Privacy Policy

Last updated: August 7, 2026

Thoosie ("we", "us", "our") operates the Thoosie mobile application. This policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: Apple ID (for Sign in with Apple), display name, username, email (optional), and date of birth (for age verification).
Location Data: GPS coordinates are used to detect which theme park you are visiting, and to measure how long it takes to walk between rides. Location is only accessed while the app is in active use or during a Park Day session. Walking measurements are aggregated and individual traces are not retained; see Section 9.
Motion & Sensor Data: Accelerometer and gyroscope data from your Apple Watch are used to detect roller coaster rides. This data is processed to verify ride authenticity.
Health Data: Heart rate data from Apple Watch (via HealthKit) is optionally collected during rides for verification purposes. We do not store raw health data beyond what is needed for ride verification.
Photos: If you choose to save or share NFT credit cards, we request access to your photo library. We do not access photos without your action.
Ride History: Records of coaster rides you log, including ride name, park, date, and sensor-derived metrics (G-forces, duration, inversions).
User-Generated Content: Posts, comments, profile photos, and other content you create within the app.

2. How We Use Your Information

To verify and record roller coaster rides
To create digital collectible NFT credit cards on XRPL
To permanently store credit card images on Arweave (decentralized storage)
To display your profile, credits, and achievements to other users
To send push notifications about ride confirmations and achievements
To improve ride detection accuracy through aggregated, anonymized data
To measure typical walking times between rides, so route planning uses real times instead of estimates
To produce aggregate park statistics that may inform analytics products we sell to park operators (see Section 9)
To moderate content for community safety

3. Blockchain & Permanent Storage

When you earn a credit, an NFT (non-fungible token) may be minted on the XRP Ledger as a digital collectible. The associated card image is stored permanently on Arweave. Blockchain data is immutable and cannot be deleted. Your on-chain identity can be configured as anonymous, username-only, or real name in app settings.

4. Third-Party Services

XRPL (XRP Ledger): For minting NFT credit cards
Arweave / Turbo: For permanent image storage
Open-Meteo: Weather data for ride context
Apple HealthKit: Heart rate during rides (with your permission)
Apple Push Notification Service: For notifications

We do not sell your personal information to any third party. We do license aggregate, non-identifying park statistics, including the walking-time figures described in Section 9, to park operators. Those figures describe places and typical durations, not people.

5. Data Retention & Deletion

You can delete your account at any time from Settings in the app. This permanently removes all server-side data including your profile, credits, achievements, ride recordings, messages, and social connections. Note that NFT data already written to the blockchain cannot be removed.

6. Children's Privacy

Thoosie requires users to verify their date of birth. Users under 13 are not permitted to create accounts in compliance with COPPA.

Where a guardian uses SafeWalk to see where their child is in the park, that location is used only to show the child's position to their guardian. It is never used for analytics, never aggregated into park statistics, and never shared with parks. See Section 9.

7. Data Security

All communication between the app and our servers uses HTTPS encryption. We implement server-side validation, content moderation, and access controls to protect your data.

8. Your Rights

You may request an export of all your data or request account deletion at any time through the app's Settings screen. For questions, contact us at privacy@thoosie.app.

9. Movement Data & Park Analytics

What we derive. When you walk from one ride to another, Thoosie records the walking route between those two rides and how long the walk took. The route between two rides is the same for everyone who walks it, so we keep it as a property of the park rather than a record about you.

It is aggregated, and individual traces are not retained. Walk timings are combined at the moment they reach our servers into a single typical duration for each ride-to-ride path, broken down by hour of the day. We keep that combined statistic. We do not retain individual movement traces, and we do not build a record of where any individual guest went.

Aggregate statistics may inform products we sell to park operators. Parks pay for analytics built from combined figures of this kind, such as the typical time it takes guests to walk between two rides at a given hour.

Guest-level location is never shared with parks. A park never receives your position, your path, or any movement record tied to you or your device. What a park receives describes places and typical durations, not people.

SafeWalk is excluded entirely. Location shared through SafeWalk, which lets a guardian see where their child is in the park, is walled off from analytics. A child's SafeWalk location is never used for walking statistics, never aggregated into an operator product, and never shared with parks.

10. Changes

We may update this policy from time to time. Changes will be posted here with an updated date.