Lotto Campfire · Yoofloe Sp. z o.o.
Privacy notice
Who is responsible
Yoofloe Sp. z o.o. provides Lotto Campfire. Our registered address is ul. Księcia Józefa Poniatowskiego 2/6, 50-326 Wrocław, Poland; KRS 0001226002; NIP 8982330825. NIP is a tax identifier, not a statement of VAT registration. Contact support@yoofloe.com or +48 452 528 392 for privacy questions and rights requests.
Your journal stays on your device
The app processes your categories, rule snapshots, numbers, dates, outcomes, spending, prizes, receipts, notes, photo copies, statistics, language and camp choices locally. It has no app account, journal server, automatic synchronization, remote result service or OCR. The publisher does not operate a separate app-usage analytics service. Journal content is not sent to an AI service or used for advertising.
Fixed/excluded-number preferences and manual number highlights are personal journal data, not purchase authority or official prize confirmation. They are included in the encrypted journal and portable backup. A device locale may suggest a preset order; that does not determine your residence or change recorded currencies.
Clipboard text is read only after you press Paste numbers. Numbers are checked locally and shown for confirmation before filling a draft. The number board and copying old numbers do not automatically save a purchase or result.
Photos, encryption and backups
The app makes managed photo copies and may resize or re-encode them, correct orientation and create thumbnails. It does not overwrite gallery originals. Viewing, zoom and rotation are supported; cropping and automatic number recognition are not. Your gallery, camera or document provider may have separate cloud settings.
Records and managed photos use encrypted app storage with a device-protected key. Import/export work can temporarily use app-private cache and memory outside the encrypted database. Cleanup is attempted, but a crash or failed cleanup may leave temporary copies. Encryption is not a guarantee against device compromise, screenshots or every recovery risk.
Portable backups are password-protected by default. You can explicitly choose an export without a password; anyone holding that unprotected file can read your records and photos. You choose the destination. A cloud document provider you select may upload the file and process its metadata under its own terms. We do not receive your password, device key or an automatic backup copy. Purchase tokens and access, this device's vibration choice, widget instances, display choices and widget caches stay outside journal backups. Restore replaces the current journal after a preview and confirmation; it does not merge journals. After restore, your journal is encrypted on this device.
Purchases and launcher widgets
Where the optional Fourleaf Pack is offered, Google Play handles checkout. In EEA markets using Google Play billing, the published Play terms identify Google Commerce Limited as the content-purchase contract party. Purchase identifiers, tokens and state are used separately from the journal to recognize, acknowledge and restore access. We do not receive payment-card details. Transaction information made available for support, refunds or required business records may be processed for those purposes. Journal content and number preferences are not purchase payloads.
This advertising version also checks Google Play purchase ownership before ads, including on fresh installations. Product, purchase and restore requests can connect to Play. Journal content is not sent for these checks. Google Play Billing sends Google operational diagnostics. These include billing API results and errors, app and library versions, device and operating-system details, event times, network and language/locale information, SIM operator codes, and random session and purchase-flow identifiers. They support billing operation, error resolution and library performance analysis. Session identifiers can correlate diagnostic events with billing requests; we do not describe the flow as anonymous. This app has no separate switch for the library's diagnostics. Google independently processes relevant Play data under its published privacy terms. Google retains data by type, purpose, settings and legal obligations. Google's privacy information explains its controls and request routes. Update checks use Google Play’s update library. Google processes device metadata, this app’s version and its installed module/asset-pack information for update checks. Journal records, ticket numbers and photos are not sent for this purpose.
Launcher widgets are outside the encrypted app boundary. Amounts and counts default to hidden. Only summaries you enable may appear; individual numbers, photos and notes are not sent to widgets. A launcher can retain an older image. Widget placement and display choices must be set again on another device.
Google AdMob · 1.1.0
Google AdMob may process IP address (approximate location), device/account identifiers including advertising ID, ad interactions and diagnostics for advertising, measurement and fraud prevention. Journal entries, photos, ticket numbers and amounts are not supplied for ads.
UMP handles required privacy choices; revisit them in Settings. Ads require ownership and privacy checks. Non-personalized or limited ads may remain where permitted. Fourleaf Pack owners, including earlier buyers, remain ad-free. Local generation/session counts and up to three ad timestamps stay outside backups until replaced or app data is deleted. Google's privacy and retention policies apply to its processing, which can take place outside the EEA.
This website and support
The pages we provide do not set cookies or include advertising, analytics, tracking scripts, upload forms, remote fonts or a journal API. Hosting and access-protection services can still process IP addresses, request information, security logs and any necessary platform security data. Email support processes the address, message and attachments you deliberately send. Do not send passwords, payment-card details, full backups or unrelated ticket records.
Company-domain support email uses Google Workspace, provided to our Polish company by Google Cloud Poland Sp. z o.o. Our Workspace terms incorporate its data-processing addendum. This site uses Vercel Inc.'s Pro hosting; customer data and provider-generated service data can be handled under different roles. Providers may process data outside the EEA, including in the United States, under the applicable contractual safeguards. Our support-mail retention period does not set provider deletion cycles. The applicable Workspace addendum allows up to 180 days after an irreversible deletion instruction, subject to its legal exceptions. Vercel dashboard log visibility does not define retention of every security or service-generated record. Google Play's separate privacy and retention policies apply to its Play processing.
Retention and deletion
- Journal data remains until you delete it, replace the journal, clear app storage or uninstall. Deleting a ticket does not delete separate shared draw results.
- Unattached encrypted photo copies and interrupted temporary files can remain; deleting app storage removes app-managed copies. This is not a promise of forensic erasure.
- Gallery originals and exported backups remain wherever you or your chosen provider keep them.
- Our routine-support policy is to delete Lotto Campfire support correspondence 12 months after the case is closed, unless a documented legal duty or an active complaint, refund matter or claim requires longer retention of necessary records. Financial and statutory records follow their applicable duties, not this routine-support period.
Purposes and your rights
Where the GDPR applies, providing requested functions and contractual support relies on necessity for a contract; identified legal record duties rely on legal obligation; proportionate general support, security and claims handling may rely on legitimate interests after the required assessment. This does not make advertising necessary for the contract.
Contact support@yoofloe.com about applicable access, correction, deletion, restriction, portability, objection or consent-withdrawal rights. Verification must be proportionate. GDPR requests are normally answered within one month, with any lawful extension explained within that period. You may complain directly to a competent authority, including Poland’s UODO, without contacting us first. We cannot remotely retrieve or erase device-only data we never receive. Mandatory local rights and understandable notices are not waived by a language choice.