Disney+
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Disney collects viewing, device, and location data for ads and personalization; you can opt out of sale/share and cancel plans.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, what you watch, device IDs, location, and sometimes park cameras and call recordings.
Read the exact line
Privacy policy
“Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties”
Training
They use your data to run the service, personalize, send offers, and show targeted ads.
Read the exact line
Privacy policy
“Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites and applications;”
Sharing
Disney companies, service providers, ad partners, and others you choose can get your data.
Read the exact line
Privacy policy
“When we provide you with relevant advertising on third-party sites and applications, we may share limited personal information about you, such as certain identifiers or hashed email address, with third parties.”
Kept
They keep personal information as long as they need it for the listed purposes, unless law requires longer.
Read the exact line
Privacy policy
“We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.”
Controls
You can use MyDisney, a rights portal, and Do Not Sell or Share links in footers or app settings.
Read the exact line
Privacy policy
“Click on “Do Not Sell or Share My Personal Information”, “Your Privacy Controls”, “Manage Your Cookies Settings”, “Modify Your Cookie Preferences” or “Manage (Privacy) Preferences” in our website footers or application settings, where available, to make or update your election.”
Fine print
They say they will notice you of material policy changes; plans auto-renew and some offers have no partial refunds.
Read the exact line
Privacy policy
“We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off sale, sharing, and cookie tracking
Website footers or application settings: “Do Not Sell or Share My Personal Information”, “Your Privacy Controls”, or “Manage Your Cookies Settings”
Delete or update your registration account
MyDisney account
Request access or deletion of personal information
Portal linked from the privacy policy
Change email and offer preferences
Privacy Choices at my.disney.com (Hulu: Hulu Account Page → Privacy and Settings → Manage Email Notifications)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can collect where you are, including a precise location from your phone, not just your country.
Read the exact line
Privacy policy
“Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties”
For example, opening the Disney+ app on your phone could send a more exact location than you need just to stream a movie.
They build ads from what you do on Disney sites and on other companies’ sites and apps.
Read the exact line
Privacy policy
“Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites and applications;”
For example, a show you watch on Disney+ could be used to pick ads you see elsewhere.
They can send identifiers or a hashed email to other companies so ads can follow you.
Read the exact line
Privacy policy
“When we provide you with relevant advertising on third-party sites and applications, we may share limited personal information about you, such as certain identifiers or hashed email address, with third parties.”
For example, an ad network could match your hashed email to show you a Disney-related ad on another app.
Park and store cameras can capture you, and guest-service calls can be recorded.
Read the exact line
Privacy policy
“Still or video images captured by cameras or readers on or around our physical properties; and Call recordings when you call our reservation centers or other guest services phone numbers.”
For example, a call about your Disney+ bill could be recorded and kept with your guest file.
Some paid offers auto-renew and you do not get money back for unused days in a month.
Read the exact line
Terms of service
“No refunds or credits for partial months. New and eligible returning subscribers only, 18+ only;”
For example, if you cancel mid-month on that Live TV offer, you still pay for the rest of the month.
Other Disney companies can use your information for their own purposes when the law allows.
Read the exact line
Privacy policy
“Other members of The Walt Disney Family of Companies may access your information where they perform services on behalf of the (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as )”
For example, watching on Disney+ could help another Disney brand send you offers.
They do not give a clear delete-by date; they keep data as long as they say they need it.
Read the exact line
Privacy policy
“We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.”
For example, old viewing history could stay after you stop using the app if they still use it for those purposes.
You can turn off some sale, share, and cookie tracking in the site footer or app settings.
Read the exact line
Privacy policy
“Click on “Do Not Sell or Share My Personal Information”, “Your Privacy Controls”, “Manage Your Cookies Settings”, “Modify Your Cookie Preferences” or “Manage (Privacy) Preferences” in our website footers or application settings, where available, to make or update your election.”
For example, you can open Disney+ settings or the website footer and choose Do Not Sell or Share.
They say they use security measures, but they also say no system is perfect.
Read the exact line
Privacy policy
“We have implemented technical, administrative, and physical security measures that are designed to protect guest information from unauthorized access, disclosure, use, and modification.”
For example, they claim they try to stop outsiders from reading your account data.
They describe extra steps and parental consent when they mean to collect kids’ information.
Read the exact line
Privacy policy
“When we intend to collect personal information from children, we take additional steps to protect children’s privacy, including:”
For example, a child-directed feature may need a parent to agree before an account is created.
Words to know
Legal words from the lines above, in plain English.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- data controller
- The company that decides why and how your data is used, and is responsible for it under privacy law. For example, the app maker is the controller; the cloud company storing files for it is only a processor.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade D · score 35/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
What does the app collect beyond what it needs to work?
They collect account and payment details plus viewing activity, device IDs, precise location, park camera images, and call recordings. That goes beyond what streaming needs.
Does it record your voice, face or body, and what happens to that?
They record guest-service calls and capture still or video images at physical properties, and they collect info given by voice commands. The policy does not say this is deleted right after a session.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use your activity for targeted ads on their sites and on third-party sites, and they share identifiers or hashed email with third parties for ads.
Do they sell or share your data, and can you opt out?
They share with Disney companies, service providers, ad partners, and companies you pick. US residents can opt out of sale or sharing in footers or app settings.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the listed purposes. You can ask to delete through the Data Subject Rights Portal or delete a registration account in MyDisney; no 30-day in-app wipe is described.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe technical, administrative, and physical security measures in general terms and say no measure is perfect.
Is there a real age gate, and are teens protected?
Some features are age-gated and they describe parental consent for children. Bundle marketing says 18+; the policy does not describe strong age checks for Disney+ itself.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated and they say they will notice you of material changes, but how long they keep data stays vague.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Marketing pages say plans auto-renew, you can cancel anytime effective at period end, and some offers give no refunds or credits for partial months.
The privacy policy is 3,285 words at a college graduate level (Flesch reading ease 31.4); the terms are 4,823 words at a fairly hard level.
