TrackR Privacy Policy

Effective Date: April 29, 2026 Last Updated: October 2, 2026

This Privacy Policy describes how Lanting Digital LLC ("we", "us", "TrackR") collects, uses, and shares information when you use the TrackR mobile application ("the Service"). By using TrackR, you agree to the practices described here. If you do not agree, please do not use TrackR.

1. Information We Collect

1.1 Information you provide

When you create an account or sign in with Apple, Google, or email/password, we collect your email address, display name, and profile photo via Firebase Authentication. As you use TrackR you create ride logs (parks, rides, dates, ratings, and free-text notes; photos you attach to a ride log stay on your device), community content (posts, comments, polls, channel and meetup messages, friend connections, reactions), game scores and stats, wait-time reports and menu suggestions you submit, and, if you buy TrackR Pro, purchase records (subscription tier, price, and the Apple transaction and receipt identifiers). Photos you upload are limited to your profile photo, photos you submit to the Photo Reward Program, and an optional screenshot you attach to feedback. Payment card details are processed by Apple — we do not receive or store your card number.

1.2 Information collected automatically

Device and usage data is limited. When you interact with TrackR, our backend (Firebase Cloud Functions) processes requests; standard server logs (timestamp, request endpoint, sometimes IP address for abuse prevention) are retained briefly. We do not currently use third-party analytics, crash reporting, or attribution services. App Store Connect provides aggregate crash and performance data from Apple, which is governed by Apple's privacy policy.

Approximate and precise location, with your permission, foreground only ("when in use"), used to display in-park maps and walking directions and to recognize when you arrive at a park. Your exact GPS coordinates are not saved on our servers. When TrackR records a park visit, we save which park you visited and when the visit started and ended, linked to your account. When you search and TrackR has no park to anchor the results to, it sends an approximate location (rounded to about 1 km) with your search so results near you can be ranked first. Search requests are sent without your account sign-in, so your searches and that approximate area are not linked to your account. Nearby parks, your parked-car pin, and your gate-scan history stay on your device.

Step and distance data, with your explicit permission: TrackR reads your step count, walking/running distance, and flights climbed from Apple Health (HealthKit). On Android, step counts come from your phone's motion sensors (the step counter). Flights climbed and your day-to-day activity stay on your device. When TrackR records a park visit, it saves that visit's total step count and walking distance to your account on our servers (Google Firebase), so your park stats are kept across devices. We use this data only to show your park activity in TrackR. We never sell it, never use it for advertising or marketing, never share it with third parties, and never store it in iCloud. TrackR does not write any data to Apple Health. Deleting your account deletes these park visit records.

1.3 Information from third parties

If you sign in with Apple or Google, we receive the basic profile fields you authorize (name and email). We do not buy or rent personal data from third parties.

TrackR does not engage in cross-context behavioral advertising. We do not sell your personal information. We do not share your data with advertisers, data brokers, or aggregators.

2. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve TrackR features (logging, community, ratings, maps, card collection, gameplay).
• Authenticate your account and prevent fraud, abuse, and unauthorized access.
• Process TrackR Pro subscription payments through Apple.
• Moderate community content: review reports, remove content that breaks our rules, and suspend accounts (see "Reports, removal, and suspension" below).
• Send transactional notifications (account verification, friend requests, ride reminders). We do not send marketing email at this time.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information. We share data only as needed to operate TrackR:

We rely on third-party content providers (such as ThemeParks.wiki and Queue-Times) for park hours, ride specifications, and live wait-time data. Our backend fetches this data periodically; no user data is sent to these providers.

We may share aggregated, de-identified data (e.g., "the most-logged ride at Cedar Point this month" or "TrackR users rated this coaster 4.6/5 on average") for business intelligence, partnership discussions, or public posts. This data is aggregated to prevent re-identification of any individual user.

In the event of a merger, acquisition, or sale of substantially all of Lanting Digital LLC's assets, your information may be transferred to the acquiring entity. The acquiring entity will be bound by the commitments in this Privacy Policy, or you will be notified and given the opportunity to delete your account before the transfer takes effect.

Privacy settings. Your profile can be set to everyone, friends, or private, and each post can be shared with everyone, friends only, or kept private. Ride logs and ratings are stored in your account and are not visible to other users. Even when your profile is private, a minimal profile card (your display name, username, avatar, and total ride count) can be found by other signed-in users so they can send you a friend request. Public posts and channel messages can be read without signing in. Wait-time reports you submit are visible to other signed-in users and are tied to your account identifier. Leaderboards show your display name and avatar alongside your score.

Reports, removal, and suspension. Any signed-in user can report a post, comment, message, meetup, crew, or person, and can block another user. A report includes your account identifier, the reported content or person, the reason, and any details you write. A small team reviews reports within 24 hours, may remove content, and may suspend an account that breaks our Terms; a suspended account keeps its data but can't post, and can still report and block. Reports are visible only to our moderators and are kept as a safety record. We also keep a log of moderation and admin actions (the account acted on, the action taken, and when) as a security record, so we can show who changed what and investigate misuse; it is visible only to our administrators.

4. Data Retention

Account data is retained while your account is active. When you delete your account (Settings → Data & Storage → Delete Account), your account and the data linked to it are permanently deleted right away; this cannot be undone. Where something you shared is part of other people's content, it is anonymized instead of deleted: a meetup or crew other members joined is handed to another member, and your name is replaced with "Deleted user" on photos you submitted to the Photo Reward Program, on the credit shown for them, and on reports you filed. Free-text details you wrote in a report are removed; the report itself is kept as a safety record. Data stored only on your device, such as saved passes, is cleared when you sign out or delete your account. Backup copies, if any, are purged within 30 days.

Ride logs, ratings, and community content are retained for as long as your account exists. You can delete individual entries from the app at any time, which removes them from active databases within 24 hours.

Subscription, purchase, and tax records are retained for 7 years after the last transaction, as required by US tax and accounting laws (Internal Revenue Code §6001 / 26 CFR 1.6001-1), regardless of account-deletion requests. These records contain only transactional information (amount, date, subscription tier, and Apple's transaction and receipt identifiers) — not your ride logs or community content.

Aggregated, de-identified data — for example, the contribution any individual user made to "TrackR users rated this coaster 4.6/5" or "TrackR users visited Cedar Point in May" — persists after account deletion as part of the broader community statistic. This data cannot reasonably be linked back to any individual user and is not affected by account-deletion requests.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data via the in-app profile editor or by contacting us
• Delete your account and associated data via Settings → Data & Storage → Delete Account
• Export your ride log in the app (Settings → Export Ride Log), or contact us at the email below for a full copy of your data
• Object to or restrict certain processing

Residents of California (CCPA), the EEA/UK (GDPR), and similar jurisdictions have additional rights, including the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email us at privacy@ridetrackr.app.

6. Children's Privacy

TrackR is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, contact us at privacy@ridetrackr.app and we will delete it promptly.

7. Security

We use industry-standard practices to protect your data, including HTTPS for all network traffic, Firebase Security Rules for database access control, and encrypted storage at rest. No system is perfectly secure; you use TrackR at your own risk and should choose a strong, unique password. If you suspect your account has been compromised, contact us at privacy@ridetrackr.app immediately.

8. International Data Transfers

TrackR's backend infrastructure is hosted in the United States via Google Firebase / Cloud Firestore. If you access TrackR from outside the United States, your information will be transferred to and processed in the United States. By using TrackR, you consent to this transfer. We rely on Google Firebase's Standard Contractual Clauses (SCCs) for transfers from the EEA/UK to the United States.

9. Third-Party Links

TrackR may contain links to third-party sites (e.g., theme park websites, ticket retailers, news articles, community partner sites). We are not responsible for the privacy practices of those sites. Review their privacy policies before sharing data with them. We may earn affiliate revenue from links to ticket retailers and travel-booking partners; this does not affect your price or our editorial independence in coaster ratings and recommendations.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated in-app and the "Last Updated" date above will reflect the change. Continued use after changes constitutes acceptance.

11. Contact Us

Lanting Digital LLC Riverside, CA, United States

• Privacy: privacy@ridetrackr.app
• Legal: legal@ridetrackr.app
• Support: support@ridetrackr.app