Privacy Policy

1. Who We Are

rafl Giveaways LLC (“rafl,” “we,” “us,” or “our”) operates the rafl mobile application and website (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use it, and your choices.

If you have questions, contact us at dev@raflgiveaways.com.

2. Information We Collect

Information you provide

• Phone number (used to create and verify your account via SMS)
• Email address (optional; used for account communications)
• Name and any profile details you choose to add

Information collected automatically

• Location data — when you use the app, we request your device location to show nearby partner businesses and process check-ins. We only access location while the app is in use.
• Check-in / tap events — when you tap an NFC tag at a partner location, we record the tag, timestamp, and associated business.
• Device and usage information — device type, operating system version, and in-app activity (e.g., entries viewed, raffles entered).

Information from third parties

• Authentication data from Supabase Auth when you sign in.

3. How We Use Your Information

• To create and manage your account
• To process check-ins and raffle entries
• To show you nearby partner businesses based on your location
• To send you SMS verification codes and transactional notifications
• To communicate with you about prizes, account activity, and service updates
• To operate, maintain, and improve the Services
• To comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share it with:

• Partner businesses — when you check in at a location, that business may see that you participated in their giveaway.
• Service providers — third parties that help us operate the Services (e.g., Supabase for database and auth, Mailchimp for email). These providers are contractually bound to protect your data and may only use it to provide services to us.
• Legal requirements — when required by law, court order, or to protect the rights and safety of rafl, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data at any time by contacting us at dev@raflgiveaways.com. We may retain certain information as required by law or for legitimate business purposes.

6. Your Choices

• Location — you can revoke location permissions at any time in your device settings. Some features (like finding nearby businesses) will not function without location access.
• SMS messages — transactional SMS messages are necessary to use the app. You can opt out of marketing messages by following the unsubscribe instructions in any such message.
• Account deletion — contact us to delete your account and personal data.

7. Security

We use industry-standard measures to protect your information, including encrypted connections (TLS) and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children’s Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending you a notification. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact us: