Privacy Policy

Last updated: May 6, 2026

CampFlow ("we", "us") is a tool used by Young Life camp trip organizers to manage housing assignments, ride scheduling, and arrival check-in for camp trips. This page explains what data we collect, how we use it, and the choices you have. If you have questions, email mvonstei@gmail.com.

Information we collect

• Account profile: your name, email address, and (when you sign in with Google) your Google profile picture and Google account ID.
• Role information: the role and camp assignment you select during onboarding so we can show you the right pages.
• Trip data you enter: camper rosters, leader names, room and ride assignments, and any notes you add inside CampFlow.
• Operational logs: standard server logs (IP address, request timestamps) used for security and debugging.

Google user data we access

When you connect Google Sheets, CampFlow uses Google OAuth to request access to read and write the specific Google spreadsheets you choose to use for your camp trip. We use this access only to:

• Import camper, leader, and trip rosters from your spreadsheets.
• Push housing and ride assignment results back into the spreadsheets you authorize.

We do not use Google user data for advertising, do not sell it, and do not share it with third parties. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models. CampFlow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How data is stored and retained

CampFlow stores trip data and your account profile in a PostgreSQL database hosted on our cloud provider. Google OAuth tokens are stored in that same database and are used only to make Google Sheets API calls on your behalf. Access to the database is restricted to the operators of CampFlow. Data is retained while your account is active. When a trip is deleted, the trip's housing, ride, and roster data is removed.

Sharing

We do not sell your data and we do not share it with third parties for marketing. Trip data is visible to other CampFlow users on the same camp who have been approved by a Lead Admin.

Deleting your data and revoking Google access

• Delete your CampFlow account or data: email mvonstei@gmail.com from the address on your account and we will delete your profile and the trip data you own within 30 days.
• Revoke Google access: visit myaccount.google.com/permissions, find "CampFlow", and click "Remove Access". CampFlow will no longer be able to read or write your Google Sheets after that.

Security

We use HTTPS for all traffic, store passwords as salted hashes, and limit access to production data to the operators of CampFlow. No system is perfectly secure; if you suspect a security issue, please email us.

Changes to this policy

If we make material changes to this policy we will update the "Last updated" date above and, where appropriate, notify users by email.

Contact

Questions or requests: mvonstei@gmail.com.