GDPR Compliance
Last updated: September 2026
Our GDPR Commitment
WinBuddy ("we", "us", or "our") is committed to protecting the privacy and personal data of all our buddies, including those in the European Union, European Economic Area, the United Kingdom, and Switzerland. This GDPR Compliance page explains how we meet our obligations under the General Data Protection Regulation (Regulation (EU) 2016/679).
Lawful Basis for Processing
We process your personal data under the following lawful bases: (1) Performance of a contract — to create and maintain your account and provide the Magic Bin, Number Lab, and prediction features you requested. (2) Legitimate interests — to improve the app, analyze usage, and keep the service secure. (3) Consent — for optional features like testimonials, win stories, and thank-you donations, which you may withdraw at any time.
Your GDPR Rights
Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data (the "right to be forgotten"), restrict processing, object to processing, receive your data in a portable format (data portability), and withdraw consent at any time. To exercise any of these rights, contact us at sweetreceiptapp@gmail.com and we will respond within one month.
Data We Process
We process your email address, display name, optional state and birthdate, saved lottery picks, tags, win stories, testimonials, and basic usage data. We do not process special category data (such as health, race, or biometric data) and we do not profile you for automated decision-making. Prediction features are analytical tools — not automated decisions that produce legal effects.
International Data Transfers
WinBuddy is operated as a Louisiana-based service. When we transfer your personal data outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms recognized by the European Commission. Your data is treated with the same level of protection regardless of where it is processed.
Data Retention & Erasure
We retain your personal data only as long as your account is active or as needed to provide the service. When you request erasure, we delete your account data, saved picks, stories, and testimonials, except where retention is required by law. To request erasure, contact us at sweetreceiptapp@gmail.com.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and we will notify you without undue delay if the breach is likely to result in a high risk to your rights.
Louisiana Law & This Policy
While we comply with the GDPR for our EU/EEA/UK users, this compliance page and our practices are also governed by the laws of the State of Louisiana, without regard to its conflict-of-laws principles. We may update this policy from time to time, and we will post any changes here with a revised "Last updated" date.
Contact Us & Your DPO
Have a GDPR question or request? Email Buddy at sweetreceiptapp@gmail.com or reach us through the in-app Support page. You also have the right to lodge a complaint with your local data protection authority. WinBuddy — all wrapped in winning, magic, and fun.