Last updated: 10/05/2026
This policy applies to the GenieGrove website at geniegrove.com and to the GenieGrove mobile app for iPhone, iPad and Android. The app signs you into the same GenieGrove account, so everything below applies to both. Where a practice is specific to the app, it is described under The GenieGrove Mobile App.
When you create a GenieGrove account, we collect:
If you choose to link your My Disney Experience ("MDX") account for Waitless Pixie or other integrations, we collect:
Important: Your Disney password is never collected, stored, or transmitted to GenieGrove. Authentication is performed through Disney's systems, and we only receive the tokens needed to operate the services you have explicitly enabled. You can unlink your Disney account at any time in the GenieGrove app, or by contacting us.
When you purchase Grove Plus, our payment processor (Stripe) collects and processes your payment details. GenieGrove receives and stores:
GenieGrove does not see or store your full card number, CVV, or banking credentials. All payment processing is handled by Stripe in accordance with their PCI-compliant systems.
When you plan a trip with us — through Pixie, a price watch, or a dining watch — we store what is needed to price and monitor that trip:
We automatically collect information about how you use our Service:
We use your information to:
The following information is publicly visible by default:
You can control the visibility of your collections and profile fields from your account settings.
We share limited information with trusted service providers:
We do not sell your personal information for money, and we do not share your account information with third parties for their own marketing purposes. GenieGrove shows no ads and uses no advertising cookies, as described under Cookies, Analytics and Advertising.
We may disclose information when required by law or to:
We implement a layered security program, including:
When you link your Disney account to GenieGrove:
GenieGrove uses cookies and similar technologies to:
You can control or disable cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using certain features.
GenieGrove does not show ads, on the website or in the GenieGrove mobile app, and it uses no advertising cookies. The Grove runs on Grove+ memberships and donations.
The GenieGrove app for iPhone, iPad and Android signs you into the same GenieGrove account as the website, and everything above about accounts, Disney linking, trip planning, security and your rights applies to it. This section describes what is specific to the app.
Friends & Family is the list of people you add as friends in the GenieGrove app. It is our own list, separate from the Friends and Family list in My Disney Experience that Waitless Pixie uses. It is made only of people who add each other in GenieGrove. We never read your phone's contacts or address book to build it.
Anyone who enters your friend code while it is live (30 minutes) becomes your friend, and we tell you when someone does. You choose whom to show your code to, and a new one replaces it every 30 minutes. Show your code only to people you know. Someone you find through your Friends & Family gets a request instead, and becomes your friend only if they accept it.
A friend sees your username, your picture and when you became friends. When you invite a friend to watch a trip, they see its dates; they see its plan, its Lightning Lane times included, only if they say yes, and a friend who watches your trip gets the same alerts you do for it. A friend never sees your email address.
You can choose to share your list. Sharing is off until you switch it on, and you can switch it off again at any time in Friends & Family in the app. While it is on, someone who shares a friend with you can see your username, your picture and the friends you have in common, as a suggestion, and send you a request, but only when you, they and a friend you have in common have all chosen to share. Switching sharing off stops suggestions through you straight away; friendships already made stay.
You can remove anyone from your list, which also ends any trip watching between you. You can block anyone, which also ends your friendship and any trip watching between you, and stops them sending you a request, adding you with your code or finding you through anyone's list. We do not send them a notice either way, and we do not tell anyone when you decline their request.
The app uses Google Firebase Cloud Messaging to deliver notifications and Firebase Crashlytics to report crashes. Google operates both as our service provider, on our instructions.
The Google Analytics for Firebase library is present in the app, but its data collection is switched off. The app records no screen views, no sessions and no events through it.
The app shows no advertising and contains no advertising network. It does not read your device's advertising identifier — on iPhone and iPad the system frameworks needed to do so are not built into the app at all — and it therefore never asks for permission to track you. We do not link anything collected in the app with data from other companies for advertising or advertising measurement, and we do not share it with data brokers.
The app displays no web pages of its own. When you tap a link — to subscribe to Grove+, to read these policies, or to open a Disney booking page — it opens in your phone's own browser, where that browser's session and cookie settings apply. The app passes no account identifier in those links.
The app asks for notification permission, and for Face ID or your device's biometric lock if you choose to turn that on. It asks for your location only to show where you are on the park map and how far you are from what is on it, and only while you use the map; your position stays on your phone. Once you have given that permission, the map shows where you are whenever it is open, without a tap. It does not request your contacts, your camera or your photo library.
You can:
You have the right to:
To exercise these rights, email [email protected] with the subject line "Privacy Request". We will respond within 30 days.
If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information is collected and to request deletion. If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR, including the right to lodge a complaint with a supervisory authority.
We retain your information:
When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law (for example, billing records retained for tax purposes).
GenieGrove's Waitless Pixie service interacts with The Walt Disney Company's systems on your behalf, using authentication material you have voluntarily provided. When you link your Disney account:
GenieGrove is not affiliated with, endorsed by, or sponsored by The Walt Disney Company. For more information about Disney's data practices, please visit Disney's Privacy Center.
GenieGrove is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at [email protected] and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. We encourage you to review this policy periodically. The "Last updated" date at the top of this page reflects the most recent revision.
If you have questions about this Privacy Policy or our data practices, please contact us: