Effective date: FWZ 2.0 notice dated 1 October 2026
The controller is Kai Muckenheim, sole proprietor trading as KMC.Studio, c/o Postflex #9192, Emsdettener Str. 10, 48268 Greven, Germany. Phone: +49 (0) 15569154257. Email for privacy requests: kai@kmc.studio. Packages and parcels cannot be delivered to this address.
This notice covers version 2.0 of the “FWZ - Theme Park Wait Times” (FWZ) iOS/iPadOS app, including its widgets and Apple Watch app. It also explains the optional connection to KMC.Studio-ID. You can view parks and wait times without a KMC.Studio-ID. The separate account portal and API have an additional KMC.Studio-ID privacy notice.
FWZ stores park and attraction favorites, app preferences, notification rules, Smart Updates patterns, and cached park and wait-time data locally, among other information. A manually selected region is saved with its name and coordinates on the device. Unconfirmed support and feedback requests may remain as local drafts with a reply address and an optionally selected image. Widgets use shared app storage; the Apple Watch can retain park and favorite data and changes not yet transferred.
If you allow location access, FWZ uses your device location to find nearby parks and calculate distances. You can change this permission in iOS Settings and view parks without granting location access. Location coordinates are not part of the preferences synchronized through KMC.Studio-ID or iCloud. The app uses Apple's network-based geocoding for place names and Apple Maps search for manual location search. It displays maps with MapKit. Depending on the feature, location or search information may be sent to Apple. See Apple's privacy policy and Apple Maps & Privacy for Apple's processing.
Depending on the feature, the app, widgets and Apple Watch make direct HTTPS requests to Queue Times and Wartezeiten.APP for park catalogs, attractions and wait times. Detail requests include a park identifier; catalog requests do not necessarily include one. Requests to Wartezeiten.APP also carry a language code and app identifier. The service contacted receives connection data needed for the request, including your public IP address. The providers' privacy notices explain their own processing; advertising on their websites does not mean FWZ embeds their advertising scripts.
With a KMC.Studio-ID, you can enable synchronization of favorites and supported app preferences separately. Identifiers of favorite parks and attractions, and the enabled preference values, are then associated with your KMC.Studio account and processed through api.kmc.studio. For preferences, you may instead use Apple's iCloud key-value store, even without a KMC.Studio-ID. Favorites are not synchronized through iCloud. Only one service handles preferences at a time.
Supported preference values cover appearance, language, map and list display. The eight accessibility preferences, including color-vision mode, contrast and voice-control options, remain on the device and are not synchronized through KMC.Studio-ID or iCloud in version 2.0. Location, device permissions, notification rules, Smart Updates, sign-in tokens, purchases and access rights are also excluded from the sync document. The provider choice applies only to this device and is not itself synchronized. Switching providers or turning sync off does not automatically erase local or cloud data. KMC synchronization data is included in account export and removed under the KMC account-deletion rules. Deleting a KMC account does not remove iCloud preferences. Apple describes its iCloud key-value store and iCloud privacy practices.
You can create a KMC.Studio-ID using Sign in with Apple or a verified email address and password. This involves your sign-in identifier and the data needed for authentication, sessions and account security. A display name is optional. The separate KMC.Studio-ID notice explains account data, hosting, retention, export and deletion.
The planned FWZ 2.0 release keeps anonymous park features available to all ages. Before optional FWZ account, newsletter and support services, the person acting expressly declares that they are at least 18. KMC.Studio records the version and time of this self-declaration for an FWZ account; when a support connection is enabled or a support request is sent without an account, the declaration is documented for that action. No date of birth or identity document is requested for this step. A self-declaration does not independently verify age. Under the operator's decision of 1 October 2026, older FWZ versions will temporarily retain their existing optional paths without this new declaration.
If you use KMC Credits, rewards, gifts or referrals, KMC.Studio processes the account associations, ledger entries, statuses and dates needed for those features. While an accepted referral is active, FWZ may confirm app use on distinct calendar days. It does not send visited parks or location for that referral. Sharing or opening a link alone does not earn credits.
A newsletter is sent only after separate sign-up and email confirmation. KMC.Studio processes your email address, the sign-up and confirmation records, and subscription status. If a one-time Credit bonus is offered for a confirmed sign-up, KMC.Studio also processes whether it was granted. A secret check value derived from the email address remains after account deletion to prevent repeated bonus grants. You can unsubscribe through the newsletter or your account. See the KMC.Studio-ID newsletter notice.
Optional FWZ+ subscriptions and one-time purchases are processed through Apple's App Store. Available products, prices, terms and any trials are shown before purchase. Apple handles payment; FWZ does not receive full payment details. The app checks verified StoreKit transactions to provide access.
If you are signed in with a KMC.Studio-ID when buying a supported FWZ+ entitlement product, the purchase flow associates the account ID. Verified transactions are transmitted to KMC.Studio at purchase and during later entitlement checks when they match the signed-in account. KMC.Studio processes the product identifier, validity, status and protected purchase references. Separate tip purchases do not use this KMC association path. See the KMC.Studio-ID notice.
Return offer from FWZ 2.1.1: To check and redeem the optional FWZ+ return offer, the app sends an Apple-signed app transaction to api.kmc.studio. Our server checks the associated purchase and renewal history with Apple, including paid periods, cancellation, refunds and prior offer redemption. No KMC.Studio-ID is required. Raw transactions, full Apple identifiers and offer signatures are not retained in the offer database. A cryptographically derived association value with reservation and redemption timestamps is retained while this one-time offer is provided and its one-time use is checked. Sandbox test redemptions are kept separate from real purchases.
Apple App Attest protects this offer flow against modified and replayed requests. The device-specific private key remains in the device storage protected by App Attest; the app stores only its identifier in the local Keychain, without iCloud synchronization. Our server stores the derived key association value, public verification key, an increasing verification counter and the last-use timestamp for the duration of this offer service. One-time challenges are valid for two minutes; they are removed after successful use, and expired challenges are removed on the next challenge request. This processing serves offer fulfilment and abuse prevention, not advertising or cross-company tracking. For details of Apple’s processing, see Apple’s privacy policy.
FWZ generates a random Support ID for this app installation. The associated secret is held in the device Keychain without synchronization. For a contact report or protected removal of the installation record, the app sends the ID and secret to KMC.Studio over HTTPS; the server code reviewed stores a SHA-256 verification value for the secret, not its original form. In the planned 2.0 path, the support connection starts disabled. Installations that previously had reporting enabled are paused on upgrade without a new automatic report; their existing server records and support notes are not automatically deleted. You can view the ID and status under “More → Help → Support ID,” disable an active connection without an adult declaration, and explicitly request deletion of a paused old record and its support notes. If offline, the deletion request remains pending for retry. Enabling or reconnecting asks for the declaration described in section 5. Once enabled, the app contacts the service on launch or return to the foreground if at least twelve hours have passed since a successful contact or the app/device metadata has changed. You may also reconnect manually.
The contact transmits the random ID, app version and build, iOS version and general device type. KMC.Studio records the first and last contact. The separate installation record has no KMC account ID, location or personal device name. A voluntary support request may, however, include both the ID and reply address. On opt-out, the app attempts to remove the server entry; if offline, removal remains pending for a later connection. The regular server cleanup removes the installation record and associated support notes after 180 days without contact. Backups may remain under the KMC.Studio-ID notice.
If you send support or feedback from the app, your message, topic, reply address, an optionally selected image (such as a screenshot), technical app/device details and, if available, the Support ID go to KMC.Studio. No account is required. The app regenerates the selected image as a reduced JPEG. An unconfirmed draft remains local. After the server accepts the request, it is forwarded to the support mailbox. The KMC server holds the message encrypted until mail-service handoff and then removes it from its delivery queue; failed entries and technical receipts expire within 30 days. Under the operator's adopted retention policy, ordinary technical support messages are deleted from the mailbox six months after the request is closed. Where a message is subject to a separate statutory retention duty, for example as a tax-relevant record or a business letter that must be retained, the applicable statutory period applies. Messages are not automatically forwarded to another mailbox or service. See the KMC.Studio-ID app-contact details. Do not send passwords or sign-in tokens.
Alternatively, the app can open your email program for a support request. In that case, sending is handled through your email program and its provider.
Depending on the feature, recipients or service providers include Apple (maps, geocoding, iCloud and the App Store), Queue Times, Wartezeiten.APP, and KMC.Studio with its hosting and email providers. The KMC server is hosted by netcup in Germany. iCloud Mail is used to send and receive support messages. The operator confirmed the mailbox retention policy and absence of automatic forwarding on 1 October 2026. Retention periods published for KMC.Studio apply to the relevant KMC data categories, not automatically to every app request or the two wait-time providers.
Local favorites and settings remain until you change or remove the corresponding app data. Data in iCloud, on a paired Apple Watch or in device backups may remain independently after app removal. KMC account data follows the account service's export and deletion rules. The 180-day period without contact applies to the Support ID; the delivery queue and technical contact receipts have the period described above. External data providers have their own privacy notices.
FWZ version 2.0 contains no AdMob, Unity Ads or Firebase advertising SDK. It uses no advertising identifier for cross-app tracking and embeds no advertising network in the app. FWZ+ offers shown in the app are first-party content, not third-party ads.
Processing for the park, account, synchronization and purchase features you request serves to provide those features. Technical connection and security data help keep the services available and prevent abuse. An optionally enabled Support ID connection can identify the installation for a later request; after being enabled, it reports even without a current support request. The adult declaration is intended to limit optional FWZ services under the chosen age approach; it does not prove actual age. Voluntarily submitted contact data is used to handle your message. Newsletter data serves the confirmed newsletter and, if a one-time Credit bonus is offered, its award and the prevention of repeated claims. The KMC.Studio-ID notice explains the legal bases for that separate account service.
You can use park information and the available app features without a KMC.Studio-ID or location permission. Current wait times require network requests to the named data providers; without a connection, only data already held on the device may remain available. An account, synchronization, FWZ+ purchases, newsletter and support contact are optional features. Without an adult declaration, the intended FWZ account, newsletter and support paths in version 2.0 remain unavailable; park information and existing valid StoreKit entitlements remain accessible. To reply to a support request we need a reachable reply address; an image is optional. The new support connection reports only after being explicitly enabled.
Subject to legal conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent for the future. You may lodge a complaint with a data protection supervisory authority. Contact the controller using the confirmed details in section 1. You can export or delete your KMC.Studio-ID; account deletion does not cancel an App Store subscription or remove iCloud preferences.
For the technically necessary delivery of public park information you request and secure connections, we rely on Article 6(1)(f) GDPR. Our interest is a reliable information service without advertising or usage profiles. Data sent for this purpose is limited to the required request, with particular attention to children's rights and interests. The independent providers' own notices govern their separate services and logs.
The account, synchronization, Credit/Reward and purchase features you select rely on Article 6(1)(b) GDPR where processing is necessary to deliver the expressly requested service. Technically necessary local preferences, session keys and requested feature settings are stored under section 25(2)(2) of the German TDDDG. This does not permit advertising or unnecessary collection.
For optional location access and the separately enabled Support ID connection, we rely on purpose-specific consent under Article 6(1)(a) GDPR. You can turn off location access in iOS and the support connection in the app at any time for the future. An iOS permission or acknowledgement of this notice is not consent to other purposes. Children should discuss optional transmissions with their legal representative; applicable representation requirements for consent-based services must be respected.
Newsletters require separate confirmed consent under Article 6(1)(a) GDPR and section 7 UWG and can be unsubscribed at any time. The limited adult self-declaration record, technical security events and secret email check value preventing repeat bonus claims rely on Article 6(1)(f) GDPR. Our interests are applying optional-service access rules, preventing abuse and duplicate bonuses. A self-declaration proves neither age nor parental authority.
Account- or contract-related support relies on Article 6(1)(b) GDPR; general voluntary requests rely on Article 6(1)(f), with the interest of responding to your question. Statutory privacy requests rely on Article 6(1)(c) with Articles 12–22 GDPR. Records subject to a statutory retention duty are retained only under that specific obligation; this does not extend ordinary support-email retention generally.
The declaration linked to an account remains until account deletion. On a support installation it follows deletion of that record, including regular cleanup after 180 days without contact. A single contact request's technical record has the 30-day period above. A declaration included in a delivered email then follows mailbox retention. Sign-in attempts and newsletter records have the separate KMC.Studio-ID periods.
None of this information is legally required to download the app. Without network requests, current external wait times are unavailable; without location, only location-dependent nearby features are restricted. Without information needed for an account, newsletter, purchase or reply, only that optional service cannot be delivered. Favorites and preferences remain local without synchronization. Please use FWZ 2.0 account, newsletter and support features as an adult acting person; anonymous park features are available to all age groups, including children.
Our account server is hosted by netcup in Germany. Apple, Queue Times and Wartezeiten.APP process connections addressed to their services under their own notices. Processing may occur outside the European Economic Area. Apple's current privacy policy describes adequacy decisions or standard contractual clauses depending on service and country and how to request further information. For the park-data providers, see the notices linked in section 3; we do not invent an API log-retention period they have not published.
FWZ 2.0 does not use cross-app advertising tracking. Credits and Reward durations are calculated automatically under the stated conditions. An unusual invitation may be held for human review, rather than a final automated abuse finding. You can request human review of a disputed booking or decision at kai@kmc.studio. Exercising your rights does not require enabling the support connection or subscribing to a newsletter. You may complain, for example, to the North Rhine-Westphalia data protection authority: https://www.ldi.nrw.de/datenschutz/ihre-rechte/beschwerde.