Your plans are yours.

Overview

Wayfinder is a local-first trip planning, park-day, and memory companion. Core planning features work without creating an account. We collect only the information needed to provide features you choose, operate the service, secure accounts, and respond to support requests.

We do not sell personal information. We do not show third-party ads, build advertising profiles, or track you across other companies' apps and websites. This website does not use advertising or analytics cookies.

Information kept on your device

By default, your planning data is stored on your device. This can include trip dates, traveler names you enter, plans, priorities, notes, packing items, saved places, and trip memories. If you use the camera or photo library, the photos you choose become part of your local trip memories.

If you separately allow location access, Wayfinder can record a park-day route and help with nearby context. Raw route points remain local by default and are not included in ordinary Planner Account synchronization. You control whether routes are retained. If you separately allow Health access, Wayfinder reads selected step, walking/running distance, and active-energy information to create your park-day recap. Wayfinder does not write Health data.

Removing the app or using its local deletion controls removes local information according to Apple's device behavior. Deleting an online account does not automatically erase information that remains only on your device.

Optional Planner Account

If you create a Planner Account with Sign in with Apple or Google, we receive an account identifier and may receive your email address, email-verification status, and display name, depending on what the provider shares and what you permit. We store identity records and session information needed to keep you signed in. The app stores sign-in credentials in Apple Keychain.

Planner Account synchronization may store trip dates, travelers, plans, priorities, notes, packing information, collaboration records, revisions, and identifiers needed to synchronize changes. If you collaborate, people you authorize for a trip can receive the trip information available to their role. Family Access and Planner Account synchronization are separate features.

If you enable server-assisted notifications, we store an app installation identifier, Apple Push Notification service token, app environment, and your notification-category preferences. Notification content is limited to the feature you enabled.

Optional Disney access

Disney access is optional, separate from your Planner Account, and read-only. Wayfinder never asks for or stores your Disney password. When you authorize access, Wayfinder may read plan information such as reservation names, dates, times, locations, participants, status, tickets, and Disney guest or plan identifiers so it can display those plans alongside your personal itinerary.

Wayfinder does not book, purchase, cancel, redeem, or modify Disney plans or account information. You can disconnect Disney access from the app. Disney's own terms and privacy practices apply to your Disney account and services.

Services Wayfinder uses

Depending on the features you choose, Wayfinder may communicate with:

• Daymark's Planner service for account access, synchronization, collaboration, deletion requests, and optional notifications.
• Apple and Google for optional account sign-in.
• Apple system services including Keychain, HealthKit, Location Services, Photos, Camera, push notifications, and TestFlight.
• ThemeParks.wiki for park catalogs, schedules, and live wait-time information.
• Disney services only when you choose to connect read-only Disney access.

These providers process information under their own privacy terms. Apple may also provide beta crash reports, screenshots, and feedback submitted through TestFlight.

How information is used and shared

We use information to:

• provide, synchronize, and improve the features you request;
• authenticate accounts and preserve authorized collaboration;
• deliver notifications you enable;
• diagnose failures, prevent abuse, secure the service, and meet legal obligations; and
• respond to feedback and support requests.

We share information only with service providers needed to operate Wayfinder, with collaborators you authorize, when you direct us to, or when required for security or legal compliance. We do not share raw Disney credentials or raw audit payloads. We do not sell or rent personal information. Service providers processing user information on our behalf are required to protect it to the same or an equivalent standard as the protections described in this policy.

Retention and deletion

Local information remains until you delete it, change an in-app retention setting, or remove the app. Planner Account information is retained while your account is active and as needed to provide synchronization, security, support, and legal compliance.

Deleting your Planner Account revokes active sessions, removes account mappings, trip memberships, collaboration state, and notification registrations, and de-identifies account references in security audit records. Account and trip records may first be soft-deleted to preserve integrity and complete deletion safely. Invalid notification installations and notification delivery records are generally removed after 30 days. Limited audit records may be kept longer where needed for security, abuse prevention, dispute resolution, or legal obligations.

You can request account deletion in Wayfinder Settings. For help with access, correction, export, or deletion, contact us at the email below.

Your choices

You decide whether to:

• use Wayfinder entirely without a Planner Account;
• sign in with Apple or Google and synchronize selected planning data;
• connect or disconnect read-only Disney access;
• allow location, Health, camera, photo, or notification permissions; and
• retain local routes, export available account information, or delete your account.

You can change Apple permissions in iOS Settings. Some features will be unavailable when their related permission or connection is off, but your local itinerary remains usable.

Security

We use administrative, technical, and organizational safeguards appropriate to the service. Network requests use encrypted connections. Sensitive app credentials are stored in Apple Keychain, and server-side notification tokens and selected provider records are encrypted. Access to synchronized trips is enforced by server-side authorization and role checks.

No security method is perfect. If you believe your account or information has been compromised, contact us promptly.

Children's privacy

Wayfinder is intended for adult trip planners and is not directed to children under 13. Adults may enter traveler names, including family members, when organizing a trip. Please avoid entering information that is not needed for planning. We do not knowingly allow a child under 13 to create a Planner Account. Contact us if you believe a child provided personal information directly to us.

Changes and contact

We may update this policy as Wayfinder changes. We will revise the effective date and, when appropriate, provide notice in the app or through the service before a material change takes effect.

Wayfinder is an independent planning companion. It is not affiliated with, endorsed by, or sponsored by The Walt Disney Company. Disney names and trademarks belong to their respective owners.