Privacy Policy

Last updated: February 2026. This policy describes how Tioh TOTO (“we”, “our”) collects, uses, and protects your personal data in accordance with the Singapore Personal Data Protection Act (PDPA).

1. Data We Collect

  • Account information: email address (via Clerk authentication)
  • Scan images: photos of TOTO tickets uploaded for scanning
  • Scan metadata: draw dates, numbers detected, results, timestamps
  • Payment information: processed by Stripe — we do not store card details
  • Usage data: pages visited, features used, device type

2. Why We Collect It

  • To provide the ticket scanning and verification service
  • To process credit purchases
  • To maintain your scan history
  • To comply with responsible gambling obligations
  • To improve the Service and fix issues

3. Data Retention

  • Scan images: retained for up to 90 days, then permanently deleted
  • Scan metadata: retained indefinitely while your account is active
  • Account data: retained until you delete your account
  • Payment records: retained as required by tax and financial regulations

4. Third-Party Services

We use the following third-party services to operate:

  • Clerk — authentication and user management
  • Convex — database and backend services
  • Stripe — payment processing
  • Google Gemini — AI image analysis

Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.

5. Your Rights

Under the PDPA, you have the right to:

  • Access: request a copy of all personal data we hold about you
  • Correction: request corrections to inaccurate data
  • Deletion: delete your account and all associated data
  • Withdrawal of consent: withdraw consent for data collection at any time by deleting your account

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews.

7. Contact

For any privacy-related enquiries or to exercise your rights, please contact us through the app or email us at the address provided in your account settings.