Organizers and their staff who create accounts; participants (campers, parents/guardians, volunteers, staff) whose information an organizer enters or who sign up; and viewers who open a public camp link.
Account information — organizer name, email, and password (stored only as a salted hash). Payments are processed by Stripe; CampHQ never sees full card numbers.
Camp information entered by organizers or participants — name, email or phone, grade, gender, bunkmate requests, and bus/cabin/team/group assignments.
Health & emergency information (if the organizer enables it) — allergies, medications, dietary needs, and emergency contacts. We treat this as sensitive and use it only to run that camp.
Photos — organizers may upload photos or link an external shared album they host. Technical data — standard logs used to operate and secure the service. We do not sell personal information or use it for advertising.
To provide and secure the service for the organizer's camp, authenticate users, enforce access permissions, process the organizer's payment, send service messages, and comply with law.
CampHQ is not directed to children for our own data collection, and children do not transact with us. An organizer who enters a child's information represents that they have obtained any required verifiable parental consent. Where an organizer is a school or acts for one, camp information may be an education record under FERPA and CampHQ acts as a "school official," using the data only to provide the service. We do not use children's information to build profiles, advertise, or sell. Parents may contact their organizer to review, correct, or delete a child's information, and we will assist.
Only as needed to run the service: with the organizer and users they authorize; with service providers under contract (Supabase for database/auth/hosting, Stripe for payments, and our email provider); for legal reasons; or in a business transfer subject to this policy. We do not sell personal information.
Published camps stay live for their window and are then archived and scheduled for deletion. Organizers can delete a camp, a participant record, or their account at any time; limited billing records are kept as required by law.
Encryption in transit, hashed passwords, and server-enforced access controls (row-level security) so each user only reaches data they're permitted to see. No system is perfectly secure.
Participants should direct access, correction, or deletion requests to their organizer, who we will assist. Organizers can manage account data in-app or contact us. To exercise rights directly, email us below.
CampHQ — privacy@camphq.app