Legal
Data Retention Policy
Last updated: [Effective date — set when published]
This policy explains how long Campella keeps personal information — including information parents provide about their children — and how it is deleted. It supports our commitment in the Privacy Policy not to keep data longer than needed.
Principles
- Collect only what we need (e.g. a child's birth year, not a full date of birth).
- Retain only as long as needed for the purpose, the service, legal obligations, or to resolve disputes.
- Delete or anonymize information when it's no longer needed.
- Hold children's information no longer than necessary; delete it promptly when the account or camper is removed.
Retention schedule
| Data | How long we keep it |
|---|---|
| Account / profileParent name, email, username, phone, address, avatar, hashed password | While the account is active; deleted on account deletion. |
| Children's info (campers)First/last name, birth year, optional school | While the account and camper exist; deleted when the parent removes the camper or deletes the account. |
| Planning activitySaved/followed camps, seasons, scheduled camps, booked status, waitlist | While the account is active; deleted on account deletion or when you remove the item. |
| Reviews & Q&AReviews, questions, answers | While the account is active; removed on account deletion. |
| Payment referencesStripe customer ID, plan status (no card data) | While active; basic billing references kept as needed for financial/tax records. Card data lives with Stripe. |
| Calendar tokensEncrypted Google OAuth tokens | While connected; deleted on disconnect or account deletion. |
| Server logsIP address, timestamps (security/debugging) | Short-term, target ≤ 90 days, then deleted or rotated. |
| BackupsEncrypted database/storage backups | Rolling window (target ≤ 30 days); deletions propagate as backups expire. |
Children's information
A parent may review, correct, export, or delete a child's information at any time from their account. When a camper or the account is deleted, the child's information is deleted on the same schedule above. We don't retain children's information for any secondary purpose, sell it, or use it for targeted advertising.
How deletion happens
Deleting your account removes your information and your children's information — campers, seasons, schedules, waitlist, reviews, questions, friend connections, favorites, follows, and the calendar events we created. Removing a single item (a camper, a scheduled camp, a season) deletes that record. Deletions are removed from the live system; copies may persist briefly in backups until they expire.
Inactive accounts
To avoid holding data — especially children's information — indefinitely, we periodically identify accounts inactive for an extended period (target: 24 months), notify the account holder, and delete the account and its data if there is no response within a reasonable window.
Legal holds
We may retain specific information longer where required to comply with law, keep necessary financial/tax records, or establish or defend legal claims — only for as long as that requires.
Contact
Questions about retention or deletion? Email hello@campella.io.