PRIVACY POLICY — VERIFACT APP

**Last updated: June 4, 2026**

This Privacy Policy explains how **LYG INC** ("we," "us," or "our") collects, uses, and shares information about you when you use the **Verifact App** and its related services, including our raffle and sweepstakes features (together, the "App"). The Sweepstakes feature is offered at one or more participating physical venues such as coffee shops, bars, or stores ("Participating Locations"); some prizes at Participating Locations are provided by LYG INC, and others are provided by the Participating Location itself, as identified on the entry page for that Location. By using the App, you agree to the practices described here.

1. Who We Are

The App is operated by LYG INC. If you have questions about this policy or your information, contact us at **support@thelyg.com**.

2. Information We Collect

We collect only the limited information needed to operate the App and run our promotions. Specifically:

2.1 Information you provide to us

- **Display name:** A name you choose, which may be a nickname or display name. - **Contact information:** Your mobile phone number and your email address. We use your phone number to verify your account at signup, to let you log in, and to send you text messages about your entry; we use your email address as an additional way to contact you. - **Promotion entries:** The ticket or team assigned to you when you enter a promotion. - **Communications:** If you contact us (for example, by emailing support), we collect the information you choose to share with us.

2.2 Information collected to prevent fraud

To keep our promotions fair and to enforce our one-entry-per-person limit, we collect limited **IP address information** so we can detect and prevent fraudulent or duplicate entries from the same person. We use this information only for fraud prevention, and we **delete it after 30 days**. We also verify your mobile phone number at signup, by texting a one-time code, to help ensure each person enters only once.

We do not collect device tracking data or usage analytics for advertising, and we do not use your information to build advertising profiles.

2.3 On-premises entry: QR scan and device location

Our sweepstakes is on-premises only. To enter at a Participating Location you must (a) scan the QR code displayed at that Location **or** (b) share your device's current location at the moment of submission while physically at that Location. To enforce these rules, when you submit an entry the App may read up to two pieces of information that are **used only at the moment of submission** and are **not stored** afterwards:

- **A short-lived QR scan token.** The QR code at each Location encodes a link that issues a stateless, signed token tied to that Location. The token is valid for approximately fifteen (15) minutes from the moment you scan and is verified server-side by signature only — we do not keep a database record of QR scans or visit history. - **Your device's current coordinates.** When you press submit, the App asks your browser for your current latitude and longitude and sends them to our server only so we can confirm you are inside the Location's geofence. The coordinates are evaluated and discarded with the request; we do not log or retain them.

Either signal — a valid QR scan token OR coordinates inside the geofence — is sufficient to enter. If neither is present (an expired/invalid QR and no shared location, or shared coordinates that are outside the geofence), the entry is rejected and no entry record is created.

3. How We Use Information

We use the information we collect only to:

- Verify your phone number at signup and let you log in to and use the App; - Send you text messages related to your entry — a one-time verification code, a confirmation, your assigned team, and, if you win, a winner notification; - Send you an email about your entry — confirming you are entered, notifying you if your assigned team wins the tournament, and notifying you if your assigned team is eliminated from the tournament; - Run promotions, assign tickets/teams, determine winners, and contact and notify winners; - Detect and prevent fraudulent or duplicate entries; - Respond to your questions and provide support; and - Comply with our legal obligations.

**We do not send marketing or promotional messages, and we will never do so.** Every text message we send is limited to verifying your account and administering a promotion you entered. We will not contact you to ask for payment or to request additional personal information beyond what is described here. We do **not** require any payment to enter our sweepstakes, and we do **not** sell your personal information.

4. How We Share Information

We do not sell your personal information, and we do not share it for anyone else's marketing. We share information only as described below:

- **Service providers:** We share information only with companies that help us operate the App, and only to the extent needed for them to perform those services: **Render**, which hosts the application that processes promotion entries, login, and fraud-prevention data; **GoDaddy**, which hosts our public website (thelyg.com), where pages such as the Official Rules and this Privacy Policy are served; **Microsoft** (Microsoft 365, provided through GoDaddy), which handles our email, including support messages, winner notifications, and notifications that your assigned team has been eliminated from the tournament; and **Twilio**, which delivers the text messages and verification codes we send to your phone number. - **Participating Locations:** Our sweepstakes is offered at participating physical venues such as coffee shops, bars, or stores ("Participating Locations"). Where a Participating Location is identified as the prize provider for the drawing you entered, and you win that drawing, we will share with that Participating Location the limited contact information necessary for them to fulfill the prize (typically your display name, phone number, and email address). We do not share entrant information with Participating Locations for marketing, and Participating Locations are not permitted to use that information for any purpose other than fulfilling the prize. - **Location data:** When you submit an entry at a Participating Location, your device's coordinates are sent to our server only to confirm you are inside that Location's geofence at the moment of submission. The coordinates are evaluated and discarded with the request; we do not store them. If you choose to use the optional "show distances" button on the sweepstakes landing page, your coordinates are read locally on your device only — we do not send those coordinates to our server. - **Legal and safety:** We may disclose information if required by law, or to protect the rights, property, or safety of LYG INC, our users, or others. - **Business transfers:** If LYG INC is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. - **Winner identification:** As stated in the sweepstakes Official Rules, the winner's display name may be made available upon request. - **Public Team Assignment Ceremony:** As stated in Section 6 of the sweepstakes Official Rules, team assignment for each Participating Location occurs in a public, automated draw at the close of the entry window. **The display name you provide will be shown publicly on the entry page for your Location during that ceremony**, paired with the team you are assigned. We do not show your phone number, email address, or any other contact information at this ceremony. If you do not want your display name shown publicly, choose a name on the entry form that you are comfortable being seen by other patrons of the Participating Location.

5. Data Retention

We keep IP address information used for fraud prevention for no longer than **30 days**, after which it is deleted. We keep the other information you provide (display name, phone number, email address, and your promotion entries) only for as long as needed to operate the App, run and resolve promotions, comply with our legal obligations, and resolve any disputes. When information is no longer needed, we delete or de-identify it.

6. Your Choices and Rights

- **No marketing:** We do not send marketing or promotional messages. We contact you only to operate the App and administer promotions you enter — for example, to verify your phone number, log you in, or notify you if you win. - **Text messages:** You can stop receiving texts at any time by replying STOP to any message, or reply HELP for help. Message frequency varies and message and data rates may apply. If you opt out of texts, we may be unable to send you text-based notices (such as a winner notification), so we may contact you by email instead. - **Access and deletion:** You may request access to, correction of, or deletion of your personal information by emailing **support@thelyg.com**. We will respond as required by applicable law.

Depending on where you live, you may have additional rights (for example, under the California Consumer Privacy Act or similar state laws). To exercise any such rights, contact us at support@thelyg.com.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The App and its promotions are intended for users who are **18 years of age or older**. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us information, contact us at support@thelyg.com and we will take appropriate steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the App after changes take effect means you accept the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our handling of your information, contact us at:

**LYG INC** 1910 N Water St, Apt 302 Milwaukee, WI 53202 Email: **support@thelyg.com**