Privacy Policy
Effective date: October 14, 2026
1. About this policy
This Privacy Policy explains what personal information Magooapp LLC ("Magoo," "we," "us" or "our") collects, how we use and share it, and the choices you have. It applies to magoo.app, magoo.me links, our mobile apps, our augmented reality viewer and every related feature (together, the "Service").
The short version:
- You need a mobile phone number or an email address to create an account. We verify it with a one-time code.
- We store the images, videos and other content you upload so that we can show your Magoos.
- A Private Magoo can be opened by anyone who has its link, QR code or tag. Private means unlisted, not confidential.
- We do not sell your personal information for money. We do use analytics and advertising cookies, which you can block in your browser.
- We do not use face recognition.
- You can ask us to delete your account and content at any time.
- If your business applies to Magoo for business, we collect information about your shop and its contact person, and we use it only to run the program with you.
By using the Service you also agree to our Terms of Service.
2. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Mobile phone number or email address, password (stored in hashed form), username, display name, profile photo and country code. If you sign in with Google or Apple, the name and email address that provider gives us. | You, or your sign-in provider |
| Magoo for business applications | Shop name, link to the shop and where it sells; what it sells, whether its products are personalized, how many orders it receives a month and whether it puts a thank-you card in its packages; the contact person's name, email address, phone number and country; an image of the shop's thank-you card and, if the shop chooses, its own video or audio message (applications sent earlier also included the shop's logo and artwork files); links to the shop's reviews page, social media profiles and website; anything written in the notes field; and the IP address the application was sent from | The person who fills in the application |
| Content | Target images, videos, audio, images, 3D models, YouTube links, button labels and links, Magoo names, comments, likes and reveals (recordings of a Magoo). Files may carry embedded metadata such as the date or the device used. | You |
| Camera and microphone | Camera images used to track a Target and to search for Magoos; audio and video you record in the Service | Your device, only after you grant permission |
| Purchases | Purchase date, amount, product and payment status. Stripe handles your card details. We never receive or store your full card number. If you order a physical product, your name, email address, phone number, and shipping and billing addresses. | You and Stripe |
| Usage and device | IP address, approximate location inferred from it, device and browser type, operating system, language, pages and Magoos viewed, scans, referring page and campaign tags, dates and times, error logs | Your device, automatically |
| Cookies and similar technologies | Identifiers stored in your browser. See Section 5. | Your device, automatically |
| Communications | Messages you send us and our replies | You |
| From others | Content another user uploads that shows or mentions you; reports other people send us about content; campaign and audience information from advertising partners | Other users and partners |
Camera processing. Augmented reality tracking runs on your device. When you use the camera to search for a Magoo, images from your camera are sent to our servers and passed to our image recognition provider so that they can be compared with Targets. We use those images to find a match and we do not store them.
Magoo for business. A business that sells online or in person (for example on Etsy, Amazon or its own website) can apply at magoo.app/business to put Magoo cards in its orders. We use the application to review the shop. The files it uploads are kept in private storage that only our team can open, except for what we use to build its thank-you Magoo (see Sections 3 and 4). If an application cannot be sent because a field needs correcting, we keep the files that passed our checks so that the person does not have to choose them again. If the person who applies is signed in, the application is linked to their account right away.
When an application is sent, we compare its thank-you card with the cards of shops we have already approved and of applications we are still reviewing. If it looks like an approved shop's card, we show the person applying a picture of that card and the link to its thank-you Magoo. If it looks like the card of an application still in review, we only tell them that another shop applied with a similar card, without showing it or saying which shop. Either way, they can choose whether to use the same card, and we keep a record of which shop's card it looked like.
We email the contact person when we receive the application and when we approve it. These emails come from partners@magoo.app.
If we approve a shop, we give its contact person a link to activate the shop's account. The link expires after 7 days and works once. It asks for a one-time code, which we send by text message only to the phone number in the application. If an account already uses that phone number, the shop is added to that account. If not, we create an account with the phone number, country and contact name from the application, and ask the contact person to choose a password.
If you give us information about another person, such as an employee who is the shop's contact, you confirm that you are allowed to share it with us and that you have told that person about this policy.
Location. The Service does not ask for your device's precise location. We may infer an approximate location, such as your country, from your IP address or the country code of your phone number.
Sensitive information. We do not ask for sensitive information such as health data, government identifiers or financial account numbers. Please do not include it in your content.
3. How we use information
We use the information described above to:
- create and secure your account and verify your phone number or email;
- store, process and display your Magoos according to the visibility you choose;
- recognize Targets and run the augmented reality experience;
- process payments, credits, orders and promotions;
- detect, investigate and prevent fraud, abuse, spam and violations of our Terms, including abuse of text message verification;
- review content, including content submitted to our Experiences feed;
- send you verification codes, security notices and service messages, and answer your requests;
- understand how the Service is used, fix problems and build new features;
- measure and improve our advertising, and show our ads to people who may be interested in Magoo;
- review applications to Magoo for business, check that the shop exists and is selling, and decide whether to approve it;
- set up an approved shop's account, build its thank-you Magoo from its thank-you card, its links and its video or audio message if it sent one, and give it the QR code that opens that Magoo;
- give an approved shop a set of transfer cards: Magoos with a generic message, each with its own link and QR code, that the first person to scan one can claim and replace with their own message;
- show a shop, in its panel, its thank-you Magoo, its links, how many times that Magoo has been opened (which includes openings by the shop itself), and how many of its transfer cards are available and which have been claimed;
- communicate with a shop about its application, its account, its cards and its use of Magoo for business;
- comply with the law and enforce our rights; and
- do anything else you ask us to do or agree to.
Contact details of a business. We use the email address and phone number in an application only for communications between Magoo and the shop about Magoo for business. We do not use them for unrelated marketing. We send text messages to that phone number only to deliver one-time codes.
We may also create aggregated or de-identified information that no longer identifies you, and use it for any purpose.
Legal bases. Where the law requires a legal basis, we rely on the contract with you (to provide the Service), our legitimate interests (security, improvement, measurement and advertising), your consent (camera and microphone access, marketing messages) and our legal obligations.
4. How we share information
Service providers. We share information with companies that help us run the Service. They may use it only to provide their services to us.
| Provider | What it does for us | What it receives |
|---|---|---|
| Stripe | Payment processing | Payment details, purchase information |
| Twilio | Text message and email delivery | Phone number or email address, message content |
| DigitalOcean | Hosting and file storage | Account information and content |
| Google (Tag Manager, Analytics) | Site measurement | Usage and device information, cookie identifiers |
| Google (reCAPTCHA) | Protection against automated abuse | IP address, device and browser information |
| Google (Firebase Authentication) | Sign-in with Google or Apple | The sign-in request and the account you choose |
| Meta (Pixel) | Advertising measurement and audiences | Events such as page views, registrations and purchases, with device and cookie identifiers |
| PTC (Vuforia) | Image recognition | Target images and camera images used for search |
| Printful | Printing and shipping of physical products | Name, shipping address and order details, only if you order a physical product |
YouTube. When a Magoo plays a YouTube video, the video loads from YouTube. YouTube receives your IP address and may set its own cookies under the Google Privacy Policy.
Other users and the public. Your username, profile photo and Magoos are visible to other people according to the visibility you choose. See Section 6.
Magoo for business. A shop's thank-you Magoo shows the shop's name, its thank-you card, buttons to the links it gave us, and either our standard thank-you video or the shop's own video or audio message. It is a Private Magoo (see Section 6): it is not listed on Magoo, and anyone who has the card can open it by pointing a camera at it, or with its QR code or its link. To make that possible we send a copy of the thank-you card to our image recognition provider. A transfer card is also a Private Magoo, but it can only be opened with its QR code or its link, not by pointing a camera at it. Once someone claims a transfer card, that Magoo belongs to their account and its message is their content. The shop can see that the card was claimed, but not who claimed it or what message they recorded. If someone applies with a thank-you card that looks like an approved shop's card, we show them that shop's card and the link to its thank-you Magoo (see Section 2). We do not share the rest of an application, or the shop's artwork files, outside Magoo except with the service providers listed above.
Advertising partners. Our use of the Meta Pixel and similar tools may be considered a "sale," "sharing" or "targeted advertising" under some U.S. state laws, even though no money changes hands. Section 5 explains your choices.
Legal and safety reasons. We may disclose information if we believe in good faith that it is needed to comply with a law, court order or lawful government request, to enforce our Terms, or to protect the rights, property or safety of Magoo, our users or the public.
Business transfers. If Magoo is involved in a merger, financing, acquisition, reorganization or sale of assets, information may be transferred as part of that transaction.
With your consent. We share information in other ways when you ask us to or agree to it.
We do not sell your personal information for money.
5. Cookies and similar technologies
We and our providers use cookies, pixels and local storage for three purposes:
- Essential: to keep you signed in, remember your settings and protect the Service.
- Analytics: to count visits and see how the Service is used.
- Advertising: to measure our ads and to show Magoo ads to you on other platforms.
Your choices. The Service does not currently offer its own cookie settings. You can block or delete cookies in your browser, though parts of the Service may then stop working. You can also limit ad personalization in your Meta and Google account settings. We do not currently respond to "Do Not Track" or Global Privacy Control signals.
6. Draft, Private and Public Magoos
Who can see a Magoo depends on its visibility:
| Visibility | Who can open it |
|---|---|
| Draft | Only you |
| Private | Anyone who has the link, QR code or NFC tag, and anyone who saved it |
| Public | Anyone, including people who point a camera at the Target or browse our Experiences feed |
A Private Magoo is not confidential. People you share it with can forward the link, show the QR code to others or record the Magoo. Do not put anything in a Magoo that you would not want those people to pass on.
Your username, profile photo, and view, like and comment counts are shown with your Public Magoos. If you delete a Magoo, we cannot recall copies or recordings that other people already made.
7. People who appear in Magoos
The person who uploads a Magoo is responsible for having permission from everyone who appears in it. If you appear in a Magoo and did not agree to it, write to team@magooapp.com with the link. We will review it and remove it where appropriate.
No face recognition. Our image recognition matches Targets, which are pictures of objects and printed images. We do not use it to identify people, and we do not create face or voice templates. If a Target is a photograph that shows a person, it is matched as a picture, like any other Target.
8. How long we keep information
We keep information for as long as we need it for the purposes in this policy.
| Information | How long we keep it |
|---|---|
| Account and content | Until you delete it or your account is closed |
| Magoo for business applications and their files | Until the shop or its contact person asks us to delete them, including applications we do not approve and files kept from an application that was never sent. A shop's thank-you Magoo is kept like any other content. |
| Inactive accounts | We may delete an account and its content after 24 months without activity |
| Deleted content | A deleted Magoo stops being available right away. Its files may remain in our storage and backups for a limited time, and we remove them sooner if you ask. |
| Purchase records | Up to 7 years, for tax and accounting |
| Usage and security logs | For a limited period, unless we need them longer to investigate a problem |
We may keep information longer when the law requires it, to resolve disputes, or to investigate abuse. This includes content we removed for violating our Terms.
9. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit and access controls. No system is completely secure, and we cannot guarantee the security of your information.
Your phone number or email is the key to your account. Protect your phone, your SIM and your email account, and tell us right away at team@magooapp.com if you lose control of them or suspect unauthorized access.
10. Your choices and rights
In the Service. You can edit your profile, change the visibility of a Magoo and delete a Magoo. To delete your account, write to us. You can turn camera and microphone access on or off in your device or browser settings.
Magoo for business. A shop can change its links from its panel, and the buttons on its thank-you Magoo change with them. To change any other part of an application, or to delete an application and its files, write to partners@magoo.app. The contact person of a shop has the rights described in this section for their own information.
Text messages. Verification codes and security notices are part of the Service and you cannot opt out of them while you have an account. If you ever agree to marketing texts, you can stop them by replying STOP.
Privacy rights. Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy of it;
- correct information that is wrong;
- delete your information;
- receive your information in a portable format;
- object to or restrict certain uses, and withdraw consent you gave;
- opt out of targeted advertising and of the sale or sharing of your information; and
- not be treated differently for using these rights.
How to make a request. Write to team@magooapp.com from the email you want us to answer, and include the phone number or email on your account. We will confirm your identity through it. We answer within the time the law requires, normally 30 to 45 days. An authorized agent may make a request for you with your written permission. If we decline your request, you may appeal by replying to our decision, and you may complain to your local data protection or consumer protection authority.
California residents. Sections 2, 3 and 4 list the categories of personal information we collect, why we collect them and who we disclose them to. We have collected and disclosed those categories in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
11. International users
We operate the Service from the United States. Your information is processed in the United States and in other countries where our providers operate. Those countries may have data protection laws that differ from the laws where you live. Where the law requires it, we use safeguards such as standard contractual clauses for these transfers.
12. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 created an account, we will delete it. If you believe a child gave us information, write to team@magooapp.com.
People between 13 and 17 may use the Service only with the permission of a parent or guardian. An adult who uploads content that shows a child is responsible for having the permission of that child's parent or guardian.
13. Changes to this policy
We may update this policy. If a change is material, we will give notice in the Service, by text message or by email before it takes effect. The date at the top shows when the policy was last updated.
14. Contact us
Magooapp LLC, 2415 57th St SE, Auburn, WA 98092, USA. Email: team@magooapp.com.
