Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use our Service, and information from third-party sources.

1.1 Information You Provide

• Account Information: Name, email address, phone number, password (encrypted), profile picture, and role (camper, organizer, or admin)
• Organization Information: Organization name, description, logo, website, location, and contact details
• Camp Information: Camp details, dates, locations, activities, schedules, and related content
• Registration Information: Camp registration details, ticket purchases, payment information, and attendance records
• Medical Information: Medical conditions, allergies, medications, dietary restrictions, and emergency contact information (collected with explicit consent)
• Communication Data: Messages, feedback, complaints, and other communications sent through our platform
• Payment Information: Payment method details, transaction history, and billing information (processed securely through third-party payment processors)

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on pages, click patterns, and navigation paths
• Device Information: IP address, browser type and version, device type, operating system, and unique device identifiers
• Location Data: General location information based on IP address or GPS (when permitted)
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and analyze usage patterns

1.3 Information from Third Parties

• Google OAuth: When you sign in with Google, we receive your name, email address, and profile picture
• Payment Processors: Payment confirmation and transaction details from Paystack
• Email Service Providers: Email delivery status and engagement metrics from SendGrid

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our group gathering platform and services
• User Accounts: To create and manage user accounts, authenticate users, and provide access to features
• Event Management: To facilitate registrations, manage attendees, process payments, and coordinate activities
• Communication: To send notifications, updates, announcements, and respond to your inquiries
• Safety and Security: To ensure the safety of campers, including sharing medical information with authorized camp staff when necessary
• Payment Processing: To process payments, manage transactions, and handle refunds
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Analytics and Improvement: To analyze usage patterns, improve our services, and develop new features
• Fraud Prevention: To detect, prevent, and address fraud, security issues, and other harmful activities

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Camp Organizers

When you register for a camp, we share necessary information with the camp organizer, including:

• Your name, contact information, and registration details
• Medical information and emergency contacts (with your explicit consent)
• Attendance records and participation in activities

3.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Paystack: Payment processing and transaction management
• Cloudinary: Image and file storage
• SendGrid: Email delivery services
• Google: Authentication services (when you use Google Sign-In)
• Hosting Providers: Cloud infrastructure and data storage

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Government requests or regulatory requirements
• Protection of rights, property, or safety of users or the public
• Enforcement of our Terms of Service or other agreements

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (SSL/TLS) and at rest using AES-256 encryption
• Authentication: Secure password hashing (bcrypt) and multi-factor authentication options
• Access Controls: Role-based access controls to limit who can view or modify your information
• Regular Audits: Security assessments and vulnerability testing
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment processors (Paystack)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Information: Retained while your account is active and for a reasonable period after account closure
• Transaction Records: Retained for at least 7 years to comply with financial and tax regulations
• Camp Records: Retained for the duration of the camp and a reasonable period thereafter for historical purposes
• Medical Information: Deleted promptly after the camp ends, unless retention is required for legal or safety reasons
• Legal Requirements: Some information may be retained longer if required by law or for legitimate business purposes

When you request account deletion, we will delete or anonymize your information within 30 days, except where retention is required by law.