Privacy Policy

Effective date: June 30, 2026

1. Who We Are

Magic Planning is an iOS app that helps groups plan Walt Disney World and Disneyland Resort trips together. This policy explains what information the app and its backend collect and how it is used.

2. Information We Collect

We collect the following categories of information:

• Email address — collected when you create an account. Used solely for authentication (sign-in, password reset, and one-time verification codes). We do not use your email for marketing.
• Coarse location — requested on-device when you use location-aware features. Location is used in two ways: (1) to suggest your nearest Disney resort in the trip chat, and (2) to verify that you are within Walt Disney World Resort property before allowing photo uploads in the Magic is Out There feature. Location data is not stored on our servers in either case.
• Photos — you may optionally upload photos to World Traveller, Attraction Tracker, Snack Tracker, and Park Hopper. These are stored securely in private cloud storage, are only accessible to members of your trip, and go through automated content moderation before being displayed (see Section 3a). Receipt and shopping scan images are analyzed by AI and immediately discarded — they are never stored (see Section 3b).
• Health data — the Wellness feature can optionally read steps taken, active calories burned, and exercise minutes from Apple Health (HealthKit). This data is read on-device only, is displayed within the app for your own reference, and is never transmitted to our servers or shared with any third party.
• App diagnostics — crash reports and performance metrics collected automatically. This data contains device model, OS version, and stack traces. It is used exclusively to identify and fix bugs.

3. How We Use Your Information

Each category of data is used only for the purpose it was collected:

• Email → account authentication and security
• Coarse location → on-device feature assistance and property verification (not retained)
• Photos → content moderation review, then display within your trip's World Traveller log, Attraction Tracker, Snack Tracker, or Park Hopper scavenger hunt
• Receipt & scan images → temporary AI analysis to extract structured data, then immediately discarded
• Health data → on-device display only in the Wellness feature (never transmitted)
• Diagnostics → app stability and performance improvements

We do not sell, rent, or share your information with third parties for advertising or marketing purposes.

3a. Automated Photo Content Moderation

Photos uploaded to the World Traveller, Attraction Tracker, Snack Tracker, and Park Hopper features are screened by an automated AI system before they are displayed to other trip members. This process works as follows:

• When you upload a photo, it is temporarily sent to a third-party AI content moderation service for analysis.
• The photo remains hidden from other users while the analysis is in progress.
• If the analysis determines the photo complies with our guidelines, it is marked as approved and becomes visible to your trip members.
• If the analysis determines the photo does not comply, it is automatically and permanently deleted from our storage and is never displayed to anyone.

This screening is performed entirely by automated systems. No human at Magic Planning reviews or views your photos as part of this process.

Additionally, if you have enabled Sensitive Content Warning in your iOS Settings, Apple's on-device content analysis may screen photos on your device before they are uploaded. This analysis runs locally on your device and its results are never transmitted to Magic Planning or any other service.

3b. AI Receipt and Item Scanning

Several features use Claude AI (Anthropic) to analyze images you provide:

• Buddy Pay receipt scanning — when you scan a receipt to split expenses, the receipt image is sent to our server and analyzed by Claude AI to extract line items, amounts, tax, tip, and merchant name. The image is used solely for this analysis and is discarded immediately afterward. It is not stored, logged, or used for any other purpose.
• Dining receipt scanning — the same process applies when scanning a restaurant check in the Dining tab to split costs among trip members.
• Shopping item scanning — when you scan a shopping item to add it to your wishlist, the item image is sent to our server and analyzed by Claude AI to auto-fill item details. The image is discarded immediately after the analysis is complete.
• Park Hopper item generation — when a Park Hopper game is created, a description of your trip's parks and hotels is sent to Claude AI to generate a custom scavenger hunt list. No personal data, photos, or account identifiers are transmitted as part of this process.

4. Third-Party Services

Magic Planning integrates with the following third-party services to provide certain features. In each case, no personally identifiable information is transmitted to the third party unless explicitly noted:

• FlightAware — used for real-time flight status tracking when you add a flight to a trip and have enabled Flight Data Sharing. Your flight number and date are sent to retrieve status updates.
• themeparks.wiki — used to retrieve real-time attraction wait times, show schedules, and operating hours for Disney parks on your park days. Only your requested park identifier is sent; no account or trip data is transmitted.
• National Weather Service (NWS) — used to retrieve weather forecasts for your hotel stay and park days. Only geographic coordinates for the Disney resort area are sent; no account or trip data is transmitted.
• Anthropic (Claude AI) — used for receipt analysis, shopping item scanning, and Park Hopper item generation as described in Section 3b above. Receipt and scan images are transmitted temporarily for analysis and are not retained by Anthropic beyond the scope of the API request.
• AI content moderation service — photos you upload to trip features are temporarily transmitted for automated review as described in Section 3a above.

5. Data Not Linked to Your Identity

None of the data listed above is linked or linkable back to you as an individual beyond what is required to operate your account. Diagnostic data is collected in aggregate and does not include your name, email, or any persistent identifier. Health data is never transmitted off your device.

6. Data Retention

Your account data (email, trip content, stored photos) is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at the address below. Receipt and scan images used for AI analysis are not retained at all — they are discarded immediately after the analysis is complete. Diagnostic data is retained for a rolling 90-day period.

7. Children's Privacy

Magic Planning is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the revised policy.

9. Contact

If you have questions about this privacy policy or want to request data deletion, please email us at privacy@magic-planning.com.