Last Updated: September 15, 2026
At CampMate, your privacy is paramount. This policy explains what information we collect, how we use it, and your rights regarding your personal data. CampMate is a web app at campmateapp.com and may also be installed from Google Play as a Trusted Web Activity that opens the same website. We are committed to transparency and protecting your information with the highest standards of security.
When you create a CampMate account, we collect your email address, name, and password (stored encrypted). This information is necessary to provide you with account access and personalized packing guidance features.
We store information you provide when creating and managing camping trips, including destinations you type, dates, packing lists, photos you upload, and trip notes. Destinations are user-entered text. We do not access on-device GPS, contacts, SMS, camera, or microphone. Guest sessions can store private packing lists on this device until you create a permanent account.
We collect product analytics about how you interact with CampMate, including pages visited, features used, and trip creation patterns. We use PostHog for this, including session recordings of the pages you view. We do not call PostHog identify(), so analytics events and recordings are not linked to your account in PostHog.
We collect device identifiers, IP addresses, browser type, operating system, and referral URLs to maintain security, prevent fraud, and optimize our application performance.
When you enter a trip destination, we send that text to Mapbox Geocoding so we can look up weather and map the place. We do not request on-device location permission and the Android app does not use GPS.
Your information is used to provide, maintain, and improve CampMate's packing guidance and packing list features. This includes personalizing your experience, storing your trips, and enabling collaborative features.
We use your email address to send important service notifications, account security alerts, and trip reminders. You can opt-out of non-essential communications at any time through your account settings.
Aggregated and anonymized usage data helps us understand how users interact with CampMate, identify areas for improvement, and develop new features that benefit our community.
We process technical and usage information to detect, prevent, and respond to security incidents, fraudulent activity, and violations of our Terms of Service.
All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. Passwords are hashed using bcrypt with salt, ensuring they cannot be reversed or recovered.
We implement strict access controls and authentication mechanisms. Your trip data is private by default and only accessible to you and users you explicitly grant access to through sharing features.
CampMate is hosted on secure, industry-leading cloud infrastructure (Supabase) with regular security audits, automated backups, and disaster recovery procedures.
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide detailed information about the incident and protective measures you should take.
You have the right to access all personal information we hold about you and receive a copy in a structured, machine-readable format. Contact us at hello@campmateapp.com to request your data.
You can update your account information at any time through your Settings page. For information you cannot modify directly, contact us and we will assist you promptly.
You may delete your account from Settings in the app, or follow the instructions at https://campmateapp.com/delete-account. Account deletion is permanent. We delete your data within 30 days of verification, except where required by law to retain certain information.
We only collect and retain data necessary for providing our services. You can choose to delete individual trips or data at any time without affecting your account.
You have the right to object to certain data processing activities and request restriction of processing in specific circumstances. Contact us to exercise these rights.
We use essential cookies required for authentication, session management, and core functionality. These cannot be disabled as they are necessary for the service to work.
We use PostHog for product analytics and session recording. There is no in-app cookie preference banner. You can block analytics cookies in your browser.
We use Supabase for authentication, database, and file storage; Mapbox to geocode destinations you type (not device GPS); PostHog for analytics and session recording; Resend for transactional email; and, when configured, Maze for optional product research. Amazon product links on shopping lists may be affiliate links. These providers process data under their own privacy policies.
We respect Do Not Track (DNT) browser signals and will not track users who have enabled this setting for non-essential purposes.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is yours, and we respect that.
We share data with trusted providers who operate the platform: Supabase (hosting and auth), Mapbox (geocoding of typed destinations), PostHog (analytics and session recording, not linked via identify), Resend (email), Netlify (web hosting), and Google Play when you install the Android Trusted Web Activity. We do not sell personal information.
If you report public templates, profiles, shared lists, or collaborators, we store the report and email hello@campmateapp.com so we can review it. Blocking another user hides their public content from you and is not disclosed to them.
If you use Send feedback from your account menu, we store your message, optional contact email, and diagnostic details (page, app version, platform, and browser) in our private CampMate database. We email the CampMate team so we can follow up if needed. Other campers cannot read your feedback.
We may disclose your information when required by law, subpoena, court order, or governmental request, or to protect our legal rights, prevent fraud, or ensure user safety.
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and prominent notice on our platform before any such transfer occurs.
We may share aggregated, anonymized data that cannot identify individual users for research, marketing, or partnerships. This data cannot be traced back to you.
CampMate is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@campmateapp.com and we will delete such information from our systems.
CampMate operates globally and may transfer your data to countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by relevant authorities, to protect your data during international transfers.
We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Account data is retained while your account is active. After account deletion, we retain minimal information for 30 days for recovery purposes, then permanently delete all data except where required by law for compliance, dispute resolution, or enforcement of our agreements.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email and by posting a notice on our platform at least 30 days before the changes take effect. Your continued use of CampMate after changes become effective constitutes acceptance of the updated policy.
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: hello@campmateapp.com
Support: hello@campmateapp.com
Response Time: We aim to respond to all privacy inquiries within 48 hours
If you are located in the European Union or United Kingdom and believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority.