Privacy Policy

1. Who we are

CampFit (“CampFit,” “we,” “us,” or “our”) operates the website at https://camp.fit, a directory that helps parents in Denver, Colorado discover kids’ camps and save the ones they are interested in. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.

If you only browse the camp directory without signing in, we do not require you to give us any personal information. Most of the data described below is collected only when you create an account and save camps.

2. Information we collect

Account and profile information. When you create an account we collect your email address (required to sign in and send the alerts you ask for) and a display name (the name you enter at sign-up, or the name Google returns if you sign in with Google).

Authentication is handled by Supabase. You can sign in with an email and password, or with your Google account. If you use Google, Google shares your email and name with us to create your account. We do not request, receive, or store your Google profile photo, contacts, or any other Google data. Passwords are managed entirely by Supabase; we never see or store your password.

Saved camps and notes. When you save a camp we store which camps you saved, the date, any private notes you attach, and your per-camp notification preferences.

Notification preferences. Your account records whether you want email notifications. Toggles for push and SMS also exist, but push and SMS notifications are not active features today — only email is actually sent.

Payment information. Premium payments are processed entirely by Stripe on Stripe-hosted pages. Your card number and payment details are entered on Stripe and never pass through or get stored on CampFit servers. We store only a Stripe customer and subscription identifier and your account tier (Free or Premium). We send Stripe your email and CampFit account ID so it can create your customer record.

Communications. We send transactional and update emails through Resend — for example a “registration opens soon” alert for a saved camp, or a digest of newly added camps. Resend receives your email address and the names of the camps involved.

Camp problem reports. If you report a problem on a camp listing, we store your email address and the description you submit so we can follow up and correct the listing.

Technical information and cookies. When you sign in, Supabase sets secure session cookies so you stay logged in (strictly necessary). We store a small, non-tracking language-preference cookie. Your light/dark theme choice is stored in your browser, not sent to us. Our host, Vercel, processes standard request data (such as IP address and browser type) to serve and secure the site. We use Vercel Web Analytics and Vercel Speed Insights, privacy-focused, cookieless tools that measure aggregate page views and performance (Web Vitals); they do not use cross-site tracking cookies or build advertising profiles.

Information we do NOT collect today. Our database schema contains optional fields for a phone number, a child age range, and preferred neighborhoods and categories. The current product has no way to enter or save any of these, and we do not collect them today. We do not use third-party advertising cookies, product-analytics trackers (other than the cookieless Vercel Web Analytics noted above), session-replay, or error-tracking that would receive your personal information, and we do not collect your precise geolocation.

3. How we use your information

We use your information only to:

• create and secure your account and keep you signed in;
• show and manage your saved camps and notes;
• send the camp alerts and digests you have opted into;
• process and manage your optional Premium subscription;
• respond to camp problem reports and support requests; and
• operate, maintain, secure, and improve the website.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Service providers we share data with

We share personal information only with the vendors that make CampFit work, and only for the purposes above. Each is bound by its own privacy commitments.

We also use AI providers (Anthropic, Google Gemini, and Z.AI) only to help gather and organize public information about camps for the directory. These providers are not given your account or personal information.

5. Children’s privacy (COPPA)

CampFit is a service for parents and other adults, not for children. It is directed to adults researching camps for kids; we do not offer accounts to, or knowingly direct our service at, children under 13.

CampFit is a discovery tool. We do not collect a child’s name, photo, date of birth, or contact information, and registration happens directly on each camp provider’s own website — not on CampFit. As noted above, our schema includes an optional child age-range preference, but the product does not collect it today.

We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

6. Data retention

We keep your account and saved data for as long as your account is active. Camp problem reports are retained so we can maintain accurate listings. Stripe retains billing records under its own policies and applicable law. The product does not currently enforce an automated deletion schedule; if you ask us to delete your account, we will do so manually.

7. Your choices and rights

Today you can, on your own:

• view and edit your saved camps and notes from your dashboard;
• remove individual saved camps;
• manage or cancel your Premium subscription through Stripe’s billing portal; and
• stop update/digest emails using the manage/unsubscribe link in those emails.

Some rights are not yet self-service. There is currently no button to delete your entire account or to download all of your data. To exercise those rights today — including access, correction, deletion, or a copy of your data — email us at hello@campfit.app and we will handle your request manually. We honor these requests regardless of where you live and will not discriminate against you for exercising a privacy right.

8. Email communications (CAN-SPAM)

CampFit sends transactional/account emails (related to your account and the alerts you asked for) and update emails (such as a digest of newly added camps). You can turn off alerts in your notification settings or via the manage/unsubscribe link in the emails. We honor opt-out requests promptly, and our messages identify CampFit as the sender.

9. Colorado Privacy Act and other laws

CampFit is built in Denver and primarily serves Colorado families. The Colorado Privacy Act grants residents rights to access, correct, delete, and obtain a portable copy of their data, and to opt out of targeted advertising, sale, and certain profiling.

Based on our size and how little data we handle, we most likely fall below the Act’s applicability thresholds. Even so, we honor the core rights above for all users, we do not sell personal data, and we do not use it for targeted advertising. If you are in another state or country with similar rights, contact us and we will honor equivalent requests.

10. How to contact us

Questions, requests, or concerns about this policy or your data: email hello@campfit.app.

11. Changes to this policy

We may update this policy as CampFit evolves — for example, if we activate a feature that collects new information. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you. Because this is a draft, expect it to change before it becomes effective.