Your park day
stays yours.

01Introduction

Rope Drop Hero ("we," "our," or "us") is developed and operated by Rope Drop Hero, LLC ("Company"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Rope Drop Hero iOS and Android applications, website, and related services (collectively, the "Services").

By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

02Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when creating an account, using App features, or contacting us for support:

• Account registration information: email address and authentication information managed via Supabase Authentication. On Android, Sign in with Google supplies a Google identity token to Supabase to authenticate your account; Rope Drop Hero does not receive your Google password.
• Profile preferences: park preferences, party size, trip dates, allergies, dietary needs, mobility and accessibility needs
• Quest and trip planning data: itineraries, attraction preferences, dining reservations, and custom plans you create using Quest Builder
• AI conversation data: messages you send to Park Ranger, our AI assistant, to receive personalized park recommendations
• Group and party data: information you provide to coordinate with your travel party using Party Beacons and group features
• Support communications: messages you send to our support team
• Dining Scout alert settings: restaurant, date/time, party size, and notification preferences for dining watches. Dining Scout alerts are notify-only for v1. Rope Drop Hero does not collect or store payment card information for dining alerts in v1.

2.2 Information Collected Automatically

When you use the App, we automatically collect certain technical and usage information:

• Device information: device model, operating system version, unique device identifiers, and app version
• Push delivery identifiers: for notifications you enable, we associate an Apple Push Notification service device token on iOS, or a Firebase Installation ID on Android, with your Rope Drop Hero account. These identifiers let the applicable push provider deliver alerts to that app installation.
• Google Play purchase verification: when you purchase or restore an Android subscription, the App sends the purchase token to our backend for verification with Google Play. We send Google Play an obfuscated account identifier to associate the purchase with your Rope Drop Hero account. Our subscription records store hashes of purchase tokens and verified details such as product, order identifier, subscription status, billing period, renewal setting, and expiration time. Raw purchase tokens are processed for verification and acknowledgement rather than stored in those subscription records.
• Location data: GPS location data when you are within Walt Disney World Resort parks, used for in-park navigation, Park Ranger contextual recommendations, and party location sharing. Rope Drop Hero requests While Using permission for v1, so location is used only while the App is open or actively in use.
• Usage data: features accessed, screens viewed, subscription tier, frequency and duration of use
• Performance data: crash reports, error logs, and diagnostic data to improve App stability. On iOS, we use Sentry for crash reporting and performance diagnostics. These reports may include app and device details, error and performance information, and Rope Drop Hero account identifiers associated with the diagnostic event.
• Customer-level analytics: first-party analytics and diagnostics that may link feature usage, error states, customer rescue status, and subscription context to visitor, session, device, and account identifiers so we can understand friction, support users, and improve reliability. These records do not include raw chat prompts, Disney credentials or tokens, payment details, or exact GPS trails.
• Website measurement: Google Analytics and TikTok measurement tools collect page visits, referral and campaign details, general browser or device information, approximate location, and conversion events such as a completed waitlist signup. We do not send your email address, form contents, Apple Health or Health Connect data, or exact GPS location to these tools. When you join the waitlist we store your email, the date, your IP address, browser user agent, and how you found us: campaign tags in the link you used (such as utm_source), the referring website’s domain, and the landing page where available, or the page where you submit the form. We use this to understand which channels bring people to Rope Drop Hero. This is saved with your signup and is not shared with advertising partners.
• Stored files and metadata: If you grant permission, the App may access photos from your device library (for example, to set a profile photo). The App may also access metadata associated with files on your device to support App features. We do not access your photos, contacts, or other device files without your explicit permission.

2.3 Apple Health, Health Connect, and Pace Assist

Pace Assist is optional. On iOS, if you choose to connect Apple Health, it reads HKQuantityTypeIdentifierStepCount, HKQuantityTypeIdentifierDistanceWalkingRunning, and HKQuantityTypeIdentifierDistanceWheelchair. The same request is made for every customer, and the readable values are combined into one travel distance. Rope Drop Hero does not ask how you move and does not infer a mobility status: it never decides anything from which of these quantities happens to contain data. A step count is shown only when Apple recorded one.

On iOS, Rope Drop Hero requests read access only and does not request permission to write HealthKit data. It does not create workouts, save samples, or change information in Apple Health. A successful Apple authorization request does not reveal whether you allowed every requested read type, so missing or hidden data is shown as a neutral no-data state rather than as a claim that access was denied.

On Android, you can choose to connect Health Connect with read-only access to steps and distance. Pace Assist reads daily totals and recent daily distance summaries to calculate movement comparisons on your device. It does not request permission to write Health Connect records.

Apple Health and Health Connect movement data, daily aggregates, baselines, and derived pace context stay on your device. They are not sent to Rope Drop Hero servers, AI providers, attribution partners, support tools, other party members, or advertising services, and are not included in customer analytics. Rope Drop Hero does not store raw HealthKit samples or raw Health Connect records.

The current apps do not upload a Pace Assist planning profile to Starlight. Manual pace values and movement-derived recommendations stay on your device. If an earlier version saved a Starlight pace profile, you can request its removal from Pace settings.

On iOS, to bridge a temporary unavailable or locked-data state, Rope Drop Hero may use one encrypted aggregate snapshot from a ThisDeviceOnly Keychain record. The snapshot becomes unavailable after its 24-hour validity window, and the next cache check attempts to delete it. Disabling Pace Assist, signing out, or switching accounts also triggers cache cleanup. If deletion fails, the cache is blocked from reuse. Manual planning remains available when Apple Health is not connected, unavailable, has no readable data, or access changes.

On Android, a cached movement summary and baseline are stored in app-private preferences. A summary more than 24 hours old is not reused; expiry does not itself remove the stored values. New summaries replace the cached values, and turning Pace Assist off clears the movement summary and baseline. Signing out also initiates cleanup of local Pace settings and cached movement data. Manual planning remains available without Health Connect.

2.4 Information from Third-Party Sources

When you link a Disney account or authorize Friends & Family planning, we process connection and authorization records, including session and refresh tokens where needed; Disney guest and party names and identifiers; planning permissions; ticket and Lightning Lane entitlements; itinerary and reservation details; and booking, modification, and cancellation results. We use these records to synchronize your plans, check eligibility and permissions, carry out the actions you authorize, and reconcile the result with Disney.

You can disconnect your Disney connection in Rope Drop Hero and manage Friends & Family permissions through Disney. Disconnecting pauses related automation; it does not cancel confirmed Disney reservations or erase existing reservation records. Retention and account-deletion choices are described in sections 6 and 8.

We access publicly available data to power App features, including:

• Theme park attraction wait times, park hours, show schedules, and availability information
• Weather data for park-day forecasting
• Restaurant and dining availability data for monitoring and reservation features

We do not purchase or receive your personal information from third-party data brokers.

2.5 Tracking and Attribution Data

On iOS, with your consent through Apple's App Tracking Transparency prompt, we collect advertising identifiers and conversion events for advertising measurement and attribution.

• Advertising identifiers: IDFA and related device identifiers used to measure advertising campaign effectiveness
• Attribution events: app install, registration, subscription purchase, and other conversion events
• Attribution partners: Meta (Facebook) receives these events only when tracking is authorized. AppsFlyer attribution is currently disabled in the iOS app, so the iOS app does not send attribution events to AppsFlyer.

You may opt out by declining the App Tracking Transparency prompt or by changing your choice later in iOS Settings > Privacy & Security > Tracking.

On the website, optional Rope Drop Hero usage analytics, Google Analytics, and TikTok advertising measurement are on by default for visitors identified as being in the United States, unless you have saved a refusal. In other countries, including the European Economic Area, the United Kingdom, Switzerland, and Canada, or when we cannot determine your country, they stay off until you allow measurement. You can change your choices at any time using Privacy choices in the footer. TikTok advertising measurement stays off when your browser sends a Global Privacy Control signal. Campaign source details you submit with the waitlist form (described in section 2) are saved with your signup whether or not you allow optional measurement. Preserving those details across pages in the same tab uses session storage only while usage analytics is enabled. Otherwise, we retain only the current page’s source details in memory until you submit the form; attribution across pages may be unavailable.

03How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the App, including real-time wait times, crowd calendars, Lightning Lane monitoring, dining reservation monitoring, and trip planning features
• To personalize your experience, including AI-powered recommendations from Park Ranger and Quest Builder itinerary generation
• To process and manage your subscription (Free, Adventurer, Hero, or Starlight Concierge tier) and associated feature access
• To enable party features, including Party Beacons live location sharing for locating members of your travel party within parks
• To provide in-park GPS navigation and contextual recommendations based on your location
• To provide optional on-device Pace Assist comparisons and lower-walking planning choices when you connect Apple Health on iOS or Health Connect on Android
• To send push notifications you have opted into, including Lightning Lane alerts, dining availability alerts, and available Starlight Concierge notifications
• To deliver automation features, including Lightning Lane auto-booking and Dining Scout alerts for eligible subscription tiers
• To measure advertising effectiveness and attribute app installs, registrations, and subscription purchases to marketing campaigns when you authorize tracking
• To improve the App through customer-level analytics, error diagnosis, performance monitoring, customer rescue workflows, and de-identified product issue analysis
• To respond to your support requests and communicate important updates about the App

04AI Features and Data Processing

Rope Drop Hero uses artificial intelligence to power several features. We want to be transparent about how your data is used in connection with AI:

4.1 Park Ranger AI Assistant

When you interact with Park Ranger, your messages and relevant context (such as your current park location, active quest, and party preferences) are sent to our AI processing infrastructure to generate personalized responses. Conversations are processed in real time and are not used to train AI models. Conversation history is retained for the duration of your active session to maintain context and is not stored permanently on our servers.

4.2 Quest Builder

Quest Builder generates personalized trip itineraries based on your stated preferences, party composition, trip dates, and current park conditions. Your input data is processed by AI models to create and refine plans. Generated quests are stored in your account for your reference and are not shared with other users.

4.3 Starlight Concierge AI Features

Starlight Concierge may use trip context, reservation data, and park conditions to provide personalized premium decision support. It presents suggested next moves and the reasoning behind them within the permissions you choose; it does not promise availability or outcomes.

4.4 AI Data Processing Partners

AI features are powered by third-party large language model providers (currently OpenAI). When processing AI requests, we send only the minimum context necessary to generate a response. We do not send your email address, account credentials, or payment information to AI providers. Our agreements with AI providers prohibit them from using your data to train their models.

05Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• Apple Health, Health Connect, and Pace Assist: raw health records, daily movement aggregates, baselines, manual pace values, and movement-derived recommendations remain on your device. Explicit planning choices you make, such as asking for a shorter route, may be used to build your plan without attaching health values or derived movement context. See section 2.3 for local caches and removal of legacy Starlight pace profiles.
• Service providers and measurement partners: We use Supabase (database and authentication), Apple (App Store, StoreKit subscriptions, and Apple Push Notification service), Google (Sign in with Google, Google Play Billing, Firebase Installations, and Firebase Cloud Messaging for Android sign-in, purchases, and push delivery), OpenAI (AI processing), Sentry (iOS crash reporting and performance diagnostics), Google Analytics, and TikTok measurement tools. The store and push provider depend on your device and purchase. Website measurement follows the consent and browser-signal controls described in sections 2.5 and 8.5.
• Disney connections: We exchange the guest, party, entitlement, and reservation details needed to perform and confirm the actions you authorize with Disney.
• Attribution and advertising partners: On iOS, with your consent through Apple's App Tracking Transparency prompt, we share advertising identifiers and conversion events with Meta (Facebook) for advertising measurement and attribution. AppsFlyer attribution is currently disabled in the iOS app. You can revoke tracking consent at any time in iOS Settings > Privacy & Security > Tracking.
• Group members: If you use Party Beacons or other group coordination features, your live location and relevant trip information are shared with members of your designated travel party while the feature is active. You control who is in your party.
• Legal compliance: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via the App or email before your information becomes subject to a different privacy policy.
• With your consent: We may share information for any other purpose with your explicit consent.

06Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the App's services. Specifically:

• Account data: Retained until you delete your account
• Trip and quest data: Retained until you delete your account or remove individual quests
• Disney connection and reservation records: Retained while your account is active or as needed to provide the service, confirm reservation outcomes, and resolve support or security issues. Disconnecting does not erase these records; account deletion follows the policy below.
• AI conversation data: Park Ranger session conversations are not permanently stored. Quest Builder plans are retained as part of your account data.
• Apple Health and Pace Assist data on iOS: Raw HealthKit samples are never stored by Rope Drop Hero. One encrypted, device-only aggregate snapshot can be reused through its original 24-hour validity window. It becomes unavailable after that window, and the next cache check attempts to delete the Keychain record. Disabling Pace Assist, signing out, or switching accounts also triggers cache cleanup. If deletion fails, the cache is blocked from reuse.
• Health Connect and Pace Assist data on Android: Raw Health Connect records are not stored by Rope Drop Hero. The App stores a movement summary and baseline in app-private preferences. Cached summaries older than 24 hours are not reused, but the stored values can remain until replaced or cleared. Turning Pace Assist off clears the movement summary and baseline; signing out also initiates cleanup of local Pace settings and cached movement data.
• Legacy Starlight pace profiles: Current apps do not upload these profiles. A profile saved by an earlier version remains until removed through Pace settings or account deletion.
• Usage, diagnostic, and customer-level analytics data: Retained in identifiable form only as needed to operate customer rescue, support, security and audit, and product-improvement workflows, generally no longer than 24 months; after that, records are deleted or de-identified unless a longer period is required by law or needed for an open support or security issue.
• Location data: Real-time position is processed in the moment for navigation and contextual features and is not stored as a movement trail. Manual check-ins and in-app park context records are retained as part of your trip history until you delete your account or the associated quest.

When you delete your account, we will delete or de-identify your personal information within 30 days, except where retention is required by law.

07Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted between the App and our servers
• Encryption at rest for stored personal data
• Supabase Row Level Security (RLS) policies ensuring users can only access their own data
• Secure authentication with token-based session management
• Regular security reviews of our infrastructure and codebase

No method of electronic storage or transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

08Your Rights and Choices

8.1 Account and Data Management

• Access: You can access your account information and trip data at any time within the App
• Correction: You can update your profile and preferences at any time within the App
• Account deletion: In the App, open Settings and choose Delete Account. You can also request deletion without reinstalling or signing in to the App by emailing privacy@ropedrophero.com with the subject "Privacy Request - Account Deletion" and the email address associated with your Rope Drop Hero account. Do not send your password. We may need to verify your identity before completing the request. Account deletion will be processed within 30 days.
• Data portability: You can request a copy of your data in a machine-readable format by contacting us

Deleting your Rope Drop Hero account or uninstalling the App does not cancel an Apple App Store or Google Play subscription. To stop future subscription charges, cancel through the store where you purchased it. Account deletion and subscription cancellation are separate requests.

8.2 Location Services

You can enable or disable location services for the App through your device settings at any time. Disabling location services will prevent GPS navigation, location-based Park Ranger recommendations, party location sharing, and in-app park detection. Core features such as wait times, crowd calendar, and trip planning will continue to function without location access.

8.3 Apple Health and Health Connect

You can review or revoke Rope Drop Hero's Apple Health read access at any time in iOS Settings > Health > Data Access & Devices > Rope Drop Hero, or from the Health app's Apps and Services access controls. Revoking access can make previously readable values appear as no data; the App does not claim that you denied a specific read permission. Manual planning remains available.

On Android, open Health Connect > App permissions > Rope Drop Hero to review or revoke read access. You can also open Health Connect controls from Pace settings. Revoking permission stops access to Health Connect; turn Pace Assist off to clear its cached movement summary and baseline. Manual planning remains available.

8.4 Push Notifications

You can enable or disable push notifications through your device settings. Disabling push notifications will prevent you from receiving Lightning Lane alerts, dining availability alerts, and available Starlight Concierge notifications.

8.5 Tracking and Advertising

On iOS, you can control advertising tracking through the App Tracking Transparency prompt shown after the App has launched, or at any time via iOS Settings > Privacy & Security > Tracking. Opting out of tracking does not affect your access to any App features.

On the website, optional Rope Drop Hero usage analytics, Google Analytics, and TikTok advertising measurement are on by default for visitors identified as being in the United States, unless you have saved a refusal. In other countries, including the European Economic Area, the United Kingdom, Switzerland, and Canada, or when we cannot determine your country, they stay off until you allow measurement. You can change your choices at any time using Privacy choices in the footer. TikTok advertising measurement stays off when your browser sends a Global Privacy Control signal. Withdrawing stops future measurement and removes locally stored Rope Drop Hero analytics identifiers and queued events; it does not recall data already sent. TikTok advertising measurement is suppressed when your browser sends a Global Privacy Control signal. Your choice does not affect access to the website or waitlist. Campaign source details you submit with the waitlist form (described in section 2) are saved with your signup whether or not you allow optional measurement. Preserving those details across pages in the same tab uses session storage only while usage analytics is enabled. Otherwise, we retain only the current page’s source details in memory until you submit the form; attribution across pages may be unavailable.

8.6 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. Our use of TikTok advertising measurement may constitute “sharing” for cross-context behavioral advertising under California law. You can opt out using Privacy choices (turn off TikTok advertising measurement) or a Global Privacy Control signal. The website honors Global Privacy Control signals by suppressing TikTok advertising measurement. To exercise your CCPA rights, contact us using the information in Section 12.

8.7 European Residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. Our legal basis for processing your data is your consent (for optional features like location, tracking, and AI) and contractual necessity (for providing the App's core services). To exercise your GDPR rights, contact us using the information in Section 12.

09Children's Privacy

Rope Drop Hero is designed for use by families visiting Walt Disney World. You must be at least 13 years old to create your own account. If you are under 18, you must have your parent or guardian's permission to use the App. A parent or guardian can manage trip planning on behalf of children under 13 from their own account.

We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us using the information in Section 12.

10Third-Party Services and Links

The App may contain references to or integrations with third-party services, including Walt Disney World properties, dining establishments, and other attractions. This Privacy Policy applies only to the Rope Drop Hero App. We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

Rope Drop Hero is not affiliated with, endorsed by, or officially connected to The Walt Disney Company or any of its subsidiaries or affiliates. All Disney-related trademarks and content are the property of The Walt Disney Company.

11Changes to This Privacy Policy

The waitlist campaign-source practice described in this update applies to visits and signups after the update date. We do not backfill campaign details for earlier signups.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy within the App and updating the "Last Updated" date at the top of this document. For significant changes, we may also provide notice via push notification or email. Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

12Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: