Privacy Policy

Who we are

Imagine City operates three indoor pretend-play venues in Southern California — Palmdale at the Antelope Valley Mall, Valencia at Valencia Town Center, and Lakewood at Lakewood Center Mall. This policy covers imaginecity.com, our check-in screens, and the Imagine City mobile app for iPhone and Android.

If you have a question about anything here, email info@imaginecity.com or call the location you visit. Their numbers are on our support page.

What we collect, and when

We collect only what we need to run Imagine City. Here is the whole list. What the app collects is described in more detail in its own section below.

When you sign a waiver: The parent or guardian’s name, email address and phone number, the names and birth dates of the children in your party, and your signature. The waiver is run by JotForm on our behalf. We keep a copy of your name, email and your children’s names in Wix so that check-in can find it.
When you check in: You enter your email. We look up your waiver and, if you have one, your membership, and we record that you checked in — your email, your name, your membership status, which location, and the time. You can do this at the front desk or from the app.
When you add a child’s photo at check-in: This is optional and always initiated by you. If you add one, we store the child’s first name, the photo, and the email it is attached to, so our front desk staff can recognise your family on your next visit. This is a picture for people to look at, not face recognition. You can ask us to delete it at any time and we will.
When you start a membership: Your name, contact details and your plan. Payment is taken by Square — we never see or store your full card number.
When you book a birthday party: Your booking details and payment go to SimplyBook.me, which runs our party calendar under their own terms. This is the same whether you book on the website or inside the app.
When you use the app: Your email address to sign in, a record of each phone signed in to your account and when the app was last opened, your children’s first names (and, if you add them, how to say each name and each child’s gender), your rewards and deals, what your children find in the play homes, and — only if you choose to make them — a photo of your child for a cartoon picture and personalized songs. If you turn on announcements, your phone’s push address and the location you chose. See “The Imagine City app” below.
When you join our mailing list: Just your email address. Every email we send has an unsubscribe link, and unsubscribing takes effect immediately.
When you leave a review: Your star rating, your comment if you write one, and which location you visited. We do not ask for your name, and we do not attach the rating to your account.
When you browse the website: Standard analytics — pages viewed, roughly where in the world you are, what kind of device. This is aggregated and is not used to identify you. Our staff pages are excluded from analytics entirely. The app has no analytics.

Children’s information

This is the part we want to be plainest about, because it matters most.

Our website, our check-in and the Imagine City app are made for parents and guardians (adults 18 and over), not for children. Children do not create accounts, and we do not knowingly collect information directly from children under 13. If you believe a child has given us information directly, email us and we will delete it.

Parents do give us information about their children so we can check the family in and run the features they choose. The parent decides what to add, controls it, and can delete it at any time. We do not sell children’s information, and we do not use it for advertising. We do not use children’s photos to train AI or to identify anyone by their face.

What a parent may give us about a child: The child’s name and birth date, on the waiver. In the app: the child’s first name, how to say it, and their gender, if the parent adds them, and a photo of the child’s face if the parent chooses to make a cartoon picture. Optionally, a photo added at check-in.
How it is used: To check the family in. To show the parent their waiver. To let storytime and the play-home bears say the child’s first name — the play homes do this only after the parent agrees to it. To make the cartoon pictures and songs the parent asked for. To keep the child’s Treasure Box of what they found in the play homes, and — only if the parent turns it on — to show the child’s first name and coin count on that location’s monthly leaderboard, which other signed-in members can see. We use it only for these purposes.
Who else receives it, and why: Only Wix, JotForm, DigitalOcean, OpenAI, fal.ai / Google Gemini, Inworld, fal.ai / MiniMax and Modal, each for the single job listed under “Who else sees it” below. OpenAI — or fal.ai / Google Gemini if OpenAI is unavailable — receives the child’s photo only to make the cartoon picture. Inworld receives the child’s first name only inside the line it turns into speech, and fal.ai / MiniMax and Modal receive it only inside the lyrics of a song the parent asked for. None of them may use it for their own marketing.
What the parent can do: See and change children’s names and details in the app, delete cartoon pictures in the app, or delete the whole account in the app or by emailing info@imaginecity.com. You can also email us to see what we hold about your child, correct it, or delete it, and we will keep the process simple.

How we use it

To check your family in and confirm a waiver is on file. To run memberships, parties, events and app rewards you sign up for. To run the app features you choose — storytime, cartoon pictures, songs and the play homes. To send the announcements you turned on, and to decide which families to offer deals to. To answer you when you get in touch. To send you our newsletter, if you asked for it. To understand, in aggregate, which parts of the website people find useful.

We do not sell your information. We do not share it with advertisers. We do not build advertising profiles, and our app does not use an advertising identifier.

The Imagine City app

Some of the app works without signing in: hours, events, check-in, party booking and announcements. The rest — storytime, rewards and deals, cartoon pictures, songs, your waiver, the play homes and the Treasure Box — needs a parent to sign in, and some of it is for members only. Everything the app sends travels over an encrypted (HTTPS) connection, mostly to our own members server at api.imaginecity.com.

Signing in: You enter your email and we email you a one-time code. We keep your email and a record of each phone signed in to your account, because an account can be signed in on two phones at a time. You can see and sign out your phones in the app. The sign-in key is kept in your phone’s secure storage.
Your children’s names and storytime: Storytime reads stories that include your child’s first name. To do that, the line is sent to Inworld, which turns it into speech. If you add how to say a name, that spelling is sent instead so it sounds right. If you add a child’s gender, we keep it with the child’s name on our members server.
Rewards: Members get weekly rewards. Families who are not members get a one-time welcome deal, which unlocks two days after the account first signs in, and we may give a family a one-visit deal by hand. We keep which rewards and deals your family has, and which you have used and where. Once the welcome deal has been used, we keep a coded fingerprint of the email address (not the address itself), even after the account is deleted, so the welcome deal cannot be claimed again.
Announcements: The app asks once, when you first open it, whether you want announcements such as closures, events and deals. Only if you say yes, we store your phone’s push address (a code from Apple or Google, not your phone number), whether it is an iPhone or Android phone, the location you chose and, if you are signed in, which account it belongs to. Once a day our server also sends the phone a silent check that shows nothing on screen; Apple or Google tells us whether it arrived. We use that only to tell whether the app is still installed. We do not record whether you opened an announcement. You can turn announcements off in the More tab or in your phone’s settings; turning them off in the app removes your phone from our list.
How long you have had the app: For each account, Imagine City’s owner can see when it first signed in, when the app was last opened, how many days the family has had the app, whether the app still seems to be installed (from the daily check, which is approximate on iPhone), the number of children, and the deals given and used. We use this to decide which families to offer deals to. It is not shared outside Imagine City.
Cartoon pictures: This is optional. A parent takes or chooses a photo of the child’s face in the app, and it is sent to our members server and then to OpenAI to turn it into a cartoon picture (or to fal.ai / Google Gemini if OpenAI is unavailable). We delete the original photo from our server as soon as the picture is made. We do not use the photo to train AI or to identify anyone. The finished cartoon pictures are kept on our server as described under “How long we keep it”, and you can delete them in the app at any time.
Your waiver: The app can show you your waiver — including the parent’s phone number and the children’s names and birth dates — by fetching it from JotForm when you open it.
Checking in: Checking in from the app sends your email address and which location you are at to the same Wix system the front desk uses, and gets back your waiver and membership status and the names on your waiver. It produces the same check-in record as checking in at the desk.
Booking a party: The booking screen in the app is SimplyBook.me’s own booking page shown inside the app. What you type there, including payment details, goes to SimplyBook.me, not to us.
The play homes (AR): Point the camera at a picture plaque in a play home and the bear characters come to life. This uses Apple ARKit on iPhone and Google Play Services for AR (ARCore) on Android, which run on your phone. Camera images are processed on the phone and are never uploaded to us. If a parent agrees, the bears say the children’s first names: our server asks Inworld to make those lines as audio, and deletes that audio after 24 hours without use, or sooner if you change or remove the child.
The Treasure Box and leaderboard: When members play the treasure hunt, the app tells our server which coins, treasures and objects each child found, at which location and on which day, and we keep that as the child’s Treasure Box, along with the prizes redeemed. The monthly leaderboard for each location shows a child’s first name and coin count to other signed-in members only if the parent turns it on; it is off until you do.
Tanner’s songs: Members can ask for songs that Tanner sings with a child’s name. The song’s lyrics, with the child’s first name (or how you told us to say it), go to fal.ai / MiniMax to make the music and to our singing-voice step on Modal. Songs are kept in your account. Sharing a song makes a link that anyone you send it to can play.
Camera: The app asks for the camera only for cartoon pictures and the play homes, and for notifications only for announcements. It does not record video or sound, and it does not ask for your microphone, contacts or GPS location.
What stays on your phone: Your chosen location (Palmdale, Valencia or Lakewood), your saved events, your announcements choice and the email you last checked in with stay on your phone and are not sent to us on their own (if you turn announcements on, the location goes with your phone’s push address). “Clear saved data” in the More tab removes them, and deleting the app removes them too.
No ads, no tracking: The app has no ads, no analytics or tracking tools, and no advertising identifier.

Who else sees it

We share information with the services we need to run Imagine City, listed below. Each one gets the minimum it needs to do its job, and none of them are allowed to use your information for their own marketing. Each keeps what it receives under its own terms and privacy policy, which we do not control.

Beyond those services, we disclose information only when the law requires it (for example, a court order or subpoena), when it is needed to protect someone’s safety or to defend a legal claim, or with your permission. If Imagine City or one of its locations is ever sold or merged, the information that goes with it would pass to the new owner, who would have to keep honouring this policy or tell you before changing it.

Wix: Holds our member records, waiver lookups, check-in history and newsletter list. Checking in from the app goes through Wix, and Wix sends the one-time sign-in code emails for the app.
JotForm: Runs the liability waiver and the membership signup form. When you view your waiver in the app, it is fetched from JotForm at that moment.
Square: Processes membership payments. Card details go to Square, never to us.
SimplyBook.me: Takes birthday party bookings and deposits, on the website and inside the app’s booking screen.
DigitalOcean: Hosts our members server (api.imaginecity.com), which stores app accounts, children’s names, signed-in phones, rewards, cartoon pictures and generated audio.
OpenAI: Turns the photo you take of your child into a cartoon picture. It receives that photo, may keep it for up to 30 days to check for abuse of its service, and does not use it to train its models.
fal.ai / Google Gemini: A backup image service, used only when OpenAI cannot make the cartoon picture. It receives the same photo through fal.ai, which passes it to Google’s Gemini image model. We tell fal.ai not to store the request and to delete the photo and the picture within an hour.
fal.ai / MiniMax: Makes Tanner’s personalized songs for members. It receives the song’s lyrics, which include your child’s first name (or how you told us to say it), and sends back the music.
Modal: Runs our own singing-voice step, which makes each personalized song sound like Tanner. It receives the song and its lyrics, including your child’s first name, and sends back the finished song.
Expo: Delivers announcements for us, to phones that turned them on. It receives the phone’s push address and the announcement, and passes them to Apple or Google to show on the phone.
Apple Push Notification service and Google Firebase Cloud Messaging: Deliver announcements, and our once-a-day silent check, to iPhones and Android phones, and tell us whether each one was delivered.
Inworld: Turns storytime lines and play-home bear lines into speech. It receives the text of those lines, which includes your child’s first name. Inworld’s terms do not allow it to train its models on that text.
Apple ARKit and Google Play Services for AR (ARCore): Power the play-home AR, ARKit on iPhone and ARCore on Android. Both run on your phone, under Apple’s and Google’s privacy policies. We do not send camera images anywhere.
Google Analytics: Tells us which pages of imaginecity.com people visit, in aggregate. Not used on staff pages, and not used in the app.
Vercel: Hosts and serves imaginecity.com, and keeps short-lived server logs.

How long we keep it

If you ask us to delete something we are required to keep, we will tell you plainly which part we have to hold on to and why, and delete the rest.

Waivers and check-in records: Kept while you are an active family with us and for a period afterwards, because a signed waiver is a legal record we may need to produce.
Membership and payment records: Kept as long as tax and accounting rules require.
Original photos for cartoon pictures: Deleted from our server as soon as the cartoon picture is made.
Cartoon pictures: Kept for 30 days, or for as long as your membership is active, unless you delete them in the app first.
Storytime and play-home audio: Audio made with your child’s name is deleted from our server after 24 hours without use, and when you change or remove the child.
App account, children’s names, signed-in phones and rewards: Kept while your app account is open. A phone you sign out is removed from the list. All of it is erased when you delete your account.
Treasure Box history and songs: Kept while your app account is open. A child’s songs and their share links are deleted when you remove the child or change how their name is said.
Phones with announcements on: Kept until you turn announcements off, or until we have not heard from the phone for 180 days. A phone Apple or Google reports as no longer having the app stops receiving announcements.
The welcome deal fingerprint: Once the welcome deal is used, a coded fingerprint of the email address is kept permanently, so the deal can be used only once per email. It cannot be turned back into the address.
Child photos added at check-in: Kept until you ask us to remove them.
Newsletter addresses: Kept until you unsubscribe.
Website analytics: Expires on Google’s own schedule.
Our service providers: OpenAI keeps photos for up to 30 days to check for abuse of its service, and then deletes them; it does not use them to train its models. When the backup service is used, we tell fal.ai to delete the photo and the finished picture within an hour and not to keep a record of the request; Google processes the photo under fal.ai’s arrangement with it. Inworld does not train its models on the text we send; its terms do not give a retention period, so it keeps that text only as long as its own terms and privacy policy allow.

Deleting your account

You can delete your app account at any time. In the app: Tap the More tab. Under “Your family”, tap “Family & devices”. Scroll down and tap “Delete account”. Tick “I understand this can’t be undone.” and tap “Delete permanently”. If you no longer have the app, email info@imaginecity.com from the address on your account and ask us to delete it; we will finish within 30 days. Full details are at imaginecity.com/delete-account.

Deleting your account permanently erases, from our members server, your account, your children’s names, cartoon pictures and photos, your signed-in phones, your rewards and deals, your children’s coins, Treasure Box and prizes, their songs and share links, and any audio made with your children’s names. If the phone has announcements on, it keeps getting announcements for everyone but is no longer linked to your account; turn them off in the More tab to remove the phone too. If you used the welcome deal, the coded fingerprint described above is kept.

It does not cancel a membership, a party booking or a waiver. It also does not delete records kept by Wix (such as check-in history and the waiver copy used for check-in), Square or JotForm, or what our service providers keep under their own terms. Ask us if you want any of those handled too, and we will tell you what we can delete and what we have to keep.

Your choices

Email info@imaginecity.com and tell us what you want. You can ask for a copy of what we hold, ask us to correct something, ask us to delete it, or ask us to stop emailing you. To protect your family, we may ask you to send the request from the email address on your account, or confirm it in another way, before we act on it. We will confirm we received your request and reply within 30 days.

We will not treat you differently for asking. You will not lose your membership, your booking or your place in the city.

California privacy law gives residents rights to know what a business collects, to have it deleted or corrected, and not to be treated differently for asking. Whether or not that law applies to a business of our size, we offer these same rights to every family, in California or not. We do not sell or share personal information as those terms are defined in California law. Use the same email address and we will handle it.

You can also turn off analytics cookies in your browser, and turn off the app’s camera access in your phone’s settings, at any time. Our website does not change its behaviour when a browser sends a “Do Not Track” signal, because there is no common standard for it; blocking cookies in your browser is the way to turn off website analytics. The app has no analytics at all.

Keeping it safe

Everything travels over an encrypted connection. Payment card details are handled by Square and SimplyBook.me and never reach our systems. The app keeps its sign-in key in your phone’s secure storage. Staff tools are kept separate from the pages families use, and staff pages are excluded from analytics.

No system is perfect, and we cannot guarantee that information will never be accessed without permission. If a security incident affects your information, we will notify you as the law requires.

Changes to this policy

We may update this policy from time to time. When we do, we will update this page and change the date at the top. If a change is significant, especially anything about children’s information, we will say so clearly on this page and show a notice in the app rather than quietly editing the text, and we will ask parents for consent again where the law requires it.