Privacy Policy

What we collect

• Account: your email address and login details (or the identity Apple or Google shares when you sign in with them).
• Profile: nickname, avatar and birthdate, if you add them, and the keepsake wishes you seal (one per lunar year; only you can see them, and you can delete them any time).
• Scans: ticket photos you scan and what we read from them (numbers, draw, bet type, cost, outlet code).
• Usage: saved and generated numbers, and basic technical logs needed to run and secure the service.

On our website we count page visits with Vercel Web Analytics. It doesn't use cookies or build a profile of you, and we don't send it what you type or your location.

We don't sell your personal data.

How we use it

To run your account, read and check your tickets, show your totals and history, prevent abuse (for example rate limits), and improve HuatIQ. Outlet data from scans may be used, without identifying you, for features like winning-outlet rankings.

Location

Your location, or the postal code you type, is used only on your device (in the HuatIQ app, or in your browser on the website) to sort nearby outlets. It isn't sent to us. You can turn off location access at any time in your phone's or browser's settings.

Shared tickets

If you record people on a shared ticket, we store the name you give each person, the last 4 digits of their phone number if you add them (never the full number, which stays on your device), and each person's share of the cost. You see everyone on your ticket. A person who opens your link sees the ticket, their own amount and how many others share it, but not other people's names or numbers; if they join with a HuatIQ account, they also see the result and their share of any win. HuatIQ only keeps these records: no money is collected or paid through the app. Shared ticket records are deleted with the ticket or your account. If a person who joined deletes their account, their name on your ticket is replaced with "Deleted user". [needs legal review]

Who processes it

• Supabase: database, login and photo storage.
• Vercel: hosting of the website and its API.
• Vercel Web Analytics: counts page visits on the website, without cookies. Page addresses are sent without anything after “?” or “#”.
• Google Gemini: reads ticket photos. On the free plan, Google may use submitted images and responses to improve its products, and human reviewers may read them. We remove photo metadata such as location before sending, and ask you not to scan anything with personal details.
• Apple and Google: sign-in and, later, in-app purchases (with RevenueCat), if you use them.

Some of these providers store data outside Singapore and Malaysia. [Cross-border transfer safeguards under both PDPAs — needs legal review]

Free and Premium scanning

Scans on the free plan use Google's unpaid Gemini service as described above. If we introduce a Premium plan, its scans will use Google's paid service, which does not use your content to improve Google's products.

How long we keep it, and deletion

We keep your data while your account is open. You can delete your account in the app (Profile) or on the web (Settings). Deletion is immediate: your profile, tickets, scan photos, saved numbers, totals and settings are removed straight away. Copies in our database backups and service logs expire within their retention period [retention periods — needs legal review]. Photos already sent to Google Gemini on the free plan can't be recalled from Google. We keep an anonymous record that a deletion happened (no name or email), as proof.

Your rights and how to contact us

Singapore (Personal Data Protection Act 2012): you can ask to access or correct your personal data and withdraw consent. Malaysia (Personal Data Protection Act 2010, as amended in 2024): you can ask to access or correct your data, limit its processing, and ask us to move it to another service where that applies.

In either country, contact our Data Protection Officer at support@huatiq.com. You can also view and edit your profile in the app at any time. You must be 18 or older to use HuatIQ. [Data breach notification and Malaysian DPO details — needs legal review]

Changes

We may update this policy. If changes matter, we'll ask you to accept the new version. See also our Terms of Use.