Privacy Policy

Last updated: 2026-05-05

This Privacy Policy describes what information ParkCharm (the "Service") collects, how we use it, and with whom we share it. By using the Service you consent to the practices described below. This policy is written in plain language and is not a substitute for legal advice.

1. Information We Collect

• Email address: collected at signup. Used to authenticate you, send trip-related notifications, and contact you about the Service.
• Mobile phone numbers: collected only when an existing user (the inviter) explicitly enters a recipient's mobile number into the in-app invite flow, OR when you choose to receive an invite by SMS. Phone numbers are used solely to deliver the one-time invite SMS. We do not share mobile phone numbers with third parties for marketing purposes, and we do not send marketing or promotional messages to any phone number we hold. See Section 3a (SMS Messaging) for details.
• GPS / location data: captured only when you explicitly check in to an attraction inside the park. Location is used to confirm the check-in and to refine future plan adjustments. We do not run passive location tracking.
• Plan data: the rides you select, party composition, meal windows, constraints (kid ages, mobility needs, height limits), and any natural-language requests you type (e.g. "no roller coasters before lunch").
• Usage metrics: which pages you visit, how often you re-plan, success rates of booked Lightning Lanes, and generic performance data. This is used to improve the product and debug issues.

2. How We Use Your Information

• Generate your personalized day plan.
• Re-optimize your plan in real time based on observed wait times and your check-ins.
• Send push notifications and email alerts (Lightning Lane open windows, plan changes, pre-trip reminders).
• Diagnose bugs, measure engagement, and improve the product.
• Enforce our Terms and prevent abuse.

3. Third Parties

We share the minimum necessary data with a small number of service providers:

• Anthropic, PBC: when you submit a natural-language constraint (e.g. "I hate spinning rides"), the plaintext of that input is sent to Anthropic's Claude API for parsing. We do not send your email or account identifiers with these requests. Anthropic's data handling is governed by their own privacy policy.
• Stripe, Inc.: handles all payment processing. Card data is submitted directly to Stripe and never touches our servers; we retain only the Stripe customer and subscription identifiers. Stripe is PCI-DSS certified.
• Google LLC: if you choose to sign in with Google OAuth, Google provides us with your email and basic profile. We do not receive your Google password.
• Browser push services (Mozilla, Google, Apple): when you enable web-push notifications, your browser registers a subscription with its vendor's push service. We send notification payloads to that service, which relays them to your device. We do not receive any personal data from these vendors.
• Twilio, Inc.: handles SMS delivery for plan invites. When an existing ParkCharm user invites a recipient by phone number, we transmit the recipient's mobile number and the invite SMS body to Twilio for one-time delivery to that recipient. Twilio's handling of phone numbers and message metadata is governed by their own privacy policy. We do not authorize Twilio to use this data for any purpose other than delivering the invite on our behalf.

We do not sell your personal information, and we do not share it with advertisers or data brokers. Mobile phone numbers entered during the invite flow are used solely to deliver the one-time invite SMS, and are not shared with third parties for marketing purposes.

3a. SMS Messaging

ParkCharm uses SMS only to deliver one-time invitation links when an existing user invites someone by phone number to join their plan. The SMS program has the following properties:

• Program name: ParkCharm Plan Invites.
• Message frequency: One-time only. Each invite generates a single SMS to the recipient. ParkCharm does not send marketing, promotional, or recurring messages.
• Message and data rates: Standard message and data rates may apply. Charges are levied by your carrier; ParkCharm receives no part of any message charges.
• Opt-out: Reply STOP to any ParkCharm SMS to be permanently opted out. STOP is processed by Twilio's default opt-out keyword handler; no further SMS will be sent to the opted-out number.
• Help: Reply HELP for help, or contact support at hankbon@gmail.com.
• Carrier disclaimer: Carriers are not liable for delayed or undelivered messages.
• Sharing: Phone numbers are not sold, rented, or shared with third parties for marketing purposes. Phone numbers are shared only with Twilio (our SMS delivery provider) for the sole purpose of delivering the one-time invite. SMS opt-in data and consent records are not shared with affiliates or any other third parties.

4. Data Retention

We retain your plans, preferences, and associated metadata indefinitely so that they remain available to you across trips — until you delete the plan or close your account, at which point your records are removed from our production database within 30 days. Backups containing deleted data are purged within 90 days. Aggregate, non-identifying data such as park-wide wait-time observations may be retained indefinitely for model training and product analytics; this data cannot be traced back to any individual user.

4a. International Transfers

Our servers are operated in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored in, and processed in the U.S. By using the Service you consent to this transfer. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers to our sub-processors.

5. Your Rights

Depending on where you live, you may have the following rights under laws such as the GDPR (EU) or CCPA (California):

• Access: request a copy of the data we hold about you.
• Correction: ask us to fix inaccurate records.
• Deletion: request that we erase your account and associated data.
• Portability / Export: request an export of your plans in a machine-readable format.
• Objection: opt out of specific processing activities.

To exercise any of these rights, email hankbon@gmail.com. We respond to verified requests within 30 days. (This section has not been legally reviewed; the exact scope of rights in your jurisdiction may differ.)

6. Cookies & Local Storage

We set a session cookie for authentication and a CSRF token cookie to prevent cross-site request forgery. Your browser's localStorage may also store a "push-subscribed" flag so the UI doesn't repeatedly re-prompt for permission. We do not use third-party tracking cookies or advertising cookies. See the Cookie Policy for details.

7. Security

We use TLS for all traffic, hash stored passwords, and restrict production database access to a small number of operator accounts. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a breach that affects your data, we will notify you by email within the timeline required by applicable law.

8. Children

The Service is intended for adults (18+). We do not knowingly collect personal information from children under 13. If you believe a child has submitted data to us, contact us and we will delete it.

9. Changes to This Policy

We may revise this Privacy Policy from time to time. Material changes will be announced in-app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Privacy questions or data requests: hankbon@gmail.com.