We collect the minimum data necessary to provide real-time park guidance. Here is a complete list:

We do not collect names, email addresses, phone numbers, payment information, or any other personally identifiable information unless you voluntarily sign in through our optional authentication system.

We believe in being explicit about what we don't do, because privacy policies that only describe what a company does can leave room for doubt:

• ✓We do not run advertising of any kind.
• ✓We do not use tracking pixels, fingerprinting, or analytics that follow you across sites.
• ✓We do not build behavioral profiles or interest graphs.
• ✓We do not sell, rent, or share your data with third parties for marketing.
• ✓We do not sell your location data — ever.
• ✓We only use transient GPS data for in-park routing; it is never stored or transmitted to third parties.
• ✓We do not use your chat messages to train AI models.
• ✓We do not store your location history.
• ✓We do not require an account to use the app.
• ✓You can delete all your data at any time via the Settings page.

When you allow location access, we use your browser's Geolocation API to determine which theme park is nearest to you. This is how it works:

1. Your browser provides approximate coordinates.
2. We round those coordinates to approximately 1 km precision before any processing.
3. We compare the rounded position against known park locations to find the nearest match.
4. The coordinates are immediately discarded — they are never written to a database, log file, or analytics system.

If you deny location access, the app works normally — you simply select your park manually. Location is never required.

We use a single, strictly necessary session cookie if you choose to sign in. This cookie:

• Identifies your authenticated session so you don't have to log in on every page.
• Contains no personal information — only an opaque session identifier.
• Is cleared when you log out or when it expires.
• Is not used for tracking, advertising, or analytics.

We do not use third-party cookies. We do not use localStorage or sessionStorage for tracking purposes. The only localStorage value we set is your legal terms acceptance status and your theme/font-size preferences.

We rely on a small number of external services to provide park data. Each is documented here:

None of these services receive your location, browsing history, or personal information.

If you choose to purchase a premium subscription, payment is processed entirely by Stripe. We never receive, see, or store your credit card number, CVV, or full billing address. The only payment-related data we store is:

• Stripe Customer ID: An opaque identifier that links your account to your Stripe record.
• Subscription status: Whether your subscription is active, cancelled, or expired.

You can manage your payment methods, view invoices, and cancel your subscription at any time through the Stripe customer portal accessible from your account settings. Stripe's own privacy policy governs how they handle your payment information.

AI Park Guide is designed to be family-friendly and safe for users of all ages. We take compliance with the Children's Online Privacy Protection Act (COPPA) seriously:

• ●We do not knowingly collect personal information from children under 13.
• ●No account is required to use the app, so children can use it without providing any personal data.
• ●Our AI Guide is filtered for child-safe content — responses are reviewed for appropriateness.
• ●We do not serve advertising to any users, including children.
• ●We do not use behavioral tracking or create profiles of any users, including children.
• ●Chat messages are processed in-session and are not stored or used for model training.
• ●We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary.
• ●Family Mode features are designed to be used by a parent or guardian, not by children directly.

Because we collect so little data, our retention policy is straightforward:

• Location data: Not retained. Discarded immediately after nearest-park detection.
• Chat messages: Not retained. Exist only in your browser session.
• Session cookies: Expire automatically. Cleared on logout.
• Legal acceptance: Stored in your browser's localStorage until you clear it.
• Decision audit logs: Anonymized server-side logs (no PII) retained for operational quality assurance, automatically rotated daily.

Regardless of where you are located, you have the right to:

• Access: Ask us what data we hold about you (in most cases, the answer is none).
• Deletion: Delete your account and all associated data at any time via Settings → Delete Account & Data. This is instant and permanent.
• Opt out: Deny location access at any time through your browser settings.
• Withdraw consent: Log out to end your session and clear your session cookie.

Since we do not collect personal data from most users, there is typically nothing to delete. If you have signed in, you can delete your account and all associated data instantly from the Settings page — no email or support ticket required.

If we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where appropriate, display a notice within the app. If we ever begin collecting additional data (which we have no plans to do), we will update this policy before that collection begins and obtain any required consent.

If you have questions about this privacy policy, your data, or our COPPA compliance practices, you can reach us at [email protected] or through the in-app feedback tool available on every page.