Privacy Policy

Last Updated: August 5, 2026

1. Introduction

Magic Carpet Technologies Inc. ("we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related browser-based tools (collectively, the "Services").

By creating an account or using our Services, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use the Services.

A. Information You Provide to Us

• Account Information: When you sign up or log into our Services using a third-party authentication provider (such as Google Sign-In or Apple Sign-In), we receive a unique token, your email address, and your name as permitted by that provider’s privacy settings. We do not collect, view, or store user passwords.
• Trip & Profile Data: We collect information you voluntarily input into your itineraries, such as travel dates, party size, reservation times, and destination preferences.

B. Information Collected Automatically

• Location Data: To optimize your itinerary and provide real-time updates while you are at a travel destination, the mobile application may request access to your device’s precise location services.
  • Foreground Location: Collected while you are actively using the App to show your position relative to attractions.
  • Background Location: If explicitly permitted by you, the App may check your location in the background to send you timely itinerary alerts or update wait-time predictions.
  • Web/Browser Location: The web version may request your general location (via IP address) or precise location (via browser prompt) solely to personalize your experience.
• Push Notification Tokens: To send you real-time itinerary updates, wait-time changes, and system alerts, we collect and use unique device tokens provided by mobile and browser messaging systems. These tokens allow us to securely route messages to your specific device, but they do not reveal your identity.
• Usage and Device Data: We automatically collect data about your device type, operating system, browser type, IP address, app version, and how you interact with our Services (e.g., pages viewed, features used, and performance logs).

3. How We Use Your Information

We use the information we collect to operate, maintain, and improve our platform. Specifically, we use your data to:

• Generate, recalculate, and optimize your travel itineraries.
• Analyze anonymous, aggregated traffic trends and crowd patterns to improve our predictive optimization algorithms.
• Maintain your account, verify your identity, and provide customer support.
• Deliver real-time push notifications, such as time-sensitive itinerary alerts and essential system notices.

4. Data Sharing and Minimization

We do not sell, rent, or trade your personal data to third parties for marketing or advertising purposes.

Separately, and only with your consent, our website uses a Meta (Facebook) pixel to measure the performance of our own advertising — see Section 5.

We only share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating our platform and delivering the Services. These categories include:
  • Cloud Infrastructure and Hosting: Third-party cloud vendors providing secure servers, databases, and computing environments.
  • Authentication Partners: Third-party identity providers used to securely verify your identity without exposing passwords.
  • Notification and Communication Services: Third-party messaging platforms used to deliver time-sensitive push notifications.
• Aggregated, De-Identified Data: We may use and share fully anonymized, aggregated data (e.g., overall crowd trends, ride wait times) for analysis, algorithm training, or public reporting. This data contains no personally identifiable information.
• Legal Compliance: We may disclose your information if required to do so by law, regulation, or court order.

5. Cookies and Advertising Measurement

Our website uses a Meta (Facebook) pixel to measure how well our advertising brings visitors to Magic Carpet. The pixel is off by default: it only runs if you choose “Allow” in the cookie banner, and no data is shared with Meta before then.

When you allow it, the pixel sets the _fbp cookie (and, if you arrived from a Meta ad, the _fbc cookie), each lasting up to 90 days, and shares with Meta Platforms, Inc. your IP address, browser and device information, the pages you visit on our website, and whether you signed up for the beta. We use this solely to measure the performance of our advertising campaigns. Meta is based in the United States, so this data is transferred to and processed in the United States, where Meta handles it according to its own privacy policy.

You can change your mind at any time via cookie preferences (also linked in the website footer). Declining removes the Meta cookies from your browser. Your choice is stored locally on your device.

6. Your Choices and Data Control

• Location Services: You can opt out of precise location tracking at any time by disabling location permissions for Magic Carpet in your mobile device or web browser settings. Disabling location may limit some real-time optimization features of the Services.
• Push Notifications: You can turn off push notifications at any time through your device or browser settings.
• Account Deletion: You can delete your account at any time within the App settings or by contacting us directly. Deletion takes effect immediately: we permanently delete your name, email address, profile photo, sign-in credentials (including requesting revocation of Sign in with Apple authorizations), push notification token, and your precise location history. Your remaining trip data (plans and schedules) is irreversibly anonymized so it can no longer be associated with you, and we retain it to improve wait-time predictions and understand how the Services are used. Crash and diagnostic reports are never linked to your account. Residual copies of deleted data may persist in encrypted backups for up to 35 days and in server logs for up to 60 days before being automatically purged.
• Data Correction: You can update your account information at any time through your profile settings.

7. Security

We implement standard technical and organizational security measures to protect your personal data from unauthorized access, loss, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. If you have an account, we may also notify you via email or a mandatory prompt within the Services.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: [email protected]
• Corporate Address: Magic Carpet Technologies Inc., 1529 Lilac Street, Halifax, NS B3H 3W4, Canada