Privacy Policy

Enchanted Assistant Privacy Policy
Last Updated: June 8, 2025

1. Introduction
   Welcome to Stacy: Your Theme Park & Cruise Expert (“Stacy,” “we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and any related services (collectively, the “Service”).
   Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
   We collect information about you in various ways when you use our Service.
   A. Information You Provide to Us:

• Account Information: When you create an account, you provide us with your email address and a password. If you choose to provide it, your display name might also be collected.
• Chat Content and Interactions: The text of your conversations with Stacy, including your questions, comments, and Stacy’s responses, is collected. This includes any specific “memories” you ask Stacy to save for you (“personal memory”) or for everyone (“global memory”).
• Preferences and Trip Plans: Information about your personal preferences (e.g., “likes roller coasters”) and trip plans that you share with Stacy and that are identified by our AI for saving.
  B. Information Collected Automatically:
• Location Information (with your permission): If you grant us permission through your device’s settings, we may collect your precise or approximate location data (latitude and longitude). This is used to provide you with localized weather forecasts and information relevant to your geographical area. You can revoke this permission at any time through your device settings.
• Usage Data: We collect information about how you access and use the Service, such as the features you use, the time and duration of your interactions, and any errors encountered. This helps us improve the Service.
• Device Information: We may collect information about the mobile device or computer you use to access the Service, including the device’s unique ID, operating system, and browser type.
  C. Information from Third Parties (APIs):
• Google Gemini API: Your conversational input is sent to Google’s Gemini API to generate Stacy’s responses. Google’s privacy practices govern their handling of this data. We do not store detailed conversational prompts with Gemini beyond what is saved as your “personal memory” or “global memory” within our own database.
• Google Text-to-Speech (TTS) API: Text responses from Stacy may be sent to Google’s TTS API to generate audio. Google’s privacy practices govern their handling of this data.
• Google Custom Search API: Your queries for general travel information may be sent to Google’s Custom Search API to retrieve web results. Google’s privacy practices govern their handling of this data.
• OpenWeatherMap API: If you grant location permission, your location data is sent to the OpenWeatherMap API to retrieve weather forecasts. OpenWeatherMap’s privacy policy governs their handling of this data.
• Queue-Times.com API: Queries about theme park wait times are sent to Queue-Times.com. Their privacy policy governs their handling of this data.
• Cruise API: If you make cruise-related inquiries, relevant details may be sent to our third-party cruise data provider (e.g., cruise line, ship name, dates, ports). The privacy policy of the specific cruise API provider will apply to their handling of this data. (You must replace this with the actual cruise API provider and their policy).
• Firebase (Google): We use Firebase (a Google product) for authentication and database services (Firestore). Firebase collects data to operate its services, such as user IDs for authentication and data stored in our Firestore database. Google’s privacy policy applies to Firebase services.

1. How We Use Your Information
   We use the information we collect to:

• Provide and maintain the Service: Deliver chatbot responses, manage your account, and operate the core functionalities of Stacy.
• Personalize your experience: Use your “personal memory” to recall past conversations, preferences, and trip plans to provide more relevant and helpful responses.
• Improve the Service: Understand how users interact with Stacy, identify trends, debug issues, and enhance features.
• Provide location-based services: Deliver accurate weather forecasts for your area if you grant permission.
• Communicate with you: Respond to your inquiries and send you service-related notifications.
• Analyze and monitor usage: Track performance, prevent fraud, and ensure security.
• For “global memory”: Information you explicitly save to “global memory” is used to enhance Stacy’s general knowledge and benefit all users of the Service.

1. How Your Information is Shared
   We may share information in the following situations:

• With Third-Party Service Providers: We share your information with third-party vendors and service providers who perform services for us (e.g., Google Firebase for database and authentication, Google Gemini/TTS/Search for AI processing, OpenWeatherMap for weather, Queue-Times.com for theme park data, and our Cruise API provider for cruise data). These providers are obligated to protect your information and use it only for the purposes for which it was provided.
• For “Global Memory”: Data explicitly saved to the “global memory” collection is accessible to all users of the Service to enhance their experience. This information is anonymized where possible, but context from your input might be included. Do not save sensitive personal information to global memory.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
• To Protect Our Rights: We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
• With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.

1. Data Storage and Security
   We use Google Firebase Firestore to store your account information, chat content, and memory data. Firebase implements security measures to protect your data. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
2. Data Retention
   We retain your personal information, chat content, and memory data for as long as your account is active or as needed to provide you the Service, and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.
3. Your Data Rights
   Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Access: You can request access to the personal data we hold about you.
• Correction: You can request correction of inaccurate or incomplete personal data.
• Deletion (Right to be Forgotten): You have the right to request the deletion of your account and all associated personal data.
• To request deletion of your account and all associated data, please contact us at [Your Support Email Address] or use the in-app account deletion feature (if available).
• Objection/Restriction: You may object to or request restriction of the processing of your personal data in certain circumstances.
• Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.

1. Children’s Privacy
   Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information from our files. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us at [Your Support Email Address].
2. Changes to This Privacy Policy
   We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.