Privacy Policy

Effective Date: May 29, 2026 | App: Prize Bonds PK | Package: com.prizebonds.pk

Prize Bonds PK ("we", "our", "the App") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how it is stored, and your rights regarding that data.

1. Data We Collect

Data	When	Purpose
Email address	Account registration	Authentication, email confirmation
Password	Account registration	Authentication (hashed, never stored in plain text)
Saved bond numbers	When you add bonds	Check results, track winnings
Bond denominations	When you add bonds	Filter results by bond type
Notification preferences	When you enable notifications	Schedule draw reminders — stored on your device only, never sent to us

2. Data We Do NOT Collect

Location data
Contacts or phone number
Device identifiers or advertising IDs
Browsing history
Financial or banking information
Photos, camera, or microphone data

            No tracking, no analytics, no ads. We do not use any analytics SDKs, advertising networks, or behavioral tracking tools.
        

3. Guest Mode

You can use the App without creating an account. In guest mode:

All bond data is stored locally on your device only using AsyncStorage
No data is sent to our servers
Data is lost if you uninstall the app or clear app data

4. Where Your Data Lives

Storage	What	Provider
Cloud database	Account info, saved bonds (registered users)	Supabase (PostgreSQL)
On-device	Guest bonds, preferences, activity history	AsyncStorage (local only)

Supabase hosts our database on secure infrastructure. Row Level Security (RLS) ensures each user can only access their own data. For details, see Supabase's Privacy Policy.

5. Third-Party Services

Service	Purpose	Data Shared
Supabase	Authentication, database	Email, password (hashed), saved bonds
Expo	App framework and build tooling	None — no push tokens or device identifiers are requested or transmitted
Resend	Transactional email delivery (account confirmation, password reset)	Email address

We do not share, sell, or rent your personal data to any other third parties.

6. Notifications

Notifications require your explicit opt-in
Types: draw reminders and a weekly digest
Every notification is scheduled locally on your device. The App uses no push server, requests no push token, and your device is never registered with us or with any third party for messaging
Your notification choices stay on your device and are never uploaded
You can disable any notification type at any time in the app settings

7. Data Security

Passwords are hashed using Supabase Auth (bcrypt)
All data transmission uses HTTPS/TLS encryption
Row Level Security ensures users can only access their own bonds
JWT tokens are used for session management

8. Your Rights

You have the right to:

Access your data — view all saved bonds and account info in the app
Delete your data — delete individual bonds or your entire account
Export your data — contact us and we will provide a copy of your data
Withdraw consent — disable notifications or delete your account at any time

            Account deletion: When you delete your account, all associated data (bonds, preferences) is permanently removed from our servers via cascade deletion. This action cannot be undone.
        

9. Data Retention

Registered users: Data is kept until you delete it or delete your account
Guest users: Data exists only on your device
Draw results: Public government data, stored indefinitely

10. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights:

Email: help@prizebondspk.com