Privacy Notice

CampCircle is operated by CampCircle LLC, based in California.

CampCircle helps adults plan their family's summer and coordinate with people they trust. CampCircle is currently a controlled-beta service. This notice describes the product and its information practices as they exist today.

CampCircle uses information you enter to provide your account, family workspace, planning, and sharing features. Depending on the features you use, this includes:

• Account email, parent display name, family name, and family membership or role.
• Child first names or nicknames, selected icons, optional interests, birth dates, and grades for a selected summer.
• Camp plans, including camp and location information, session dates, status, and sharing choices.
• Private Family events, including dates, participating children, and an optional label.
• Trusted circle and Trusted Family connections, participating-child selections, invitations, access requests, and membership information.
• Private Camp Buddy choices, optional nearby-area preferences, and activity associated with managing the workspace.

CampCircle does not provide child accounts or public child search. Adults manage the child information in their family workspace.

Family-private means private from other families, not from the co-parents who belong to the same family workspace. An accepted co-parent can access and help manage that family's children and private planning information. Admin and Parent roles do not have identical administrative powers: family details, invitations, and member or role management have additional Admin controls.

Inviting a co-parent into your family is different from connecting with a Trusted Family or joining a trusted circle. A Trusted Family keeps its own workspace. A connection or circle membership does not, by itself, give another family access to all your private plans or child-profile information.

An email sign-in link authenticates the recipient. It does not accept a family invitation. Joining an invited family requires a separate acceptance action in CampCircle.

Plans are private to your family by default. When your family selects a child for sharing with a trusted circle or Trusted Family, eligible plans for that child can be shared with that connection. Individual plans can still be kept private using a plan-level exception.

Shared planning information can include the child's display name, family association, camp name, session dates, status, and camp-location context. Plans from another family are read-only: viewing them does not give that family permission to edit your plans.

Sharing follows each summer's planning season, which becomes active on October 1 of the preceding year. Only eligible plans covered by your family's sharing choices can become visible to other families. Future-season plans wait until their season becomes active. Other-family access ends after September 30 of that summer.

For summer 2027, eligible shared plans can become visible from October 1, 2026; access for other families ends after September 30, 2027.

This access expiry does not delete your family's plans or history, end circle memberships, or automatically remove child-sharing selections. A family joining later does not gain access to an earlier summer's plans.

Turning off a child's sharing selection or ending the relevant participation or connection removes access through that sharing relationship. A per-plan private exception keeps that plan from being shared through the affected relationship. These actions do not erase the underlying family plan or historical records.

Participating-child rosters can show a child's first name or nickname and family identification to authorized members. They do not expose private icons, interests, birth dates, summer grades, Family events, or private availability. Leaving a circle or removing participation removes current roster participation; historical records can remain.

A valid join or connection link can show limited identifying information about the circle or inviting family before sign-in. It does not reveal children's profiles or camp schedules. Treat these links as invitations to the intended recipients, not as public directories.

Selected icons, interests, birth dates, and summer grades stay within your family workspace rather than being shared with other families or camp providers through the planning features.

Selected interests are the primary Camp Ideas matching signal, compared with reviewed program specialties. Camp Ideas works without joining a circle. When available, a child's birth date and selected-summer grade support conservative age and grade checks. Clearly incompatible options can be filtered out, but incomplete information and uncertain cases may remain for you to check.

A suggestion is not confirmation of eligibility, current availability, safety, suitability, registration, or provider endorsement. Verify the exact session and requirements with the camp provider, including rules affected by a birthday or grade transition.

You can provide a ZIP code or city and state for nearby Camp Ideas and change or clear that preference in Camp ideas. The area field is not intended for a street address. CampCircle stores the chosen area and its resolved coordinates as family-private information.

To resolve an area, CampCircle sends the entered ZIP code or city and state to the OpenStreetMap Foundation's Nominatim geocoding service. That lookup does not include your children's names, interests, birth dates, grades, or camp plans. The provider may keep technical records of lookup requests for operating and improving its services, as described in its Privacy Policy. The resolved family area is not shared with other families or camp providers through CampCircle's sharing features.

Distances are approximate, straight-line distances from the resolved area, not driving distances or travel times. A strict radius filter requires a known in-range physical program location; locations without enough information are not assumed to be nearby. Virtual options can be included separately. Location data and suggestions still need provider confirmation.

Family events mark dates when selected children are unavailable and help identify planning conflicts. Event dates and labels stay private to your family. They do not publish availability to trusted circles, Trusted Families, Camp Buddies, or camp providers, and they do not change a plan's sharing choices.

Use general labels. Avoid entering medical information, precise travel locations, detailed itineraries, or other sensitive information in an event label. Archived events and their history can remain in saved records.

Camp Buddies are private, one-way preferences that help prioritize familiar context you are already allowed to see. A Buddy choice does not grant access to another child's plans, notify another family, or create a reciprocal relationship. Choices can be removed when the underlying participation ends; related history can remain.

Saved accounts use hosted services for authentication and family data. When an explicitly available demo mode is used, demo changes stay in browser state and may reset; they are not saved-account records.

CampCircle uses browser storage for necessary sign-in state and the selected family workspace. These functions are separate from optional advertising or marketing tracking. See the Cookie and Storage Notice.

Family-private information is still processed by services needed to operate CampCircle. The current operating services include Vercel for hosting, Supabase for authentication and saved data, Resend for sign-in email, and Cloudflare for inbound support email forwarding to Gmail. Optional area lookup uses the OpenStreetMap Foundation's Nominatim service, as explained above. Support messages are handled through these email services.

Hosting and account services generate technical records, such as request times, network information, and response status, to operate and protect CampCircle and help diagnose problems. This operational monitoring is different from advertising or marketing.

Our hosting provider, Vercel, may collect technical information about your online activity over time and across the different websites it hosts when you use CampCircle, including IP addresses and traffic records. Its Privacy Notice describes the information it receives from visitors to hosted websites. This hosting context is separate from CampCircle's family-planning and sharing features.

You can review and edit your parent display name and request a sign-in email change in Settings > Account. The current confirmed email remains displayed until your signed-in session reflects the new address. In Manage family, family members can review and edit child profiles. The nearby-area preference is managed in Camp ideas; family-name and access-management changes require the appropriate Admin role. Your family can review and edit its own plans in Plans, subject to the season's editing controls. Another family's shared plans remain read-only. These controls do not provide a complete data export or erasure process.

These actions have different effects. None should be understood as a promise of complete data erasure.

Leave family. An active member can leave a shared family subject to role safeguards. The last Admin must first leave another Admin in place. A sole remaining member cannot use Leave family and must instead resolve the family through its eligible deletion flow. Leaving removes your access through that family membership; the workspace and its records remain for the other members.

Delete family. The action named Delete family is available to an Admin who is the sole remaining active member. Ownership of active ordinary trusted circles must first be transferred or those circles archived. The action archives the family workspace, ends its sharing and access relationships, and resolves related pending invitations and requests. Children, plans, Family events, and activity or actor history can remain in stored records. The app does not offer a way to restore the deleted family. This is an archive and access-removal action, not a complete erasure of family data.

Close account. You must first have no active family memberships. Closing your account ends your access to CampCircle. You cannot reopen it in the app. Your sign-in record and some family and activity history remain stored. Closing your account is not complete data erasure. Deletion and export questions have a separate support route below.

Privacy deletion or export requests. CampCircle does not currently offer a complete self-service data-erasure or export tool. Contact support@campcircle.org about a deletion or export request or to ask what information remains after an account or family action. The availability of account closure or family deletion does not establish that every stored record has been removed.

For privacy questions, contact support@campcircle.org. CampCircle may update this notice as the service changes. We notify you of material changes to this Privacy Notice by posting the updated notice on this page and changing its effective date.