Privacy Policy

Last updated: April 6, 2026

Thoosie ("we", "us", "our") operates the Thoosie mobile application. This policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: Apple ID (for Sign in with Apple), display name, username, email (optional), and date of birth (for age verification).
Location Data: GPS coordinates are used to detect which theme park you are visiting. Location is only accessed while the app is in active use or during a Park Day session.
Motion & Sensor Data: Accelerometer and gyroscope data from your Apple Watch are used to detect roller coaster rides. This data is processed to verify ride authenticity.
Health Data: Heart rate data from Apple Watch (via HealthKit) is optionally collected during rides for verification purposes. We do not store raw health data beyond what is needed for ride verification.
Photos: If you choose to save or share NFT credit cards, we request access to your photo library. We do not access photos without your action.
Ride History: Records of coaster rides you log, including ride name, park, date, and sensor-derived metrics (G-forces, duration, inversions).
User-Generated Content: Posts, comments, profile photos, and other content you create within the app.

2. How We Use Your Information

To verify and record roller coaster rides
To create digital collectible NFT credit cards on XRPL
To permanently store credit card images on Arweave (decentralized storage)
To display your profile, credits, and achievements to other users
To send push notifications about ride confirmations and achievements
To improve ride detection accuracy through aggregated, anonymized data
To moderate content for community safety

3. Blockchain & Permanent Storage

When you earn a credit, an NFT (non-fungible token) may be minted on the XRP Ledger as a digital collectible. The associated card image is stored permanently on Arweave. Blockchain data is immutable and cannot be deleted. Your on-chain identity can be configured as anonymous, username-only, or real name in app settings.

4. Third-Party Services

XRPL (XRP Ledger): For minting NFT credit cards
Arweave / Turbo: For permanent image storage
Open-Meteo: Weather data for ride context
Apple HealthKit: Heart rate during rides (with your permission)
Apple Push Notification Service: For notifications

We do not sell your personal information to any third party.

5. Data Retention & Deletion

You can delete your account at any time from Settings in the app. This permanently removes all server-side data including your profile, credits, achievements, ride recordings, messages, and social connections. Note that NFT data already written to the blockchain cannot be removed.

6. Children's Privacy

Thoosie requires users to verify their date of birth. Users under 13 are not permitted to create accounts in compliance with COPPA.

7. Data Security

All communication between the app and our servers uses HTTPS encryption. We implement server-side validation, content moderation, and access controls to protect your data.

8. Your Rights

You may request an export of all your data or request account deletion at any time through the app's Settings screen. For questions, contact us at privacy@thoosie.app.

9. Changes

We may update this policy from time to time. Changes will be posted here with an updated date.