Magic Track Privacy Policy
Last updated: June 23, 2026
This Privacy Policy explains how Magic Digital, LLC ("we," "us," or "Magic Track") handles information when you use the Magic Track iOS app ("the App"). We built Magic Track with user privacy as a cornerstone: we ask for as little data as possible, and the things we do collect are clearly described below. Most of the data flows are opt-in.
Magic Track is an independent app and is not affiliated with, endorsed by, or sponsored by The Walt Disney Company or any of its affiliates.
1. Overview
We never ask for your real name, phone number, GPS or precise location, contacts, microphone access, or access to read your existing photos.
You may optionally share an email address with us in two places: through Sign in with Apple (where you choose whether to share your real email or a "Hide My Email" relay) and through the Contact Support form (where the email field is clearly marked optional and utilized by us only when replies to the form submission are necessary).
Our cloud providers — Apple, Google Firebase, and RevenueCat — automatically receive your IP address, which can reveal your approximate location (country or region). This is standard for any internet-connected app and we don't store IP addresses in our own systems beyond what these providers retain.
Your logs and associated data stay on your device unless you turn on Cloud Backup, which uploads an encrypted snapshot to our secure cloud.
Photos you save from the App go only to your photo library and are never uploaded to us.
We share your logged statistics with aggregated community stats only if you turn on "Share My Stats with Community" in Settings → Privacy or via the initial install pop-up prompt. This is off by default.
We collect crash reports only if you turn on "Help Improve the App" in Settings → Privacy or via the initial install pop-up prompt. This is off by default.
We offer a paid subscription. Subscriptions are billed by Apple; we never see your payment card or full Apple ID.
We never sell your data. We don't show you ads. We don't track you across other apps or websites.
2. What Information We Collect
2.1 Information Stored Only on Your Device
By default, everything you create in Magic Track is stored locally on your iPhone and is never sent to us unless you turn on Cloud Backup (Section 2.10) including:
Your visit logs (attractions, restaurants, shows, meet and greets, snacks, transportation, resort stays, resort visits, custom snacks, and trip reports).
Earned badges, milestone progress, and Experience Level.
Your in-app preferences and settings.
Any photos saved by you from the App to your Photo Library.
We do not have access to information that lives only on your device.
2.2 Sign in with Apple
Magic Track uses Sign in with Apple for account-based features such as Cloud Backup, community stats, and subscription entitlement. When you sign in:
What Apple sends us, always: a stable, opaque identifier that uniquely represents you to our App. This identifier cannot be used to look you up across other apps.
What Apple sends us, only if you allow it via the Apple prompt: your name, and either your real email address or a private "Hide My Email" relay address.
If you choose to hide your name or email at the Apple prompt, we never receive that information. We do not send marketing or promotional emails. The only time we will use an email address you have shared with us is to reply to a support ticket or other inquiry you have initiated. Additionally, if you sign up for email mailing list on our website we may send you updates and marketing emails (Each email from the mailing list contains an “Unsubscribe” button). If you would like us to delete an email address you previously shared (including a "Hide My Email" relay address), the most complete way to remove it is to delete your account, as described in Section 9.
We use your Sign in with Apple identifier only to:
Look up and restore your Cloud Backup on a new device.
Attribute your contributions to community totals (anonymously to other users — see Section 2.3).
Verify your subscription entitlement.
Attribute support tickets you submit so we can respond.
2.3 Community Stats (Optional, Off by Default)
If you turn on "Share My Stats with Community" in Settings → Privacy, or via the initial install pop-up prompt, the App contributes data from your activity to community features that are visible to all users. Specifically:
Aggregated counts: the community-wide number of times an attraction has been logged, a restaurant visited, a show seen, and so on.
Combined wait time statistics: your reported wait times fed into community-wide averages and ranges.
"Rarity" counts for badges: how many opted-in users have earned each badge.
Community records: single-achievement highlights (for example, the highest number of times one user has logged a particular attraction in a single day).
Community leaderboards: for attractions that have a score, the App maintains a top-score leaderboard. If you submit a qualifying score, your score, the date you set it, and your Username (if you have chosen to display one — see Section 2.5) will be publicly visible to other users on that leaderboard. Without a displayed Username, your entry appears without any identifying name attached.
Your contributions are tied to your Sign in with Apple identifier (or anonymous User ID if you have not utilized Sign in with Apple) on our backend. Other users see only the data described above; they never see your free-text notes, your full log history, the items you logged that are not part of one of the features above, or any other personal information about you.
You can turn “Share My Stats with Community” off at any time in Settings → Privacy.
2.4 Custom Catalog Suggestions (Optional, Off by Default)
If "Share My Stats with Community" is on and you create a custom character, snack, or similar item not in the built-in catalog, the App may submit the item's name and related catalog details (its variant or appearance, the park/area/resort and location where you logged it, and its category) to us so we can review it for inclusion in future updates. These suggestions are linked to your account identifier on our backend but are used only to improve the App's built-in catalogs; we do not publish them attached to your identity.
2.5 Optional Username
You may set an optional Username in Settings to display alongside your contributions on community leaderboards and records. Showing your Username is itself opt-in and off by default. You may opt-in to showing your Username publicly by turning on “Show Name on Community Records” in Settings → Privacy, or via the initial install pop-up prompt. This may be turned off at any time in Settings → Privacy. The Username is your choice and can be edited or removed by the user. Your Username is not your real name unless you choose to make it so. Reference the App’s Terms of Service for further Username rules.
To preserve the integrity of community leaderboards and records, a blockout period applies between Username changes. The length of the blockout, and the rules that apply during the blockout window, are described in the App at the time you make a change.
2.6 Crash and Diagnostic Reports (Optional, Off by Default)
If you turn on "Help Improve the App" in Settings → Privacy, the App enables Firebase Crashlytics. When the App crashes, Crashlytics receives from your device:
Crash details (the type of crash and the technical stack trace).
Basic device and app information (iOS version, device model, App version, App build number).
A randomly generated, per-install diagnostic identifier ("install ID").
Your IP address, which Crashlytics retains for a limited time as part of normal connection logging and uses to group crashes by region.
Crash reports do not include your name, your logs, your photos, your contacts, your precise location (GPS), your Username, your email, or any free-text content you entered in the App.
You can turn this off at any time in Settings → Privacy by toggling off “Help Improve the App”. When off, no crash data is collected or sent.
2.7 Contact Support Form
When you tap “Contact Support” in Settings and send a message via the form, the App writes a structured ticket to a secured Firestore database. The ticket contains:
The category you selected (Bug Report, Feature Request, Question, Other).
The message you typed.
Your email address — only if you chose to enter one in the optional email field. We use it solely to reply to your message should we need more information or want to provide an update pertaining to the inquiry.
Your account identifier (your Sign in with Apple identifier, or an anonymous app identifier if you haven't signed in with Apple).
Auto-attached diagnostic context: the App version and build number, your device model, your iOS version, your device locale (e.g., en-US), and the install ID (Section 2.6) so we can correlate the ticket with a crash trail if you've opted into diagnostics.
We do not auto-attach your name or any of your logged data. Tickets are stored in Firestore and mirrored to a private Trello board that we use internally to track and respond to incoming requests. Access to the Trello board is limited to authorized personnel of Magic Digital, LLC.
You control what you type; if you want to remain pseudonymous, leave the email field blank and do not include identifying details in the message body.
2.8 Subscriptions and Purchases
Magic Track offers a paid subscription that unlocks continued access to the app features. Subscription handling is summarized below; the specific subscription tier, length, and price are disclosed in the App and on the App Store before purchase.
Billing. All purchases are processed by Apple through your Apple ID. Magic Track never sees your payment card number, billing address, or full Apple ID. Your subscription is governed by Apple's standard terms, including .
Auto-renewal. Subscriptions auto-renew at the end of each billing period unless you cancel at least 24 hours before renewal. You can view, cancel, or change your subscription at any time in Settings → Apple Account → Subscriptions on your iPhone.
Free trial. Where a free trial is offered, you will not be charged until the trial ends. You will not be automatically charged at the end of the free trial. You must choose to subscribe to continue using all features of the App.
What we receive. To verify your subscription is active, we receive an anonymous, opaque purchase identifier and entitlement status from Apple via RevenueCat, our subscription-management provider. We never receive your payment instrument or full Apple ID. RevenueCat also automatically processes the technical information listed in Section 4.
Refunds. Apple handles refunds for in-app purchases through the App Store. Visit to request one.
2.9 Photo Library
The App asks for permission to save photos (such as your generated trip report images) to your Photo Library. The App does not read or browse your existing photos.
2.10 Cloud Backup (Optional)
If you turn on Cloud Backup in Settings, the App uploads an encrypted snapshot of your local Magic Track data (Your visit logs, badges, trip reports, custom snacks, and custom characters) to our secure cloud storage. This snapshot is keyed to your Sign in with Apple identifier so that, when you install Magic Track on a new device and sign in with the same Apple ID, you can restore your data.
What is stored. A single compressed snapshot of your local Magic Track data. The snapshot does not include your photo library or any data outside of Magic Track.
Where it is stored. Google Firebase Cloud Storage, hosted on US-based infrastructure. The snapshot is encrypted in transit (TLS) and at rest (Google Firebase).
Who can access it. Only you. Our backend rules permit reads and writes only to the Sign in with Apple identifier that owns the backup. We do not access the contents of your backup except to restore it to your device on request.
Versioning. Each backup overwrites the previous one. We do not retain historical versions on our side.
Deleting your backup. In Settings → Cloud Backup, toggle off to delete the existing backup and stop future ones from being created. Deleting the App from your device does not delete the Cloud Backup; you must use the Settings toggle off option (or contact us for assistance).
3. How We Use Information
We use the information described above only to:
Provide and improve the App's features (including community totals, rarities, and Cloud Backup).
Verify and manage your subscription entitlement.
Diagnose and fix crashes (when you opt in).
Respond to your support requests.
Protect the App from abuse, fraud, and security threats.
We do not:
Sell or rent your data to anyone.
Show you advertising.
Use your data to build a marketing profile of you.
Share your data with data brokers.
Track you across other apps or websites.
4. Third-Party Services and What They Automatically Collect
Magic Track uses the following third-party services. Each has its own privacy practices. In addition to the information we describe in Section 2, each provider automatically receives certain technical information as part of normal operation — most importantly your IP address, which can reveal your approximate location (typically country or region, not a precise GPS location).
Apple — Sign in with Apple, App Store distribution, in-app subscription billing, push notifications. In addition to what Apple shares with us (Section 2.2), Apple processes your Apple ID, IP address, device information, and purchase records under its own terms. See .
Google Firebase (Google LLC) — Authentication, Firestore database, Cloud Storage (Cloud Backup), Crashlytics, and App Check. Firebase automatically receives your IP address, a randomly assigned anonymous device identifier (the Firebase installation ID), App version, device model, operating system version, and the time of each request. Firebase uses this information to operate the service, prevent abuse, and (for Crashlytics) group similar crashes. We do not use Firebase Analytics or any cross-app advertising identifiers in Magic Track. See .
RevenueCat — Subscription entitlement management. RevenueCat automatically receives your IP address, Apple's Identifier for Vendor (IDFV — an identifier scoped to apps from the same developer), device model, operating system version, App version, device locale, and a record of subscription events (purchase, renewal, cancellation). RevenueCat uses this information to verify your entitlement, detect fraudulent purchases, and provide their service to us. See .
Trello (Atlassian) — Internal triage of Contact Support tickets only. Information from your support ticket (the category, your message, any email you chose to share, and the diagnostic context listed in Section 2.7) is copied to a private Trello board accessible only to authorized personnel of Magic Digital, LLC. Trello does not receive any of your other App data. See .
We only share information with these providers as needed to provide the App's features. We do not direct them to use your data for advertising or for tracking you across other apps or websites.
5. Data Sharing and Disclosure
We do not share your information with third parties except:
As described in Section 4 (service providers acting on our behalf).
If required by law, valid legal process, or to protect the rights, property, or safety of Magic Digital, LLC, our users, or the public.
In connection with a merger, acquisition, or sale of all or a portion of our business. We would notify users before any such transfer changes how their data is handled.
6. Data Security
We use industry-standard security practices to protect your information, including encryption in transit (TLS) and encryption at rest for Cloud Backup snapshots and our Firebase data. Access to our backend systems is limited and authenticated. Firebase App Check helps us reject requests from outside the legitimate App. No system is perfectly secure, however; we cannot guarantee absolute security and ask you to keep your Apple ID credentials private.
7. Data Retention and Deletion
Local data (your logs, badges, settings) remains on your device until you delete the App.
Cloud Backup remains in our secure cloud until you delete it in Settings → Cloud Backup or until your account is deleted (Section 9). We do not delete Cloud Backups automatically.
Community contributions (aggregated counts and leaderboard entries) remain in our community totals indefinitely so the totals remain accurate. Aggregated counts are not individually deletable; your leaderboard stats and account specific records will be removed upon account deletion.
Support tickets (in Firestore and on the Trello board, including any email you chose to share) are retained for as long as needed to resolve your inquiry and for a reasonable period afterward for record-keeping, typically up to 24 months.
Subscription records (entitlement status, anonymous purchase identifiers) are retained as long as needed for entitlement verification, refunds, and bookkeeping, and as required by tax and accounting laws.
Crash reports are retained by Firebase Crashlytics for up to 90 days, after which they are automatically deleted.
Connection logs held by our service providers (IP addresses tied to requests) are retained according to each provider's policy and are typically purged within a short window.
8. Children's Privacy
Magic Track is not directed to children under the age of 13. We do not knowingly collect personal information from children under the age of 13. Sign in with Apple is gated by Apple's Family Sharing and Screen Time controls; community Username creation, Cloud Backup, and subscriptions all require Sign in with Apple. If you believe a child under the age of 13 has provided personal information through the App, please contact us so we can take appropriate action.
9. Your Rights and Choices
You can at any time:
Turn off "Share My Stats with Community" in Settings → Privacy.
Turn off "Help Improve the App" in Settings → Privacy.
Delete your optional Username.
Delete and stop creating Cloud Backups in Settings → Cloud Backup.
Manage or cancel your subscription in Settings → Apple Account → Subscriptions on your iPhone.
Delete the App from your device to remove all local data (this does not delete your Cloud Backup or cancel your subscription).
Delete your account permanently — see "How to Delete Your Account" below.
Depending on where you live, you may have additional rights (see Sections 10 and 11).
How to Delete Your Account
You can permanently delete your Magic Track account at any time. We provide two paths.
In the App (recommended). Open Settings → Privacy → Delete My Account (or Delete All Data for users not signed in with Apple), then confirm.
When you delete in-app, we will:
Delete your Cloud Backup snapshot from Cloud Storage.
Delete your user profile, claimed Username, leaderboard standings and other Community records tied to you (high scores, single-day and all-time records, streaks, and similar per-user stats), your support ticket history (including any email you shared), and any pending catalog suggestions from our Firestore database.
Clear the diagnostics identifier (install ID) stored on your device and stop associating any future diagnostics with you.
Delete your Sign in with Apple identifier from Firebase Authentication.
Sign you out and reset the App to its first-launch state on your device.
These steps complete within seconds, after which the App resets to a fresh state.
By email (fallback). If you can't use the in-app control (for example, you've lost access to the device) email support@magictrackapp.com from the address tied to your Sign in with Apple account, or include enough detail for us to identify your account. We will process the request within 30 days as required by applicable law.
What deletion removes. Your Cloud Backup, user profile, Username, leaderboard standings and Community records (high scores, single-day and all-time records, streaks, badge progress, and similar per-user stats), support tickets (including any email you shared), pending catalog suggestions, the diagnostics (install-ID) identifier stored on your device, and your Sign in with Apple identifier.
What survives deletion. Aggregated community totals (for example, the all-time number of times an attraction has been logged) remain in our community statistics because they are anonymized rollups and cannot be traced back to you. Anonymized crash reports you previously submitted (only if you turned on diagnostics) may remain in Crashlytics under its standard retention (typically up to 90 days) and then age out automatically. These reports are keyed only to an anonymous install ID, never to your account or Apple ID, and the records that connected that install ID to your account are deleted as described above, so they cannot be tied back to you.
This action is irreversible. Once your account is deleted, your Cloud Backup cannot be restored. If you reinstall the App and sign in again, you will start fresh.
10. Notice to California Residents (CCPA / CPRA)
California residents have the right to:
Know what personal information we collect about them.
Request deletion of their personal information.
Correct inaccurate personal information.
Opt out of the "sale" or "sharing" of personal information.
Limit the use of sensitive personal information.
We do not "sell" or "share" personal information as those terms are defined under California law. We do not use personal information for cross-context behavioral advertising. We do not knowingly collect sensitive personal information.
To exercise your California privacy rights, contact us at the email below. We will not discriminate against you for exercising these rights.
11. Notice to Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)
If you are located in the EEA, the UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws, including the right to access, correct, delete, or port your personal data, and to object to or restrict our processing of it.
The legal bases on which we rely are:
Consent — for opt-in community stat sharing, crash reporting, and Cloud Backup (you can withdraw at any time in Settings).
Contract performance — for fulfilling subscriptions, providing Cloud Backup/restore, and responding to your support tickets.
Legitimate interests — for diagnosing crashes, providing support, and protecting the App from abuse.
To exercise your rights or for any complaint, contact us at the email below. You also have the right to lodge a complaint with your local data protection authority.
12. International Data Transfers
Our service providers (Apple, Firebase, RevenueCat, Trello) may process data on servers located in the United States and other countries. By using the App, you understand that information may be transferred to and stored in countries other than your own. Where required by law, we rely on standard contractual safeguards for these transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time as the App evolves. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, surface a notice in the App. Continued use of the App after a change indicates acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or our handling of your information, please contact us at support@magictrackapp.com