1. Who we are
This Privacy Policy explains how Cardume LLC, with its principal place of business at 1633 Future Way #200, Kissimmee, FL 34747, USA (“Orlando in Detail,” “we,” “us”), the data controller, collects and uses personal information in the Orlando in Detail app (iOS, Android and Apple Watch) and on the websites orlandoemdetalhes.com, orlandoindetail.com and orlandoendetalle.com.
Privacy contact: [CONTACT EMAIL].
2. Information we collect
- Account: your email address and, if you sign in with Apple or Google, the identifier those services share with us (Apple lets you hide your real email). Your password is stored by our authentication provider in hashed form only.
- Subscription: email, plan, subscription status, billing dates and country or currency. Card details are handled directly by Stripe; we never receive your full card number.
- Guide AI: the questions you type, the answers, conversation identifiers and your yearly question count (for the usage limit). Each question is sent with the context needed to answer it: park, language, temperature unit and, if you have allowed location access, your position rounded to about 100 meters (330 feet). Conversations are kept on our server for up to 7 days.
- Itinerary and preferences: saved attractions, “been there” marks and likes, synced with your account so they appear on your other devices.
- Wait time reports: when you report a line, we send the park, the attraction and the minutes you reported, without your name or email.
- Location: only with your permission and while the app is in use, to suggest nearby attractions, draw walking routes on the map and on Apple Watch, and give Guide AI context. We do not keep a location history: the position sent with a question stays only in the record of that conversation, which is deleted within 7 days.
- Notifications: your device’s push token, linked to your account, to send the wait alerts and itinerary reminders you turn on.
- On your device only: the profile photo you choose, recent searches and the events you add to your calendar. We do not read your calendar or your photo library.
- Crash diagnostics: error reports with device model and system and app versions, with email, username and IP address removed before they are sent.
- Websites: we do not use advertising cookies or analytics tools. Our servers log technical data such as IP address and browser for security and to operate the service.
We do not use your information for advertising, we do not track you across other companies’ apps or websites, and we do not sell or share personal information for cross-context behavioral advertising.
3. How we use it
- To provide the Service: create and maintain your account, activate your subscription, answer in Guide AI, sync your itinerary and send the alerts you request.
- With your permission: location and notifications, which you can turn off at any time in your device settings.
- For security, fraud and abuse prevention, bug fixing and product improvement, including with aggregated wait time reports.
- To comply with legal obligations, such as keeping payment records.
4. Who we share it with
Only with service providers that process data on our behalf, under contract and for the purposes above:
- Supabase: authentication and account database;
- Stripe: payments and subscription management;
- Anthropic (Claude models): processing Guide AI questions;
- Sentry: crash diagnostics;
- Amazon Web Services and other contracted cloud providers: hosting for the app, websites and media;
- Apple and Google: sign in with their accounts and delivery of notifications.
We may also disclose information when required by law or by a valid order from a competent authority.
5. International transfers
Some of our providers store data in the United States and other countries. Where required, we rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission for data of people in the European Union.
6. How long we keep it
- Account, itinerary and preferences: while your account is active and for up to 30 days after you ask us to delete it (backups).
- Guide AI conversations: up to 7 days; your yearly question count, until the end of your subscription term.
- Payment records: for as long as tax law requires.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to withdraw consent. To exercise these rights or to delete your account, email [CONTACT EMAIL]. We will not discriminate against you for exercising your rights.
Brazil (LGPD): you may request confirmation that we process your data, access, correction, anonymization, portability and deletion, information about the entities we share it with, and withdrawal of consent, and you may file a complaint with the Brazilian National Data Protection Authority (ANPD).
European Union, EEA and United Kingdom (GDPR): you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, including to processing based on legitimate interests, and you may lodge a complaint with your local supervisory authority. Our legal bases are those in Section 3: performance of a contract, consent, legitimate interests and compliance with legal obligations.
8. Children
The Service is not directed to children under 13, subscriptions are available only to adults 18 or older, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.
9. Security
We use encrypted connections, access controls and providers with recognized security practices. No system is completely secure; if an incident puts your information at risk, we will notify you as required by law.
10. Changes and contact
We may update this Policy; we will notify you of material changes in the app or by email and update the effective date at the top of this page. Questions: [CONTACT EMAIL].