them to answer your request. Please avoid sending children's photos, recordings, phone numbers or other unnecessary personal information.

We delete support emails, their attachments and any downloaded copies 90 days after the request is resolved. Our email providers keep their own logs and backups for their own retention periods.

Contact

For privacy questions about Lotto Owl, email support@shopwiselane.com. The publisher is Md Yousuf Ali Khan.

Policy languages

This policy is available in English, Español. Each version describes the same practices. If anything is unclear, email support@shopwiselane.com.