Privacy notice
What personal data CampBuddy keeps, why, for how long, and how to see, correct or erase it. Built privacy-first with local data control.
The short version
Key Highlights- You do not need an account. Your saved sessions, quests, notes, Camp Card and answers stay on your phone. We never receive them.
- Something reaches our servers only when you choose to: join attendee discovery, share your Camp Card, send a deal form, or switch on notifications.
- We do not sell your data, show ads, or build a profile of you. Nothing you type is sent to analytics.
- You can take it back at any time, inside the app or by writing to [email protected].
Who is responsible
CampBuddy is run by WPSimplified (the "Data Fiduciary" under the DPDP Act, "we" below). CampBuddy is an independent companion for WordCamp attendees. It is not run by WordPress.org, the WordPress Foundation or any WordCamp organizing team, although organizers can edit parts of their own event's page.
Contact for everything in this notice: [email protected].
What we keep, why, and for how long
We use your data only for the reasons stated below. Before you join attendee discovery or share your Camp Card you tick "I agree", right where it says what is shared and with whom; a deal form says it above its Continue button. We keep a record of that consent.
| What | Why | Where, and how long |
|---|---|---|
| Your own data: saved sessions and attendance, quest ticks, notes on people you want to meet, your Camp Card, your answers to "Make CampBuddy yours", reminder choices. | To give you your schedule, plan and Camp Card. | Only on your phone. Not sent to us. Kept until you clear it (Your data → Clear my data) or uninstall the app. |
| Attendee discovery profile, only if you tap "Join attendee discovery": the name you choose to show (or none, to stay anonymous), the interests you tick, a profession and "who I'd like to meet" line if you add them, and a random ID. If you wave at someone or message them: the wave, your first name if you give it, and up to three short messages. | So people with shared interests can find each other at the event. | Our server. Other people in discovery for the same event can see the fields you chose. Removed when you leave discovery (one tap), or deleted about 90 days after the event. |
| Shared Camp Card, only if you switch on "Show my Camp Card on the attendee list": the fields you chose to show. | So people who tap your name in Explore → People can see and save your card. | Our server, shown to other attendees of that event. Removed when you switch it off, or deleted about 90 days after the event. |
| Deal forms, only if you submit one: the name, company, email, mobile number and choices that form asks for. | So the sponsor of that offer can contact you about it. We pass your answers to that sponsor. | Our server and the sponsor. We delete our copy about 90 days after the event. The sponsor keeps their own copy under their own privacy policy; ask them or us to help. |
| Suggest a Free Steal, only if you send one: the tool's name and link, why you like it, and your name and email if you add them. | So we can look at the suggestion and thank you for it. | Our server. Deleted about 90 days after the event. |
| Sponsor deal form (for sponsors, not attendees): the contact person's name, work email and phone if given, the deal and its logo, and the IP address and browser the form was sent from. | To check that a deal really comes from the sponsor, and to contact them about it. | Our server, and an email to our team. Deleted about 90 days after the event. An approved deal's public text and logo stay on the deal. |
| Consent records: when you ticked "I agree" (or sent a deal form), for which feature, which version of this notice, and the IP address and browser name. | The DPDP Act asks us to be able to show that you agreed. | Our server. Deleted with that feature's data, about 90 days after the event. |
| Notifications, only if you allow them: a notification address from Google (Firebase) or your browser, a random device ID, the sessions you asked to be reminded about, the app version, and which WordCamps you opened from three days before the event (and when). | To send session reminders, a few event updates and the organizers' live announcements during the event ("Lunch is served"). | Our server. Removed when you turn notifications off (or the address stops working), or deleted about 90 days after the event. |
| Feedback, only if you send it: a star rating and an optional comment, linked to a random code (not your name). | So organizers can learn what worked. | Our server, kept for organizers. Ask us to remove yours any time. |
| Reports, only if you report someone in discovery: your reason and note, and a random device ID. | To look into misuse. | Our server, until the report is dealt with and the event's data is deleted. |
| The public attendee list: name, photo and links people chose to show on their own WordCamp's Attendees page. | So you can find and meet people. We copy only what that page already shows publicly. | Our server. Anyone can ask for their entry to be hidden: write to us, or use the event's own removal page (campbuddy.club/event/<event>/roster-removal). |
| Technical records: your IP address, device type and the time of requests, in our web host's and Cloudflare's logs. | Security, abuse prevention and keeping the service running. | Our host and Cloudflare, kept for a short time under their own settings. |
| Website visit statistics (Google Analytics, website only): which pages and buttons are used. No names, no text you type, no discovery or Camp Card data, no query strings. | To improve CampBuddy. | Google Analytics, only if you tap "Allow" when the website asks; until then it is not loaded at all, and never if your browser sends "Do Not Track" or "Global Privacy Control". Change your answer any time: . The Android and iPhone apps contain no analytics. |
Who else sees it
- Other attendees, only what you put in discovery or on a shared Camp Card.
- The sponsor of a deal, only if you submit that deal's form.
- Our service providers, who process data for us: our web host, Cloudflare (network and security), Google (Firebase Cloud Messaging for notifications; Google Analytics on the website) and the browser or phone maker's push service. Some of them are outside India.
- Authorities, if the law requires it.
We do not sell personal data and we do not show advertising. We do not track or profile anyone's behaviour, and we do not target anything at children.
Your rights
Under the DPDP Act 2023, you have full control over your personal data:
How to exercise inside the app (instant)
- My Day → Your data: Save everything as a PDF or JSON, or clear all data from your phone.
- Explore → People: Leave attendee discovery with one tap; switch Camp Card sharing off anytime.
- Phone Settings: Turn notifications off whenever you want.
By email & Grievance Redressal
For anything else, write to our designated Grievance Officer. We reply within 30 days.
If we do not resolve your complaint, you can complain to the Data Protection Board of India.
Children
CampBuddy is a general guide to WordCamp events. We do not knowingly ask for personal information from anyone under 18, and we do not track their behaviour or target anything at them. The schedule, guide and quests work without sharing anything. Before attendee discovery or Camp Card sharing, the tick box asks you to confirm that you are 18 or older, or that a parent or guardian agrees. If you are under 18, please also ask them before deal forms or notifications. A parent or guardian who wants a child's data erased can write to us and we will do it.
Security & Changes
Everything travels over HTTPS. Discovery and Camp Card ownership codes are stored only as hashes. Admin and organizer areas need sign-in, and we limit how fast anyone can call our servers. If a breach affecting your personal data ever happens, we will tell you and the Data Protection Board of India as the law requires.
If this notice changes in a way that matters, we will update the date at the top and say so in the app. Older notices are not kept, but the date always shows which one you are reading.
Hindi summary (सारांश)
CampBuddy के लिए आपको खाता नहीं बनाना पड़ता। आपके सेव किए सत्र, नोट्स, Camp Card और जवाब सिर्फ़ आपके फ़ोन में रहते हैं। हमारे सर्वर तक डेटा तभी पहुँचता है जब आप ख़ुद "Attendee discovery" जॉइन करें, Camp Card शेयर करें, किसी डील का फ़ॉर्म भरें या नोटिफ़िकेशन चालू करें। हम डेटा बेचते नहीं, विज्ञापन नहीं दिखाते। आप कभी भी अपना डेटा देख, सही करवा या मिटवा सकते हैं और सहमति वापस ले सकते हैं: ऐप के "Your data" में, या [email protected] पर लिखकर। हम 30 दिन के भीतर जवाब देते हैं। कार्यक्रम के लगभग 90 दिन बाद सर्वर पर साझा किया गया सारा डेटा अपने-आप मिटा दिया जाता है।
Data Request or Complaint
Need to see, correct, or erase any personal information, or have a privacy grievance? Under India's DPDP Act, we reply to all requests within 30 days.