Privacy Policy

Information we collect

We collect only what we need to provide and improve the service:

• Information you give us — for example, when you join the waitlist we collect your name, email address, and (optionally) phone number.
• Your account and profile — the email address you sign in with, your display name, your @handle, your profile photo if you add one, and your app preferences and settings.
• Adventure data — the logs, journal entries, notes, ratings, wait times, trips, plans, and photos you create.
• Photos you add to logs and journal entries — the photo itself, and the date and time it was taken and, unless you turn it off, the place it was taken. See “Photos” below.
• People you record — the names of the people you log an experience with or invite to a trip, and their email address or phone number if you enter one so we can send an invitation.
• My Locations — places you save yourself, each with a name, coordinates, and an optional note and photo. These can be anywhere you choose, including places that are not theme parks.
• Location information — including, if you turn on track recording, a precise and continuous record of where you went. This is the most sensitive information in the app, and it has its own section below.
• Health and activity data — daily step count and walking distance, if you allow it. See “Health and activity data” below.
• Information collected automatically — basic device and usage data such as IP address, browser type, and pages visited, used to keep the service secure and understand how it’s used.
• Diagnostic and sync-health reports — when something goes wrong, the apps send us error reports containing details about the failure, your device, and the app version. The mobile app also sends a short sync-health report when it opens or returns to the screen: how many of your changes are waiting to sync or failed to sync, the app version, and a random identifier for that installation. These reports contain no names, email addresses, locations or adventure content. We use them to find and fix problems.
• Sign-in activity — when you sign in or the app renews your session, we record the time, so we can monitor how the service is running.

Signing in stores your adventure data in the cloud

There is no local-only mode. Signing in stores the adventure data you create with your account, so it is backed up, available on your other devices and on the web app, and shareable as described under Sharing. The app still works without a connection: what you create while offline stays on the device until it can be uploaded, and it is uploaded when the connection returns. Being offline is not a separate mode, and it does not keep that data off our servers.

What is stored with your account is everything listed under “Information we collect” above: your logs, journal entries and notes, your trips, plans and their participants, your photos, your My Locations, your profile and preferences, your health days, and your GPS tracks — including the precise, continuous location history described below.

Signing in is what authorises that upload. There is no separate switch for individual categories, and nothing in that list is held back. Anything already on the device that has not been uploaded yet is uploaded the next time the device syncs.

Location information

Depending on your device permissions and your in-app settings, we handle four different kinds of location information, and they are not equally sensitive:

• The place you logged. When you log an attraction, restaurant, show, or other place from our catalogue, we store that place’s own coordinates so your adventure can appear on a map. This describes the place, not you.
• Where you were when you logged something. This is separate from a GPS track, and it starts off. On a journal entry, “Record this location” is off until you turn it on for that entry. For other logs, “Save my location with logs” in Settings is off until you turn it on; while it is on, a new log of those kinds can store your device’s position. The mobile app does not show that position on those logs.
• Where a photo was taken. When you add a photo to a log or journal entry, the app reads the place it was taken, if your camera recorded one, and keeps it with the photo so your photos can be shown on a map. This is on unless you turn off “Include location in log photos”, and it is separate from “Save my location with logs”: a photo can keep its place even while that setting is off. See “Photos” below.
• Precise, continuous location history (GPS tracks). If you turn on GPS track recording, the app records your device’s position continuously while you are in or around a park. This is not a series of check-ins: it is a stream of individual position readings, each with a latitude and longitude, an accuracy estimate, and the time it was taken, plus speed, heading, and altitude where your device reports them. Taken together those readings are a detailed, minute-by-minute record of where you went, which route you took, and how long you stayed at each spot. Track recording is off unless you turn it on.

If GPS track recording is on, your tracks are uploaded to and kept in our cloud storage, and that upload includes the raw, full-resolution position readings — not only a simplified version of your route. Signing in is what permits this: there is no separate setting that keeps the raw readings on your device while the rest of your account syncs. A track you recorded earlier that has not yet been uploaded is uploaded in full, raw readings included, the next time your device syncs. If track recording is off, there is no track data to upload.

We want to be direct about this, because it is a change: earlier versions of this policy and of the app’s own settings screen said that the raw position readings would never leave your device. That is no longer accurate, and this section replaces it. We do not sell location information, and we do not use your device’s location for advertising or for referral or affiliate analytics.

Your controls over location:

• Turn GPS track recording off in Settings — nothing further is recorded.
• Leave “Record this location” off on a journal entry — it starts off for each entry.
• Leave “Save my location with logs” off in Settings — it is off unless you turn it on, and while it is off those other logs do not store your device’s position.
• Turn off “Include location in log photos” in Settings — photos uploaded after that do not include the place they were taken. It does not remove the place from photos already uploaded; delete a photo to remove it.
• Delete a track in the mobile app or on the web. The app asks you to confirm, then removes the track from your device and from our cloud storage, including the file that holds the position readings. On the web, the same confirmation removes the track from our cloud storage, including that file. A phone that already saved the track keeps its copy until you delete it there. This cannot be undone. If the device is offline, that cloud copy is removed when the connection returns.
• Revoke the app’s location permission in your device settings at any time.

Health and activity data

If you allow it, the app reads your daily step count and the distance you walked from Apple Health on iOS or Health Connect on Android, for the days covered by your trips, so it can show you how far you walked on an adventure. For each day we keep one small record: the date, the step count, the distance, which health app it came from, and when we read it.

That is the only health information we read. We do not read heart rate, sleep, workouts, body measurements, medical records, or anything else from your health app. These daily records are stored with your account. Health tracking is on by default and can be turned off in Settings, which stops all further reading and uploading. Turning it off does not delete days already captured — you can ask us to delete those.

Photos

Photos you add to a log or journal entry are saved on your device and uploaded to your account, so they are backed up and appear on your other devices and on the web app. The app uploads a copy it makes on your device, and that copy does not include the information your camera embedded in the file. Separately, when you add a photo the app reads two things from it and stores them with the photo: the date and time it was taken and, if “Include location in log photos” is on, the place it was taken. That setting is on unless you turn it off, and it covers photos on every kind of log. When it is off — or when “Record this location” is off on a journal entry — the app removes the place before the photo is uploaded, and also from the app’s own copy on your device, so those photos cannot be shown on a map later. The date and time are still kept.

Log photos are stored privately and shown only through short-lived links, to you and, when a log is part of a trip you share, to the other members of that trip — including the date, time, and place a photo was taken, when it has them — for as long as they are members. Removing a photo, or deleting its log, removes it from your account and from what trip members can see, and the stored files are then deleted from our storage.

Photos you add to a My Location are stored on your device and uploaded to our cloud storage. We upload the original file as your device produced it, so whatever metadata your camera embedded travels with it — typically the date and time the photo was taken, and, if your phone or camera saves location in photos, the coordinates where it was taken. If you would rather not include that, turn location off for your camera app, or remove the metadata before attaching the photo.

How we use information

• To operate, maintain, and improve Magical Adventure Log.
• To store and sync your adventure data across your devices and on the web app, and to share what this policy describes under Sharing.
• To contact you about early access, updates, and service announcements you signed up for, and to deliver trip invitations you ask us to send.
• To secure the service and prevent fraud or abuse.
• To comply with legal obligations.

Sharing

We do not sell your personal information. We share it only with service providers who process it on our behalf (such as hosting and storage providers), when required by law, or to protect the rights and safety of our users and the public.

Other people who have an account can find you, and that does not depend on sharing a trip. Your @handle is always findable: searching it returns your display name, your @handle, and your profile photo. “Find me by name”, in your profile’s Discovery settings, is on unless you turn it off; while it is on, a search that matches your display name or part of your @handle returns the same three things. “Find me by email” and “Find me by phone” are off unless you turn them on, and they match only the exact address or number. Search does not return your email address or phone number. Your name, photo, and @handle are also shown to anyone who opens your profile, so they can confirm they have the right person; the rest of your profile stays hidden unless you turn “Public profile” on. Turning discovery off does not hide you from people who are already on a trip with you.

When you invite someone to a trip and they accept, they become a trip member and can see the trip, its plans and participants, and activity for the logs you record during the trip’s dates. A journal or log note stays private to you unless you mark it as shared with the trip. If you enter someone’s name, email address, or phone number to invite them or to record who you were with, you are giving us their information — please only do that for people who would expect it.

If you use the app’s AI search (“Ask”) to ask a question about your own history, your question and the first names of the people you log with may be sent to a third-party AI model provider to translate the question into a search. Your logs, journal entries, notes, photos, and location data are not sent — the search itself runs against your own data on your device or in your browser.

Service providers

We use a small number of providers to run the service. Your account and adventure data are hosted on Amazon Web Services; photos, avatars, and GPS track files are stored on Cloudflare R2 and delivered through Cloudflare. Diagnostic error reports go to Sentry, our error-monitoring provider; before sending we apply filters intended to strip things like email addresses and authentication tokens out of them. Subscriptions and purchases are handled through RevenueCat together with the Apple App Store or Google Play, which receive a pseudonymous account identifier rather than your adventure data. App updates are delivered through Expo. If AI search is enabled, questions are routed to a model provider as described above.

Data retention

Adventure data stored in our cloud — your logs, trips, plans, photos, My Locations, profile, health days, and GPS tracks — is kept for the life of your account. The service does not delete it on a timer. It remains until you delete it in the app, or until you or we delete the account. Deleting a GPS track in the mobile app or on the web removes it from our cloud storage, including the file that holds the position readings. The mobile app also removes the copy on that device. You can ask us to delete your waitlist details or other personal information at any time by emailing privacy@magicaladventurelab.com.

Your choices and rights

• Turn off “Find me by name”, “Find me by email”, or “Find me by phone” in your profile’s Discovery settings. Your @handle stays findable either way.
• Turn off GPS track recording, “Save my location with logs”, and health tracking in Settings, and leave “Record this location” off on a journal entry.
• Delete individual logs, journal entries, trips, plans, My Locations, and photos in the app.
• Unsubscribe from marketing email at any time using the link in our messages.
• Request access to, correction of, or deletion of your personal information — including your location history and health days — by emailing privacy@magicaladventurelab.com.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Children’s privacy

Magical Adventure Log is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “last updated” date above and, for material changes, provide a more prominent notice.

Contact us

Questions about this policy or your data? Email privacy@magicaladventurelab.com.