Draft. This text is not final and is not checked by a lawyer. Do not rely on it.

Privacy policy

Last updated: [DATE]

This policy tells you what data Lotter keeps about you, why, who else sees it, and what you can do about it. It applies to the Lotter phone app, the web app at app.lotter-app.com, and this website.

Who we are

Lotter is run by [OWNER NAME], [ADDRESS] ("we"). We are responsible for your data. Write to us at privacy@lotter-app.com with any question about it.

What we keep

We keep only what Lotter needs to work:

  • Your account: your email address, the sign-in codes we send you (they expire after a few minutes), and your sign-ins, with the IP address and the type of device or browser.
  • Your terrains: names, notes, species, planting year, work log, and the corners of each boundary. For each corner we keep its position, how you made it (GPS or the map), when, and the GPS accuracy and altitude.
  • Your settings, such as the units for area and length.
  • Your plan: whether you have Unlimited and when it ends. We never see your card details.
  • If your organization has Unlimited and uses the Assistant: your questions, its answers, and the names of your conversations, and how many questions your organization asked this month. To let the Assistant find things by meaning, we also keep a search index of your organization's terrains, work log, documents, and photos. It holds short pieces of their text and a short description of what each photo shows.
  • Technical logs: our host records requests to our servers (IP address, time, and address asked for) to keep the service running and safe.

Your location

The phone app uses your location only while it is open. It records a position when you tap Add point. We do not track you in the background. Your position on the map stays on your phone. We keep only the corners you save.

Feedback

When you send feedback from Settings, we get your message, your email address and name, your app version, your device and its system version, and your language. It reaches us by email; Lotter does not keep a copy. It stays in our email inbox, which Google (Gmail) hosts, so we can read it and write back. Deleting your account does not delete it. To have it deleted, write to privacy@lotter-app.com.

How we use it

We use your data to sign you in, to keep your terrains on all your devices, to manage your plan, to answer your questions to the Assistant, to read and answer your feedback, and to keep the service safe. We do this because we need it to give you the service you asked for, and, for the logs, because we have a legitimate interest in security.

We do not show ads. We do not sell your data. We do not use analytics or tracking tools. We do not use your data to train AI.

Who else handles it

We use a few companies to run Lotter. They handle your data only to do that job for us:

  • Cloudflare hosts the website and the app, stores your account and terrains, and sends our emails, including your feedback to us. It also runs the AI models of the Assistant (Workers AI). These models read your question and the parts of your organization's data that the answer needs. Cloudflare does not keep them after the answer, and does not use them to train AI.
  • RevenueCat manages subscriptions. If you pay on the website, its payment provider takes the payment.
  • Apple and Google take the payment if you buy in the phone app. Their own privacy policies apply.
  • OpenFreeMap supplies the map pictures. Your device asks it for the part of the map you look at, so it sees your IP address and that area.
  • Google Fonts supplies the font of this website and the web app, so Google sees your IP address.

Some of these companies may handle data outside the European Union. When they do, they use the safeguards the law requires, such as the European Commission standard contract clauses.

How long we keep it

We keep your data while you have an account. When you delete a terrain, we delete it. When you delete your account, we delete it and everything in it at once, and we ask RevenueCat to delete its record of you. We keep technical logs for [a short time].

You can delete any of your conversations with the Assistant at any time. They also go when you leave an organization or are removed from it. When your organization's Unlimited plan ends, or its owner turns the Assistant off, we delete its search index after 30 days. If the plan starts again within 30 days, the index is kept.

Your rights

You can ask us to show, correct, or delete your data, to give it to you in a file, or to stop or limit how we use it. You can export any terrain yourself at any time, and delete your account yourself in the app: open Settings, then Delete account. For any other request, write to privacy@lotter-app.com. We answer within one month.

If you think we do not handle your data correctly, you can complain to your data protection authority. In Portugal this is the CNPD (cnpd.pt).

Cookies

This website uses no cookies. The web app uses one cookie to keep you signed in. It does not track you.

Children

Lotter is not for children under 16. We do not knowingly keep data about them.

Changes

If we change this policy, we update the date at the top. If a change is important, we tell you by email before it applies.