Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how Zulu Technology LLC (“Theme Park Pal,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Theme Park Pal mobile application and related services (the “Service”).

Theme Park Pal is a location-sharing app for adults to keep a group — family, friends, or other companions — visible to one another on a map while visiting a theme park or similar venue. The Service is intended only for adults aged 18 and over. By creating an account or using the Service, you acknowledge the practices described here.

1. Eligibility — adults only

The Service is designed for and directed to adults. You must be at least 18 years old to create an account or use the Service. We ask for date of birth at sign-up solely to confirm you meet this age requirement; we do not retain your date of birth, only a record that the requirement was met. The Service is not directed to children, and we do not knowingly create accounts for or collect personal information from anyone under 18. See Section 10.

2. Information we collect

a. Information you provide directly

• Account information: your name (or chosen display name) and email address. Your password is handled by our authentication provider and is not visible to us in readable form.
• Age confirmation: at sign-up we verify that you are 18 or older. We store a timestamp confirming this; we do not store your date of birth.
• Profile information (optional): a profile photo, if you choose to add one.
• Communications: information you provide when you contact us for support.

b. Location information

• When you join an active trip and grant permission, we collect your device’s precise geolocation, including latitude and longitude and, where available, accuracy, speed, and heading.
• With your permission (“Always” location access), we collect location in the background — while a trip is active even when the app is not open or your device is locked — so your group can continue to see your position while your phone is in a pocket or bag. Background collection occurs only while you are an active participant in a trip.
• Your location is shared in real time with the other members of your trip. This is the core purpose of the Service and is initiated by you when you create or join a trip.

c. Information collected automatically

• Push notification token: a device identifier used to deliver notifications (such as an “I’m lost” alert from a member of your group).
• Device and diagnostic information: standard technical information (device type, operating system, app version) and limited diagnostic data, collected through our service providers to operate, secure, and troubleshoot the Service.

d. Information from your group

When you participate in a trip, other members can see your display name, your live location, and your status (for example, online/offline or a self-reported “lost” flag). Likewise, you can see theirs.

We do not knowingly collect Social Security numbers, government IDs, financial account numbers, or other sensitive identifiers, and we ask that you not provide them.

3. How we use information

We use the information we collect to:

• provide the core Service — showing your group’s live locations on a map and delivering “lost” and related alerts;
• create and authenticate your account and keep it secure;
• operate, maintain, debug, and improve the Service;
• communicate with you about the Service, including support and important notices;
• enforce our Terms and protect the rights, safety, and security of users and the public; and
• comply with applicable law and legal process.

We do not sell your personal information. We do not use your location or other personal information for third-party advertising, and we do not allow advertisers to target you within the Service.

4. How we share information

With other members of your trip. By creating or joining a trip, you choose to share your name, live location, and status with the other members of that trip. Anyone with the trip’s join code can participate; treat the code like a key and share it only with people you intend to include.

With service providers (sub-processors). We use trusted third parties to operate the Service. They process information on our behalf for the purposes described above and are not permitted to use it for their own purposes:

• Google Firebase (Google LLC) — account authentication and data storage (account records, trip data, and real-time location). See Google’s privacy policy.
• Expo (650 Industries, Inc.) — delivery of push notifications. See Expo’s privacy policy.
• Mapbox (Mapbox, Inc.) — map display; rendering maps involves sending map and location requests to Mapbox. See Mapbox’s privacy policy.

For legal and safety reasons. We may disclose information if we believe in good faith that it is required by law or legal process, or that disclosure is necessary to protect the rights, property, or safety of Theme Park Pal, our users, or others.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

5. Location data — your controls

Because location is the heart of the Service, we want to be especially clear:

• Location sharing happens only while you are part of an active trip.
• You control location access through your device settings at any time (for example, switching from “Always” to “While Using,” or turning location off).
• You can stop sharing at any time by leaving the trip; an organizer can end a trip for the whole group.
• Trips automatically expire after 30 days, after which location sharing stops for everyone in that trip. Live location is transient and is overwritten by newer positions or removed when you leave or go offline.

Limiting or disabling location will limit or disable the core functionality of the Service.

6. Data retention

• Live location: transient; continuously overwritten while active and removed when you leave a trip, go offline, or a trip ends or expires.
• Trip data: trips automatically expire after 30 days.
• Account information: retained while your account is active.
• Deletion: you can delete your account at any time from within the app (Settings → Delete account), which removes your profile, your membership and location data, and your account. You may also contact us at contact@zuludev.com to request deletion. We will delete or de-identify your personal information except where we are required or permitted by law to retain it.

7. Your choices and rights

• Access and update: you can view and update your profile in the app.
• Delete: you can delete your account in the app, as described above.
• Location permissions: you can change or revoke location access in your device settings at any time.
• Notifications: you can turn off push notifications in your device settings.

8. California privacy rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended. In the past 12 months we have collected the categories of personal information described in Section 2 (identifiers such as name and email; geolocation data; and limited internet/device activity and diagnostic information), for the business purposes described in Section 3.

• We do not “sell” or “share” personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that would require an opt-out.
• You have the right to know/access, to delete, and to correct your personal information, and the right not to be discriminated against for exercising these rights.
• To exercise these rights, contact us at contact@zuludev.com. We will verify your request, typically by confirming control of your account email.

9. Other U.S. state privacy rights and international users

Residents of other U.S. states with comprehensive privacy laws may have similar rights to access, delete, correct, and port their information, and to opt out of certain processing.

The Service is operated in the United States and intended for users in the United States. If you access it from outside the United States, you understand your information will be processed in the United States.

10. Children’s privacy

The Service is for adults and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete the account and associated information. If you believe a minor has created an account, contact us at contact@zuludev.com.

Theme Park Pal may be used by an adult to keep track of a device the adult places with or assigns to a member of their party (for example, a phone placed with a child in the adult’s care). In that case, the adult account holder is responsible for that device and represents that they have the authority and any necessary consent to do so. The child is not a user of the Service and does not hold an account.

11. Security

We use technical and organizational measures intended to protect personal information, including encrypted transmission and access controls through our service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after an update means you acknowledge the revised Policy.

13. Contact us

Questions or requests regarding this Policy or your information:

Zulu Technology LLC
contact@zuludev.com