Legal
Data Retention Policy
Last updated: August 2, 2026
This policy explains how long Campella keeps personal information — including information parents provide about their children — and how it is deleted. It supports our commitment in the Privacy Policy not to keep data longer than needed.
Principles
- Collect only what we need (e.g. a child's birth year, not a full date of birth).
- Retain only as long as needed for the purpose, the service, legal obligations, or to resolve disputes.
- Delete or anonymize information when it's no longer needed.
- Hold children's information no longer than necessary; delete it promptly when the account or camper is removed.
Retention schedule
| Data | How long we keep it |
|---|---|
| Account / profileParent name, email, username, phone, address, avatar, hashed password | While the account is active; deleted on account deletion. |
| Children's info (campers)First/last name, birth year, optional school | While the account and camper exist; deleted when the parent removes the camper or deletes the account. |
| Planning activitySaved/followed camps, seasons, scheduled camps, booked status, waitlist | While the account is active; deleted on account deletion or when you remove the item. |
| Reviews & Q&AReviews, questions, answers | While the account is active; removed on account deletion. |
| Camp CirclesCircles you own or join, membership, which camps you shared, and the suggestions, responses, and comments you posted. | While the circle exists and you're a member; removed when you leave, when the circle is deleted, or on account deletion. A camp another family adopted from your suggestion becomes an item on their own schedule (retained under their account, no longer linked to you). |
| AI featuresCampella AI subscription status; plans and suggestions the AI creates (saved as your schedule); the inputs you provide to an AI feature. | AI credits/status: while the account is active; cleared on account deletion. AI-generated plans: retained as your normal schedule. Inputs are processed to generate a result and are not stored beyond it; de-identified performance notes (no personal information) may be retained. |
| AI auto-book (assisted registration)A 'bookmark' of where you left off (page/step). Separately, short automation-performance notes with personal details removed. Information entered into a camp's form is not stored. | Bookmark: deleted on account deletion. De-identified performance notes: retained to improve the feature (no personal information, not tied to your account). Form entries: not stored. |
| Payment referencesStripe customer ID, plan status (no card data) | While active; basic billing references kept as needed for financial/tax records. Card data lives with Stripe. |
| Calendar tokensEncrypted Google OAuth tokens | While connected; deleted on disconnect or account deletion. |
| Server logsIP address, timestamps (security/debugging) | Short-term, target ≤ 90 days, then deleted or rotated. |
| BackupsEncrypted database/storage backups | Rolling window (target ≤ 30 days); deletions propagate as backups expire. |
Children's information
A parent may review, correct, export, or delete a child's information at any time from their account. When a camper or the account is deleted, the child's information is deleted on the same schedule above. We don't retain children's information for any secondary purpose, sell it, or use it for targeted advertising.
How deletion happens
Deleting your account removes your information and your children's information — campers, seasons, schedules, waitlist, reviews, questions, friend connections, favorites, follows, your Camp Circle memberships and the circles you own (with their suggestions, responses, comments, and shares), pay-as-you-go AI credits, the calendar events we created, and any AI auto-book bookmarks. (De-identified automation-performance notes, which contain no personal information, are retained to improve the feature. A camp another family already adopted from your suggestion remains on their own schedule, no longer linked to you.) Removing a single item (a camper, a scheduled camp, a season, a circle share) deletes that record. Deletions are removed from the live system; copies may persist briefly in backups until they expire.
Inactive accounts
To avoid holding data — especially children's information — indefinitely, we periodically identify accounts inactive for an extended period (target: 24 months), notify the account holder, and delete the account and its data if there is no response within a reasonable window.
Legal holds
We may retain specific information longer where required to comply with law, keep necessary financial/tax records, or establish or defend legal claims — only for as long as that requires.
Contact
Questions about retention or deletion? Email hello@campella.io.