Privacy Policy

Last updated: 6 September 2026

Park Vitals shows the people who run a family entertainment center their own operating numbers on their phone. This policy explains what we hold, why, and what you can ask us to do about it.

What we collect

• Your name and mobile number. The number is your login: we text a six-digit code to it each time you sign in. There is no password.
• An email address for billing receipts, given when a company subscribes. It is never used to sign in.
• Your company and its parks: the business name, each park's name, its time zone, and its address or ZIP code.
• Keys to the systems you connect. The credentials you enter for your point-of-sale and scheduling platforms. They are encrypted before they are stored, are never shown again once saved, and are used only to read your own data.
• The operating figures those systems return: sales, admissions, bookings, memberships, menu sales, schedules and labor. We keep a copy so the app is fast and so long-range totals do not have to be rebuilt each day.
• Billing records: which parks a company has bought and the status of each purchase. Card details go directly to Stripe. We never see or store a card number.
• Server logs: which request was made and when. They do not contain your figures, your credentials, or the contents of any message.

What we do not collect

No advertising identifiers, no tracking across other apps or sites, no analytics profile of you, and nothing about your guests as individuals. We do not sell data, and we do not use it for advertising.

How we use it

To run the service and nothing else: signing you in, showing your figures, billing your company, sending the account notices described below, and answering your support requests. Your park's data is used to serve your company. It is never pooled with other companies' data or shared with them.

Text messages

We text sign-in codes and account notices to the number on your account. Message and data rates may apply. Reply STOP to opt out; you will not be able to sign in until you opt back in, because the code is how signing in works.

Who else sees it

• Railway hosts our servers and database.
• Twilio delivers the text messages.
• Stripe takes payments and holds the card details we never see.
• Open-Meteo returns the local forecast. It receives a park's coordinates and nothing else.
• The systems you connect to your parks, which we only ever read from.

Each receives only what it needs for its part. We may also disclose information if the law requires it.

Nothing is written back

Park Vitals has read-only access to the systems you connect. It never creates, changes or deletes anything in your point-of-sale or your schedule.

How it is protected

Traffic is encrypted in transit. The credentials for your connected systems are encrypted at rest with a key held separately from the database. Sign-in codes expire in ten minutes and are deleted within a day. Access is limited to the people who need it to run and support the service.

How long we keep it

We keep your company's account and figures while the account exists, including after a subscription ends, so that nothing is lost if you come back. Ask us to delete it and we will. Sign-in codes are deleted within a day of being issued. Server logs are kept by our hosting provider for a limited period, currently about thirty days.

Your choices

• See or correct your details in the app, or ask your company's administrator.
• Delete your account: your company's administrator can remove you, which takes effect immediately, or write to us and we will do it.
• Delete the whole company: an administrator can ask us, and we will remove the company, its people and its data.
• Stop the texts by replying STOP.

Children

Park Vitals is a tool for people who work at a park. It is not directed at children and we do not knowingly collect anything from them.

Changes

If this policy changes we will update the date at the top, and tell account administrators if the change is a significant one.

Contact

Write to hello@parkvitals.com with any question about this policy or any request above.