privacy policy

When you sign in.We use Google or Apple to sign you in. From Google we receive your email address, your display name, and your profile picture. From Apple we receive your email address, and a name only on the very first time you authorise us. If you choose Apple's option to hide your email, we only ever see a forwarding address at privaterelay.appleid.com and never your real one. We never receive or store your password for either service.

What you tell us. The username you pick, and your TikTok username if you choose to add one. Adding a TikTok username is optional and you can change or clear it whenever you like.

How you play. Your scores, how many rounds you played, the tickets you earned, and when. This is the game, so we cannot run it without this.

Your device and connection. Your IP address, the country your connection appears to come from, your browser or app user agent string, whether the device is a phone, and when we first and last saw that combination. We do not use any device identifier for this, and we do not read one: not an advertising ID, not a hardware ID, and nothing we generate and leave on your device to recognise you by.

To run the games and keep your score. To work out who won and to get in touch with them. To keep the games fair, to stop automated play, and to stop one person running many accounts, which is the main reason we keep IP addresses and device information. To understand which games people enjoy so we can build better ones.

If you are in the UK or the European Economic Area, our lawful bases are performance of a contract for running the draw and delivering prizes, and legitimate interests for fraud prevention and product improvement. You have the right to object to the latter at any time.

We use a small number of service providers, each of which only processes data on our instructions:

• Supabase stores the database and handles sign in.
• Vercel hosts the site and serves it to you.
• Google provides sign in, and Google Analytics tells us how the site is used.
• Apple provides Sign in with Apple.
• Cloudflare runs the Turnstile check that keeps bots out of sign up.

Each of these providers is required by contract to protect your information to the same standard set out in this policy, and to use it only for the purposes described here. None of them is permitted to use your information for their own purposes.

Beyond those, we share personal information only where the law requires it. We do not sell it, and we do not trade it. If you win, we will show your username and profile picture publicly as a winner, and we will contact you privately to arrange the prize.

We use Google Analytics to count things like how many people played a game and how long a session lasted. We deliberately do not send your email address or your TikTok username to Google Analytics. The only identifier attached to analytics is a random one that means nothing outside our own records.

Everything between your device and us travels over an encrypted connection. Your information is held in a managed database that is not directly reachable from the internet, behind access rules that check who is asking before anything is returned.

We never hold a password for you, because Google and Apple handle signing in and we only ever receive the result. Access to live data is limited to the people who run Amin Drops.

No system is perfect and we will not pretend ours is. If a breach ever affects your personal information, we will tell you and the relevant authority in the time the law allows.

Your account and its game history stay until you ask us to delete them. Device and connection records used for fraud prevention are kept while they are useful for that purpose and then removed. Where we need to keep records to show a draw was run fairly, or because tax or prize rules require it, we keep only those records and only for as long as needed.

You can delete your account yourself at any time, from Settings in the app or at amindrops.com/delete. That removes your profile, your tickets and your scores, and it takes your entries out of any draw that has not yet been made. You do not need to ask us and you do not need a reason.

You can also withdraw your permission at any time by deleting your account as above, and by disconnecting Amin Drops from your Google or Apple account in the settings of whichever one you used.

If you would rather we did it, or you want a copy of your data or a correction to it, write to hello@amindrops.com and we will action it within one month.

If you are in the UK or the European Economic Area you also have the right to restrict or object to processing, the right to data portability, and the right to complain to your local data protection authority. If you are in California you have the right to know what we collect and to have it deleted, and the right not to be discriminated against for asking. We do not sell or share personal information as those terms are defined in California law.

You must be at least 13 years old to use Amin Drops. Some countries in Europe set a higher age for consenting to data processing, up to 16, and where that applies to you it is the age that counts.

We do not knowingly collect information from anyone below the applicable age. If we learn that we have, we delete it. If you believe someone below that age has given us their information, write to hello@amindrops.com and we will remove it.

Being old enough to use the app is not the same as being old enough to win. There is a separate minimum age for being drawn as a winner and for accepting a prize, set out in the official rules.

Our providers store and process data in the United States and in other countries. Where information is transferred out of the UK or the European Economic Area, that transfer relies on the standard contractual clauses or another approved safeguard.

If we change what we collect, we will update this page and change the date at the top. If a change is significant, we will tell you in the app before it takes effect.

Amin Drops is a product of AMIN SHAYKHO LLC. Questions or requests about your data go to hello@amindrops.com.