Privacy Policy
Camp is a shared calendar, chat and lists for the groups you’re in. This page says, in plain English, what we collect when you use Camp, why, who helps us run it, and what you can do about it. The short version: we collect what it takes to run your groups, the people in your groups see what you share with them, and we don’t sell your information or use it for advertising.
1. Who we are
Camp is made by Zeebo UK Ltd, a company registered in England and Wales (“Camp”, “we”, “us”). We are responsible for the information described here. You can reach us at [email protected].
2. What we collect
Your account
- Your email address, and any extra addresses you add, so we can send you a six-digit sign-in code. We store only a scrambled (hashed) version of each code, and it expires after 10 minutes.
- Your name and profile photo, if you add one, and the color Camp gives you.
- Your age confirmation. When you confirm you’re 18 or over we keep that you confirmed it and your year of birth, not the full date.
- Your phone’s time zone and region currency, so reminders arrive at the right time and amounts show in a currency you know.
- A device key. Your phone makes a random key that keeps you signed in. We store only a hash of it, with the phone type, the app version and when it was last used, plus a push token if you allow notifications.
What you put in Camp
- Your groups and everything in them: plans and their dates, places and notes, lists and tasks, posts and links, polls and answers, RSVPs, chat messages, comments, reactions, stickers and GIFs, photos and files, games, and costs you split.
- Ways to be paid back, only if you add them: a Venmo, Cash App, Zelle, PayPal.me, Monzo or Revolut handle, or UK bank details. We show them to people in your groups who owe you. We never move money; payments happen in those apps.
- Busy times, only if you turn on “Let my groups see when I’m busy”: the start and end times of events in your phone’s calendar, never their titles, places or anything else. Turning it off stops this.
Links you share
When you share a link into Camp (a restaurant on Instagram, a ticket page), our server fetches that public page or its public preview, such as Instagram’s oEmbed, to show a title, photo and caption. That website sees a request from our server, not from you. We keep the preview with the post.
Invite and campaign links
When someone opens a Camp link (an invite, a shared plan, a referral or one of our ads) we record the kind of link, the campaign and channel, the phone type, iOS version and language, and a salted hash of the network address. The hash lets Camp ask you after you install, “Nia invited you to The Johnsons. Join?”, without you having to open the link again. We never store the raw address, and we delete the hash after 24 hours. You always confirm before anything happens.
App Store ad reports
If you install Camp after seeing one of our ads, Apple may send us an anonymous install report (SKAdNetwork or AdAttributionKit). These reports don’t identify you.
Rewards
We keep a record of the coins you earn (for example when someone you invited joins) and what you spend them on.
Technical information
Like any online service, our servers and Cloudflare see your IP address when your phone or browser connects, and may keep it briefly in ordinary logs to run and secure the service.
3. What stays on your phone
- Photos. Camp can suggest the photos you took during a plan for its album. It looks at them on your phone; nothing uploads until you choose a photo.
- Calendar. If you turn on calendar sync, Camp adds your groups’ plans to a calendar on your phone and reads changes you make there. Your other events stay on your phone (apart from busy times, if you turn that on).
- Place search. Searching for a place uses Apple Maps on your phone. Camp doesn’t ask for your location and doesn’t track where you are. Places in Camp are only the places people add to plans.
4. How we use it
- To run Camp: sign you in, keep your groups in sync on every phone in them, deliver messages and notifications, and show your plans, lists and photos.
- To keep Camp safe: enforce the adults-only rule, stop abuse, and fix problems.
- To understand how people find Camp: count which links and campaigns lead to installs, in total.
- To talk to you about your account, for example to send a sign-in code or answer an email.
We don’t sell your personal information, we don’t share it for targeted advertising, and we don’t use your messages, photos or plans to train AI models. If you’re in the UK or EU, the legal bases we rely on are performing our agreement with you (running Camp), our legitimate interests (security, fixing problems, understanding which links work), and your consent where we ask for it (notifications, calendar access, busy times).
5. Who can see what
- The people in a group see what’s shared in that group: your name and photo, what you post, add, answer and pay, and your busy times if you turned that on.
- Anyone with an invite link sees a preview: the group’s name and cover, who invited them and the group’s people. Anyone with a shared plan link sees that plan’s preview. Only share links with people you mean to.
- We can access data on our servers when we need to run, fix or secure Camp, or to answer a request from you.
6. Who helps us run Camp
We use these companies to provide the service. They handle data on our behalf, only for the purposes below.
| Company | What for | What they get |
|---|---|---|
| DigitalOcean | The server Camp runs on, including its database and live updates | Everything stored in Camp |
| Cloudflare | Our website and links, and storage for photos and files | Photos and files you upload; website and link visits |
| Postmark (ActiveCampaign) | Sending sign-in codes by email | Your email address and the code |
| Expo (650 Industries) and Apple | Delivering push notifications | Your device’s push token and the notification text |
| KLIPY | GIF search | What you search for, with an anonymous ID (not your name or email) |
| MXroute | Our email inbox | Emails you send us |
When you open a shared link, a place in Apple Maps, or a payment app, you’re using that service under its own terms and privacy policy. We may also disclose information if the law requires it, to protect people from harm, or as part of a sale or reorganization of our business, in which case this policy continues to apply to it.
7. How long we keep it
- Your account information, while you have an account.
- What you share in a group stays with the group while the group exists, including after you leave it, because it’s part of the group’s plans and conversation.
- Sign-in codes: until used, replaced, or 10 minutes old.
- The network-address hash for invite links: 24 hours.
- Database backups: we keep the 14 most recent copies and delete older ones, so deleted information leaves our backups as they roll over.
8. Deleting your account
You can delete your account in the app (Profile, then Delete account). When you do, we remove your email addresses, your sign-in on every device, your profile photo, your payment handles, your birth year, your busy times, your reminders and your private items, take you out of all your groups, and your name shows as “Deleted” on what you shared. Messages, photos and plans you shared in a group stay with that group, under “Deleted”. If you want particular things you posted removed too, email [email protected] and we’ll help.
9. Your rights
Wherever you live, you can ask us for a copy of your personal information, to correct it, or to delete it, by emailing [email protected]. We’ll answer within 30 days (45 where state law allows), and we may need to confirm it’s you first.
US state privacy rights. If you live in California, Colorado, Connecticut, Virginia or another state with a privacy law, you have the right to know what we collect and how we use it (this page), to get a copy, to correct it, to delete it, and to opt out of the “sale” or “sharing” of personal information or its use for targeted advertising. We don’t sell or share personal information in those ways, so there’s nothing to opt out of. We won’t treat you differently for using your rights, and you can use an authorized agent. If we turn down a request, you can appeal by replying to our answer.
UK and EU. You also have the right to object to or restrict some uses, to take your data with you, and to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local regulator.
10. Adults only
Camp is for people 18 and over. We ask everyone to confirm their age, and an account that says it belongs to someone under 18 is locked. We don’t knowingly collect information from anyone under 18; if you think a child is using Camp, tell us at [email protected] and we’ll delete their account.
11. Security
Camp uses encrypted connections (HTTPS) everywhere, stores only hashes of sign-in codes, device keys and network addresses, and limits who can reach our servers. No service is perfectly secure, so keep your email account safe, since it’s how you sign in, and tell us straight away if you think something is wrong.
12. Where your data is
Zeebo UK Ltd is in the United Kingdom, and the companies we use are mostly in the United States and may process data in other countries. Where the law requires it, we use recognized safeguards (such as standard contractual clauses) for these transfers.
13. Changes
If we change this policy we’ll update this page and its date. If a change is significant, we’ll tell you in the app or by email before it takes effect.
14. Contact
Zeebo UK Ltd. Email [email protected] with any question about your privacy or this policy.