Privacy Policy

1. Who We Are

Festival Wayfinder is an independent mobile application for browsing theme park food festival booth menus, building tasting wishlists, and navigating the park. Currently supporting all four EPCOT food festivals, with additional parks planned. This Privacy Policy explains how we handle information when you use the Festival Wayfinder app.

Questions? Contact us at privacy@festivalwayfinder.app.

2. Information We Collect

Information You Provide

We collect information you actively enter into the App:

• Display name: an optional name you choose, used only within the App for shared wishlist sharing.
• Wishlist items: dishes and drinks you save across supported festivals and parks.
• Ratings and comments: personal star ratings (1 to 5) and tasting notes you write for menu items.
• Share codes: codes you generate or enter to link wishlists with a travel partner or load recommendations.
• Optional account link (Apple or Google): if you choose to sign in with your Apple ID or Google account, we receive a unique account identifier and, depending on your sharing preferences, your name and email address. This is used to enable cross-device cloud syncing and Festival Pass purchase recovery. Account linking is never required to use the App.

Information Collected Automatically

• User ID: a randomly generated identifier created on first launch via Firebase Authentication. For Guests, it is not linked to your name, email, or any external identity. If you sign in with Apple or Google, it is linked to that account.
• Location data: your GPS coordinates are used on-device to display your position on the park map and trigger proximity alerts for nearby wishlisted booths. Your raw GPS coordinates are not uploaded.
• Wait-time samples: when location is on, the App uploads a sample for booths you visit so it can show live wait estimates. See Location Data for exactly what is included.

The App does not include crash reporting, analytics, or advertising SDKs.

Information We Do Not Collect

• Your phone number
• Your name or email address, unless you sign in with Apple or Google or contact us directly
• Payment or financial information
• Social media credentials
• Browsing history outside of the App
• Advertising identifiers

3. How We Use Your Information

• Providing core app functionality including displaying your wishlist, ratings, and tasting notes, and enabling GPS map features and proximity alerts.
• Partner wishlist syncing: when you activate the Partner Link feature, your wishlist items are synced to Firestore so your travel companion can view and edit them in real time.
• Recommendations: when you enter a Recommendation share code, the recommender's saved ratings and notes are displayed alongside your own for comparison. This data is read-only and does not merge with your wishlist.
• Cross-device cloud sync: when you link your Apple or Google account, your wishlist, ratings, and tasting notes are synced to the cloud so they are available across all your devices.
• Purchase recovery: your Festival Pass purchase is tied to your linked account, allowing you to restore it on a new or replacement device.
• Live wait estimates: wait-time samples from users with location on are combined to estimate current wait times at each booth. We do not use this data for marketing or profiling.
• Purchases: your user id and App Store purchase history are used to unlock and restore Festival Pass and Annual Pass purchases.

4. Data Storage

On-Device Storage

Allergy preferences, filter settings, and your GPS toggle are stored locally on your device using device storage (MMKV). A local copy of your wishlist, ratings, and notes is also kept on your device.

Cloud Storage (Firebase / Firestore)

The following data is stored in our Firebase project hosted on Google Cloud:

• Your wishlists, star ratings, and tasting notes, synced for all users (including Guests) and linked to your user id
• Recommendation snapshots (items, ratings, comments) linked to a recommendation share code
• A minimal user document containing your user id, creation timestamp, and wishlist reference
• Wait-time samples, described in Location Data
• If you link an Apple or Google account: your account identifier and, if provided, your name and email address, used to associate your data across devices and support purchase recovery

We may also use wishlist data in aggregate, for example to understand which booths and items are most popular across the app. Aggregate figures do not identify individual users.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:

• With your travel partner: when you activate the Partner Link feature, your wishlisted items are visible to the person you share your code with.
• With other users, for wait estimates: your wait-time samples can be read by other signed-in users' apps to calculate live wait estimates.
• With RevenueCat: our purchase processor, which receives your user id and App Store purchase history to manage Festival Pass and Annual Pass purchases.
• With Google / Firebase: as our backend service provider for authentication and the Firestore database. Google's use of this data is governed by their Privacy Policy.
• With Apple: if you choose to sign in with Apple, your authentication is handled by Apple's Sign in with Apple service. Apple's use of this data is governed by their Privacy Policy.
• When required by law: if we are required to disclose information by applicable law, court order, or government authority.

6. Location Data

Festival Wayfinder requests access to your device's location to support GPS map features and proximity alerts for wishlisted booths.

• Location access is used in two ways: displaying your live position on the Map tab, and running a background task that monitors your proximity to wishlisted booths and triggers alerts when you get close.
• The background proximity task requires location access to remain active when the app is not in the foreground, so alerts fire even when you are not actively viewing the map.
• Your raw GPS coordinates are not uploaded or stored on our servers.
• When location is on, the App uploads a wait-time sample for booths you visit: booth id and name, arrival and departure times, time in line and time eating, whether you reached the counter, your closest distance to the booth, GPS accuracy, park, and your user id. We keep one latest sample per booth for each user.
• Other signed-in users' apps read these samples to show live wait estimates. Samples are kept until you delete your account.
• Location access is optional. Booth browsing, wishlisting, and all other features work without it.
• You can revoke location permissions at any time through your device's Settings app. Revoking permission will disable both the map display and proximity alerts.

7. Children's Privacy

Festival Wayfinder is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@festivalwayfinder.app and we will promptly delete it.

8. Data Retention

On-device data is retained until you uninstall the App or clear its data. Cloud data is retained until you delete your account. You can delete your account and cloud data at any time in the App under Profile > Delete Account. See how account deletion works for what is removed. If you no longer have the App, email us and we will handle your request within 30 days.

9. Your Rights

• The right to access what data we hold about your account
• The right to delete your account and cloud-stored data, in the App under Profile > Delete Account or by contacting us
• The right to withdraw consent for location access at any time via device settings

To exercise any of these rights, contact us at privacy@festivalwayfinder.app.

10. Security

We implement reasonable security measures to protect your information, including using Firebase's built-in security rules to ensure that users can only access their own Firestore data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will provide notice within the App. Continued use of the App after changes are posted constitutes your acceptance of the revised policy.

12. Contact