Privacy Policy — DVC Toolkit
DVC Toolkit (“we,” “us,” or “our”) provides tools for Disney Vacation Club members and fans to plan trips, manage DVC contracts, calculate points, and track availability. We take your privacy seriously. This Privacy Policy explains how we collect, use, store, protect, and delete your information when you use the DVC Toolkit mobile application (“App”).
1. Information We Collect
We only collect the information necessary to support the App’s features and your account preferences.
1.1 Information You Provide Voluntarily
If you choose to create an optional account, we collect:
- Email address
- Username (optional)
- DVC contract information you enter (e.g., home resort, use year, points, banking/borrowing activity)
- Trip information (dates, countdowns, availability search criteria)
- Notification preferences related to availability alerts
1.2 Automatically Collected Information
Through Firebase and Apple-provided services, we collect:
- App usage analytics
- Crash logs and diagnostics
- Device information (such as device model and operating system version)
- Interaction patterns within the App (for example, screens viewed and general usage flows)
This data is used solely for performance monitoring, App improvement, and debugging. It is not used to personally identify you.
1.3 No Sensitive or Financial Data Collected
We do not collect or store:
- Payment or credit card information
- Location data
- Government identifiers
- User-uploaded images or media
All subscription billing is handled securely by Apple and RevenueCat. We never receive your payment card information.
2. How We Use Your Information
We use your information to:
- Provide and maintain core App features
- Sync your data across devices when you use an account
- Enable account-based features such as trip sharing
- Deliver availability notifications and manage notification preferences
- Manage subscription status through RevenueCat
- Improve App performance through analytics and usage insights
- Diagnose and fix crashes and other technical issues
- Maintain the security and integrity of your account
We do not sell or rent your personal data to third parties.
3. Where Your Data Is Stored
We use Firebase services (including Firestore, Firebase Storage, Firebase Auth, and Firebase Functions) for secure cloud storage and processing. These services store:
- Account details (such as your email and optional username)
- Saved DVC contracts
- Saved trips and related trip metadata
- Notification settings and preferences
- Other data necessary to operate the App
All data is encrypted in transit and at rest using industry-standard encryption.
4. Third-Party Services
We work with trusted third parties to operate essential App functionality.
4.1 Firebase (Google)
We use Firebase for authentication, Firestore database storage, analytics, crash reporting, and background functions. For more information on how Firebase handles data, please review Firebase’s privacy documentation: https://firebase.google.com/support/privacy .
4.2 RevenueCat
We use RevenueCat to verify and manage in-app purchases and subscription status. RevenueCat does not provide us with your full payment details. For more information on how RevenueCat handles data, please review their privacy policy: https://www.revenuecat.com/privacy/ .
4.3 Apple
Apple may collect analytics and diagnostic data if you opt into sharing this information through your device settings. We do not control what Apple collects directly, but we may see aggregated analytics or crash reports through Apple’s developer tools.
We do not share any additional personal data with Apple beyond what is required for subscription validation and App distribution.
5. Data Sharing
We do not sell, share, or disclose your personal information to third parties except:
- When necessary to operate or integrate with the services listed in this policy
- When required to comply with applicable laws, regulations, legal processes, or governmental requests
We do not share your DVC contract data, trip data, or account details with any third-party companies for marketing or advertising purposes.
6. Data Retention
We retain your data only while your account remains active or as needed to provide you with App features.
When you delete your account using the in-App delete function:
- All personally identifiable data stored in Firestore that is associated with your account is permanently deleted
- Contract and trip data associated with your account is removed
- Notification preferences tied to your account are cleared
- Your Firebase Auth profile is deleted
The deletion process is irreversible. We do not maintain backup archives containing your personal data once the deletion is complete.
7. Your Rights
Depending on your location, you may have certain rights regarding your personal data, which may include the right to:
- Access the data we store about you
- Request corrections to inaccurate data
- Request deletion of your account and associated data
- Limit or opt out of certain types of data processing where applicable
All users may delete their accounts directly within the App at any time. If you have additional questions about your rights, please contact us at help@dvctoolkit.com.
8. Children’s Privacy
While the App is rated 4+ in the App Store, DVC Toolkit does not specifically target children and does not knowingly collect personal information from children under the age of 13.
If you are a parent or guardian and believe that a child has created an account or provided personal information without your consent, please contact us at help@dvctoolkit.com. We will promptly review and remove the data as appropriate.
9. Security
We use industry-standard security measures to protect your information, including:
- Encrypted communication using HTTPS/TLS
- Strict Firestore security rules
- Secure authentication through Firebase Auth
- No storage of passwords in plaintext
- No handling or storage of full payment information
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You use the App at your own risk.
10. International Users
If you access the App from outside the United States, you understand and consent that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we do, we will update the “Last Updated” date at the top of this page and may provide additional notice within the App for significant changes.
12. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:
13. No Affiliation with Disney
DVC Toolkit is a third-party application and is not affiliated with, authorized by, endorsed by, or sponsored by The Walt Disney Company, Disney Vacation Club, or any of their subsidiaries or affiliates. All Disney and Disney Vacation Club names, marks, and properties are the trademarks of their respective owners.