Supersticioso legal

Privacy Policy

  • Account and purchase data
  • On-device ticket scanning
  • Cloud sync and notifications

How Supersticioso handles account data, ticket scanning, cloud sync, notifications, and analytics.

Install Supersticioso

Last updated: March 30, 2026

This Privacy Policy describes how Supersticioso ("we", "our", or "app") collects, uses, stores, and protects the personal information of users ("you") when using our mobile application (iOS and Android) and website.

Supersticioso is a lottery analysis and management application. We are not a betting platform. To place your bets, use the official channels of Caixa Econômica Federal.

1. Data Controller

Data controller: Supersticioso Contact email: talk@supersticioso.org Data Protection Officer (DPO): talk@supersticioso.org

2. Data We Collect

2.1 Account Information

When you create an account, we collect the following information provided by your authentication provider:

  • Name
  • Email address
  • Profile picture

We offer the following registration and login methods:

  • Sign in with Google
  • Sign in with Apple
  • Email and password

Legal basis (LGPD): Consent (Art. 7, I) and contract execution (Art. 7, V).

2.2 User Content

  • Saved plays: up to 2,000 lottery lines/plays with custom names
  • Favorite numbers and play preferences
  • Notification settings (which lotteries to follow)
  • App preferences

Legal basis (LGPD): Contract execution (Art. 7, V).

2.3 Financial and Subscription Data

  • Subscription status (monthly or annual)
  • Purchase history
  • Special Credits balance and transactions

Important: Payment processing is handled entirely by the Apple App Store, Google Play Store, and RevenueCat. We do not collect credit card, debit card, or banking information.

Legal basis (LGPD): Contract execution (Art. 7, V).

2.4 Device Data

  • Push notification tokens (FCM): used to send notifications about draw results
  • Device hash: an encrypted identifier (AES) used exclusively for anonymous identification in support messages

Legal basis (LGPD): Legitimate interest (Art. 7, IX).

2.5 Usage and Analytics Data

  • Event name
  • Event metadata
  • User identifier
  • Timestamp

This data is stored in Firebase Firestore and used exclusively for app improvements. We do not use advertising networks or third-party tracking services.

Legal basis (LGPD): Legitimate interest (Art. 7, IX).

2.6 Support Messages

When you contact us through the app, we collect:

  • Message text
  • Message source
  • Email (optional)
  • Device hash (encrypted)

Legal basis (LGPD): Legitimate interest (Art. 7, IX).

2.7 Camera (Ticket Scanning via OCR)

The app offers ticket scanning via camera. Regarding this feature:

  • Image processing occurs exclusively on your device (on-device)
  • No images are sent to our servers or cloud services
  • No images are stored after the scanning session
  • We do not use cloud-based AI or OCR services

Legal basis (LGPD): Consent (Art. 7, I) — camera permission is explicitly requested from the user.

3. Data We Do NOT Collect

For full transparency, we inform you that we do not collect:

  • Location or GPS data
  • Biometric data
  • Phone number or SMS
  • Contacts or address book
  • Advertising identifiers (we do not use ad networks)
  • Health data
  • Browsing history outside the app

We do not sell, rent, or trade your personal data to third parties for marketing or advertising purposes.

4. How We Use Your Data

We use your personal data for the following purposes:

  • Provide and maintain the service: save your plays, sync data across devices, display draw results
  • Cloud sync: allow access to your saved plays across multiple devices
  • Manage subscriptions and credits: process and validate your purchases and premium subscription
  • Push notifications: send alerts about draw results for the lotteries you follow (when enabled)
  • User support: respond to your messages and help requests
  • Analytics and improvements: analyze app usage to identify improvements and fix issues
  • Fraud prevention: detect and prevent abusive use of the service

5. Data Storage and Security

Where your data is stored

  • Firebase Firestore: our primary database is hosted in the southamerica-east1 (São Paulo, Brazil) region of Google Cloud
  • Local storage: SQLite and AsyncStorage on your device for offline functionality

Security measures

  • AES encryption for device identifiers
  • HTTPS (TLS) for all communications in transit
  • Firebase Authentication for secure session management
  • Rule-based access control in Firestore

6. Third-Party Services

We share data with the following service providers, strictly necessary for the app's operation:

ServicePurposeData Shared
Firebase / Google CloudAuthentication, database, cloud functions, push notificationsAccount data, user content, analytics events
RevenueCatSubscription and purchase managementUser ID, purchase data, subscription status
Google Sign-InAuthenticationName, email, profile picture (provided by Google)
Apple Sign-InAuthenticationName, email (provided by Apple)

Each service has its own privacy policy. We recommend reading:

7. Data Retention

  • Account data and content: retained while your account is active
  • After account deletion: your data is removed within 30 days
  • Analytics data: retained for up to 24 months, after which it is anonymized or deleted
  • Support messages: retained for up to 12 months after the support case is closed

8. Your Rights (LGPD Art. 18)

Under the Brazilian General Data Protection Law (Lei nº 13.709/2018), you have the following rights:

  1. Confirmation of the existence of data processing
  2. Access to your personal data
  3. Correction of incomplete, inaccurate, or outdated data
  4. Anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance
  5. Portability of your data to another service provider
  6. Deletion of data processed based on consent
  7. Information about which entities your data is shared with
  8. Information about the possibility of denying consent and its consequences
  9. Withdrawal of consent at any time

To exercise any of these rights, contact us at talk@supersticioso.org.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) — https://www.gov.br/anpd.

9. Account Deletion

You can delete your account at any time directly in the app settings (self-service). When you delete your account:

  • All your personal data, saved plays, and preferences will be removed within 30 days
  • Your Special Credits will be permanently lost
  • Active subscriptions on the App Store or Google Play must be cancelled separately through the respective store settings, as deleting your Supersticioso account does not automatically cancel store billing

10. Children's Privacy

Supersticioso is intended exclusively for users 18 years of age or older, the legal age for lottery participation in Brazil.

We do not knowingly collect personal data from users under 18 years of age. If we become aware that data from a minor has been collected, we will take immediate steps to delete it. If you are a parent or legal guardian and believe that a minor has provided personal data to our app, please contact us at talk@supersticioso.org.

11. International Data Transfers

Although our primary database is located in Brazil (São Paulo), some of our service providers (such as Google Cloud and RevenueCat) may process data on servers located outside Brazil.

These transfers are carried out in compliance with Chapter V of the LGPD, using adequate safeguards, including standard contractual clauses and data protection certifications from service providers.

12. Push Notifications

  • Push notifications are optional and require your explicit permission
  • You can enable or disable notifications at any time in the app settings or your device settings
  • We use Firebase Cloud Messaging (FCM) for notification delivery
  • FCM tokens are stored securely and used exclusively for notification delivery

13. Changes to This Policy

We may update this Privacy Policy periodically. If significant changes occur, you will be notified through the app.

Continued use of the app after changes are published constitutes acceptance of the updated policy. We recommend periodic review of this policy.

14. Contact

If you have questions, requests, or complaints about this Privacy Policy or the processing of your personal data, contact us:

Email: talk@supersticioso.org

For complaints to the regulatory authority: ANPD — National Data Protection Authority https://www.gov.br/anpd

Install Supersticioso from the App Store