Privacy Policy

Last updated: 2025-10-24

This Privacy Policy describes how SheerApps ("we", "us", or "our") collects, uses, and shares your information when you use our mobile application and services.

1. Information We Collect

1.1 Account Information

When you create an account or log in, we collect:

• Email Login: Email address, name, password (encrypted)
• Google Sign-In: Google email address, name, profile picture URL, unique Google user ID (provided by Google's authentication service)
• Account Data: Unique user ID, referral code, account status, login method (email or Google)
• Login History: Last login date, IP address (for security)
• Device Information: Unique device identifier (hashed), device name/model, device binding timestamp (for our 1-device-per-account security policy)

1.2 Usage Data

We automatically collect information about how you use the app:

• 4D lottery numbers you view, save, or analyze
• SheerApps Bonus participation history and prizes won
• Point transactions and redemption history
• Referral activity (who you referred, rewards claimed)
• VIP membership status and subscription details
• App features used and frequency of use
• Device information (model, OS version, unique device ID)
• Crash reports and error logs (for app improvement)

1.3 Purchase Information

When you make in-app purchases:

• Subscription details (VIP membership duration, start/end dates)
• Purchase tokens and transaction IDs (from Google Play)
• Payment method and billing platform (Google Play, Apple Pay)
• Purchase verification status and timestamps
• Note: We do NOT store credit card numbers or payment credentials - all payment processing is handled securely by Google Play or Apple

1.4 Advertising Data

For non-VIP users, our ad partners collect:

• Device advertising ID (for personalized ads)
• Ad interaction data (views, clicks)
• Device type and screen size

2. How We Use Your Information

2.1 To Provide Core Services

• Display 4D lottery results from official sources
• Provide forecast analysis and prediction tools
• Manage your account and authentication
• Save your favorite numbers and search history

2.2 SheerApps Bonus Feature

• Track your daily, friendship, and VIP draw chances
• Process draw attempts and prize awards
• Verify eligibility and prevent abuse
• Display winning history and statistics
• Award virtual points for prizes won

2.3 Point Store & Virtual Currency

• Track your point balance (earned and spent)
• Process redemption requests (e-wallet reloads, game credits)
• Verify redemption eligibility and delivery
• Maintain transaction history for your records
• Note: Points are virtual currency with NO real-world monetary value. Redemptions are promotional rewards only, subject to availability, and cannot be exchanged for cash, transferred, or sold.

2.4 Referral Program

• Track users you referred and their registration status
• Award referral rewards (points and SheerApps Bonus chances)
• Prevent duplicate claims and fraudulent referrals
• Display your referral statistics

2.5 VIP Membership & Subscriptions

• Process and verify subscription purchases
• Manage membership status and expiry dates
• Provide VIP benefits (ad-free, exclusive draws, priority support)
• Handle subscription renewals and cancellations
• Verify purchases with Google Play API to prevent fraud

2.6 Advertising (Non-VIP Users)

• Display personalized ads via Google AdMob
• Track ad interactions for reward ads (daily draw chances)
• Manage ad frequency and placement

2.7 Account Security & Device Management

• Google Sign-In Authentication: Securely authenticate users via Google OAuth 2.0 (your password is managed by Google, not stored on our servers)
• 1-Device-Per-Account Policy: Enforce our security policy that allows only one device to be logged into an account at a time
• Device Fingerprinting: Collect and hash a unique device identifier to prevent account sharing and unauthorized access
• Multi-Device Detection: Automatically detect when an account is accessed from multiple devices and terminate all sessions for security
• Session Management: Track device binding timestamps and invalidate sessions when device conflicts are detected
• Account Linking: Link Google accounts to existing email accounts (when same email is used) for seamless authentication

2.8 Security & Anti-Fraud

• Detect and prevent cheating in SheerApps Bonus draws
• Rate limiting to prevent abuse
• Monitor suspicious activity patterns
• Verify device and timestamp authenticity
• Protect against automated bots and fake accounts
• Prevent account sharing through device restrictions

2.9 Communication

• Send important account notifications
• Notify about SheerApps Bonus wins and rewards
• Send VIP membership expiry reminders
• Respond to support requests

3. Third-Party Services

3.1 Google Sign-In (OAuth 2.0)

• Purpose: Secure user authentication and account creation
• Data Received from Google: Email address, name, profile picture URL, unique Google user ID
• Data Shared with Google: Only device information required for OAuth authentication flow (standard OAuth process)
• How It Works: When you sign in with Google, you authenticate directly with Google. We receive basic profile information from Google to create or link your account. Your password is managed by Google and NEVER stored on our servers.
• Account Linking: If you previously registered with an email address (e.g., [email protected]) and later sign in with Google using the same email, we automatically link your accounts for seamless access.
• Privacy Policy: https://policies.google.com/privacy
• Security: All tokens are verified server-side using Google's API Client Library

3.2 Google Play Services

• Purpose: Process in-app purchases and subscriptions
• Data Shared: Purchase tokens, product IDs, transaction details
• Privacy Policy: https://policies.google.com/privacy

3.3 Google AdMob (Non-VIP Users)

• Purpose: Display advertisements
• Data Shared: Device advertising ID, demographics, ad interactions
• Privacy Policy: https://policies.google.com/technologies/ads
• Opt-Out: Upgrade to VIP for ad-free experience or adjust ad settings in your device

3.4 Google Play Developer API

• Purpose: Verify subscription purchases and prevent fraud
• Data Shared: Purchase tokens (for validation only)
• Security: All verification done server-side with encrypted connections

4. Data Storage and Security

4.1 Where Data is Stored

• User Accounts: Secure database servers
• Purchase Records: Retained for 7 years (legal compliance)
• Point Transactions: Retained while account is active
• Lucky Draw Attempts: Retained for audit and anti-fraud

4.2 Security Measures

• Password Security: Encrypted password storage (bcrypt hashing) for email users; Google users' passwords managed by Google (never stored on our servers)
• Data Transmission: HTTPS/SSL for all data transmission
• Authentication: JWT token-based authentication with server-side verification
• Device Security: Unique device identifiers hashed (SHA-256) before storage to protect privacy
• 1-Device Policy: Only one device can be logged into an account at a time, preventing unauthorized sharing
• Multi-Device Detection: Automatic detection and session termination when account is accessed from multiple devices
• Purchase Verification: Server-side verification with Google Play API
• Anti-Fraud: Rate limiting, device fingerprinting, and anti-cheat systems
• Regular Updates: Security audits and software updates

4.3 Data Retention

• Active Accounts: Data retained while account is active
• Deleted Accounts: Personal data purged within 30 days (except as required by law)
• Purchase History: Retained for 7 years (tax and legal compliance)
• Transaction Logs: Retained for fraud prevention and dispute resolution

5. Your Rights

5.1 Access Your Data

You can view your data at any time:

• Account details: Settings → Account Management
• Point transactions: Settings → Point History
• SheerApps Bonus history: SheerApps Bonus screen
• VIP membership: VIP Membership screen

5.2 Delete Your Account

You can permanently delete your account:

• Go to: Settings → Account Management → Delete Account
• What Gets Deleted Immediately:
  • Email address and name
  • Google account linkage (if applicable)
  • Device ID and device binding information
  • Profile picture and personal information
  • Points balance and transaction history
  • SheerApps Bonus history and rewards
  • VIP membership status (non-refundable)
  • Referral codes and relationships
• Recovery Period: You have 30 days to restore your account. After 30 days, all data is permanently deleted and cannot be recovered.
• Note: Purchase records retained for 7 years (tax and legal compliance)
• Warning: This action is irreversible after 30 days. All points and benefits will be lost.
• Device Unbinding: Your device will be immediately unbound, allowing you to create a new account on the same device if needed.

5.3 Request Data Export

To request a copy of your data, contact us at: [email protected]

5.4 Manage Ad Preferences

• Opt-out of personalized ads: Adjust settings in your device's ad privacy settings
• Ad-free experience: Upgrade to VIP membership

6. Device Security & 1-Device Policy

6.1 Why We Collect Device Information

We collect and store device information to enforce our 1-device-per-account security policy. This helps us:

• Prevent Account Sharing: Ensure each account is used by only one person on one device
• Detect Fraud: Identify suspicious multi-device login attempts
• Enhance Security: Protect your account from unauthorized access
• Prevent Abuse: Stop users from exploiting features (SheerApps Bonus, referrals) across multiple devices

6.2 What Device Information We Collect

• Device Identifier: A unique ID generated by your device (hashed with SHA-256 encryption before storage for privacy protection)
• Device Name/Model: The name and model of your device (e.g., "Samsung SM-G960F") for your reference in Account Management
• Device Binding Timestamp: When your device was first bound to your account
• Last Login IP Address: For security monitoring (optional, not tied to device binding)

6.3 How the 1-Device Policy Works

Login Process:

• First Login: When you log in for the first time (or after account deletion), your device is automatically bound to your account
• Same Device Login: If you log in again from the same device, access is granted immediately
• Different Device Login: If you attempt to log in from a different device:
  • System detects device conflict
  • Alert shown: "You are logged into multiple devices at the same time. We only allow 1 login to 1 device. For security reasons, we've ended all sessions."
  • All sessions terminated on all devices
  • You must log in again to continue

6.4 App Launch Device Check

Every time you open the app:

• The app checks if your device ID matches the bound device in our database
• If a mismatch is detected (someone logged in from another device), you'll be automatically logged out for security
• This ensures your account remains secure even if you forgot to log out on another device

6.5 Device Data Retention & Deletion

• How Long We Keep It: Device information is stored for the duration of your active account
• Account Deletion: Device ID and binding information are immediately cleared when you delete your account
• Recovery Period: During the 30-day recovery period, device binding is cleared (not restored)
• New Device After Deletion: After account deletion, you can create a new account on the same device
• Device Upgrade: If you get a new device, you can transfer your account by logging in (old device will be automatically unbound)

6.6 Privacy & Security

• Hashed Storage: We hash device IDs using SHA-256 encryption before storing them, so the raw device ID is never stored in plain text
• No Third-Party Sharing: Device IDs are NEVER shared with any third parties
• Purpose-Limited: Device data is used ONLY for account security and fraud prevention
• No Tracking: We do NOT use device IDs for advertising, analytics, or cross-app tracking

6.7 Legitimate Device Changes

We understand you may need to change devices. Here's how it works:

• New Phone: Simply log in from your new device. The old device will be automatically unbound.
• Lost/Stolen Device: Log in from your new device to secure your account and unbind the lost device.
• Device Reset: Your device ID may change after a factory reset. Log in again to rebind.
• No Cooldown: There is no waiting period for legitimate device changes.

7. SheerApps Bonus & Virtual Rewards

7.1 SheerApps Bonus Participation Data

When you participate in SheerApps Bonus draws, we collect:

• Draw type (daily, friendship, VIP)
• Timestamp of draw attempt
• Prize won and points awarded
• Device ID and IP address (anti-cheat)
• Draw chances used and remaining

7.2 Anti-Cheat Measures

To ensure fair play, we monitor:

• Unusual draw patterns (frequency, timing)
• Device changes and multiple accounts
• Timestamp manipulation attempts
• Purpose: Prevent abuse and maintain integrity
• Action: Suspicious accounts may be suspended

7.3 Virtual Rewards

Important:

• All SheerApps Bonus prizes are virtual points within the app
• Points have NO real-world monetary value
• Points CANNOT be exchanged for cash
• Points can only be used for in-app redemptions (digital services)

8. Referral Program

8.1 Referral Data

When you participate in the referral program:

• Your referral code and who you referred
• Referral rewards claimed (points and SheerApps Bonus chances)
• Referrer information (who referred you)
• Claim timestamps and verification status

7.2 Fraud Prevention

• We monitor for fake accounts and manipulation
• Automated referral systems are prohibited
• Violators may have accounts suspended

9. VIP Membership & Subscriptions

9.1 Subscription Data

For VIP subscriptions, we collect and store:

• Subscription plan (1-month, 6-month, 12-month)
• Purchase date and expiry date
• Purchase tokens from Google Play (for verification)
• Auto-renewal status
• Cancellation date (if cancelled)

8.2 Purchase Verification

We verify all subscriptions with Google Play Developer API to:

• Prevent fraudulent purchases
• Ensure legitimate payment
• Validate subscription status
• Handle refunds and cancellations properly

8.3 Subscription Management

• Auto-Renewal: Subscriptions automatically renew unless cancelled 24 hours before expiry
• Manage Subscriptions: Go to Google Play Store → Menu → Subscriptions
• Refunds: Request through Google Play Store within 48 hours of purchase
• Cancellation: You retain access until the end of your paid period

10. Point Store & Redemptions

10.1 Redemption Data

When you redeem points:

• Product details and redemption amount
• Delivery information (email, phone number, game account)
• Redemption status (pending, completed, rejected)
• Admin notes (for processing)

9.2 Delivery Partners

We may share necessary information with redemption partners:

• E-wallet reload: Email or phone number only
• Game credits: Game account ID only
• We never share: Full account details, passwords, or payment information

11. Advertising

Our app uses Google AdMob to display ads for non-VIP users. AdMob may collect:

• Device information (model, OS, screen size)
• Advertising ID (for personalized ads)
• Ad interaction data (views, clicks)
• Approximate location (for relevant ads)

VIP Users: Ads are completely removed. No advertising data is collected for VIP members.

Learn More: Google Ads Policy

12. Data Sharing

12.1 We Share Data With:

• Google Play: Purchase verification (tokens only, no personal data)
• AdMob: Advertising (device data only, not personal info)
• Redemption Partners: Delivery details only (minimal information)

11.2 We DO NOT Share:

• ❌ Your personal information with advertisers
• ❌ Your purchase history with third parties
• ❌ Your SheerApps Bonus results publicly (unless you win major prizes - anonymized)
• ❌ Your referral network details

11.3 Legal Requirements

We may disclose your information if required by law:

• Court orders or legal processes
• Government agency requests
• Fraud investigation or prevention
• Protection of our legal rights

13. Children's Privacy

User Guidelines

• Our app is available for users of all ages
• We encourage responsible use by all users
• Parents are encouraged to supervise children's app usage
• If you have concerns about content, please contact us

14. International Data Transfers

Your data may be stored and processed in different countries:

• Our servers may be located outside your country
• We use secure, encrypted transmission
• All transfers comply with applicable data protection laws

15. Your Rights (GDPR/CCPA Compliance)

If you are in the EU, UK, or California, you have additional rights:

• Right to Access: Request copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request data deletion
• Right to Restriction: Limit how we process your data
• Right to Portability: Receive your data in portable format
• Right to Object: Object to data processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact: [email protected]

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time:

• Changes will be posted on this page
• "Last updated" date will be updated
• Major changes will be notified via email or in-app notification
• Continued use after changes = Acceptance of new policy

17. Disclaimer

⚠️ Important Notices:

17.1 4D Lottery Information

This app is independently developed and not affiliated with or endorsed by any lottery operator or government agency. All results are provided for informational purposes only.

All trademarks, service marks, logos, and brand names are the property of their respective owners. This app is not affiliated with, endorsed by, or officially connected to any of the organizations mentioned.

🛠️ Sources include:

• Malaysia: magnum4d.my, sportstoto.com.my, damacai.com.my & others
• Singapore: singaporepools.com.sg
• Cambodia: gdlotto.com, 9lotto.com, and more

⚠️ Please verify results through official channels. This app is for viewing 4D results and forecasts only for informational and educational purposes. We are NOT affiliated with, endorsed by, or connected to any lottery operator. This app does NOT facilitate gambling, betting, or ticket purchasing and does NOT sell lottery tickets.

17.2 SheerApps Bonus & Rewards

• 🎮 Entertainment Only: SheerApps Bonus draws are entertainment features for viewing 4D results
• 💰 Virtual Rewards: All prizes are virtual points with no real-world value
• 🎲 Transparent: Probabilities are clearly disclosed
• ✅ Fair Play: Results are server-verified and cannot be manipulated
• 🚫 No Real Money: Entertainment and information only. No cash prizes.

17.3 Point Store & Virtual Currency

• 📱 Virtual Only: Points have no real-world monetary value
• 🚫 No Cash Exchange: Points cannot be exchanged for cash
• 🔒 No Transfers: Points cannot be transferred to other users
• 🎁 Digital Services: Redemptions are for digital services only (ad removal, VIP features, e-wallet reloads)

17.4 In-App Purchases

• 💳 Optional: VIP Membership and Point Packages are optional purchases
• 🆓 Free Core Features: All core features remain free (4D results, free lucky draws)
• ⚖️ No Pay-to-Win: Purchases do not provide financial advantages
• ⚙️ Manage Subscriptions: Through Google Play Store account settings

17.5 Referral Program

• 👥 Genuine Engagement: Designed for real user engagement and community building
• 🚫 No Manipulation: Fake accounts, bots, or fraud are strictly prohibited
• ⚠️ Consequences: Violations may result in account suspension
• 🎁 Virtual Rewards: Rewards are points and SheerApps Bonus chances (no cash value)

17.6 VIP 4D Prediction Feature

18. Contact Us

If you have questions about this Privacy Policy or your data:

• Email: [email protected]
• Support: Settings → Contact Us in the app
• Data Deletion Requests: Settings → Account Management → Delete Account

Response Time: We aim to respond to all inquiries within 48 hours.

By using SheerApps, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.