Privacy Policy - CampOrganizer Explorer App

Effective date: 16 October 2026
Applies to: CampOrganizer: Explorer mobile application and the associated participant-facing Explorer web experience. This notice supplements the CampOrganizer General Privacy Policy.

1. What Explorer does

CampOrganizer: Explorer helps participants in camps, educational programs and youth activities follow their own schedules, courses, events, assignments and program updates and, where enabled, communicate with authorized staff.

Explorer is intended for eligible young participants, including teenagers. It is not an adult-only app or an open social network. The services and content available depend on the program, account permissions and installed app version.

CampOrganizer APP GmbH
Diesterweggasse 1/1A
1140 Vienna, Austria
Privacy: gdpr@camporganizer.app
Support: support@camporganizer.app
Website: https://camporganizer.app

Your camp or program organizer can also answer questions about the information it maintains about you.

2. Invitations, age and participation

Explorer does not offer unrestricted public self-registration. A participant’s access depends on an account associated with a participating organization and provisioned through an authorized adult-managed process. Downloading the app does not, by itself, create an account or grant access to a camp.

CampOrganizer applies the following minimum-age policy for direct Explorer participation in supported countries:

Participant’s applicable country	Minimum age for direct Explorer participation
Austria	14
Spain	14
Germany	16
Ireland	16
Other countries	Subject to separate approval of the applicable access policy

These are product access criteria, not a claim that the GDPR forbids every form of processing about younger children. A camp can maintain legally authorized records about a younger child in other CampOrganizer services without enabling that child’s Explorer login.

Explorer access is provided through authorized program accounts, not public self-registration. Participating organizations are responsible for checking eligibility and any parental or guardian authorization required before enabling a participant’s access. Age and country information may be entered during profile completion; the mobile application does not independently verify every supplied birth date or country. The age limits in the table are product access rules, not a representation that every decision is technically automated. If eligibility information appears incorrect, contact the organization or CampOrganizer so access can be reviewed.

An adult creating an invitation or signing in with two-factor authentication does not, by itself, prove parental consent where the law requires that consent. The responsible organization must establish an appropriate legal basis and required authorizations.

3. Who decides what happens to your data?

The camp, school or program organizer ordinarily decides why it needs your participant and program information, who may see it, the lawful basis and how long it may be kept. It ordinarily acts as data controller. CampOrganizer provides the technology and ordinarily acts as the organization’s data processor.

CampOrganizer also controls some separate processing, such as direct support correspondence, certain account security or abuse-prevention activities and its own legal duties. Ask your organizer to correct an activity or registration record, or contact us at gdpr@camporganizer.app for help.

4. Information used by Explorer

When you have an account and use enabled features, Explorer may process:

4.1 Identity and access

• Name, account/user identifiers, email address and optional phone number;
• Date of birth, country, language and profile settings;
• Profile photograph where you choose to provide one;
• Membership in an organization, session, group or class;
• Relevant login records, account permissions and any applicable acceptance or authorization evidence.

4.2 Your camp day and learning

• Your permitted timetable, events and group information;
• Assigned activities, check-ins and attendance-related information;
• Courses, assignments, quiz answers, learning progress, achievements and files you submit;
• Updates displayed to your permitted audience and your likes of those updates.

Explorer’s current mobile feed displays organization-provided updates and allows permitted likes. It is not a general-purpose public feed where participants can publish posts to everyone. Different features may be enabled in different programs.

4.3 Chats, uploads and video

Explorer can support messages with assigned, authorized program staff and participation in approved group/course contexts. The relevant backend restricts child-to-child direct messaging and requires specific authorization for staff-to-child contact. These communications are not open to strangers.

You may upload a profile image, permitted assignment files or chat attachments where the relevant function is enabled. Your message or submitted material may be seen by authorized recipients and, where necessary and lawful, a responsible program moderator or safeguarding reviewer.

The current Explorer mobile release does not provide general participant browsing of a camp’s entire photo/video gallery. Some videos may be supplied through external learning-video providers when a program enables them. Voice-chat recording is not currently available in the Explorer mobile app.

4.4 Sensitive information

A program may separately manage health, allergy, medication, accessibility or safeguarding information through adult-facing CampOrganizer services. In the current participant-role configuration, these specially classified health fields are not available for Explorer participants to read. The existence of such records elsewhere in the platform does not mean the Explorer app collects them directly.

4.5 Device and security data

When you open the app or try to sign in, certain technical information may be processed, including an IP address, device/OS and app information, app-installation identifiers, authentication events, errors, crash information and performance diagnostics.

• Firebase Cloud Messaging (Google) supports notifications. Firebase may create an installation identifier before sign-in; notification tokens may be associated with your account after sign-in.
• Sentry provides crash and performance diagnostics and may initialize before sign-in. Technical event data may include stack traces, application context and performance traces or profiles.
• Google reCAPTCHA Enterprise processes technical request/device signals when certain protected login actions are performed, also before an age or account-eligibility decision.
• Google Sign-In / Sign in with Apple, if offered and selected, involve those providers in authentication and may provide your name, email address or identity-provider identifier to CampOrganizer.
• When you play YouTube or Vimeo content supplied by a program, that provider may receive connection, device/browser and playback information.

We do not use mobile advertising or behavioral-tracking SDKs for Explorer, and we do not sell your information or use it to serve targeted advertisements.

5. Why information is used

The organization and CampOrganizer use information, as applicable, to provide the right account access; show relevant program information; deliver learning activities and assignments; allow permitted communication; send useful notices; protect accounts; provide support; and address reported misuse or safeguarding concerns.

For program records, the organization is responsible for selecting a lawful ground under Article 6 GDPR and any additional Article 9 condition where special-category data is involved. CampOrganizer has applicable lawful grounds for activities it controls, which may include legitimate security interests, legal duties, contracts with individuals where relevant or consent for particular optional purposes. Acceptance of Terms is not blanket GDPR consent.

6. Who can see your information?

Only users with the relevant organizational relationship, session membership, role and permissions should be able to see your program information. Depending on the feature, these may include you, your authorized parent/guardian, assigned staff, authorized program administrators and appropriately authorized safeguarding personnel. Other participants may see only material specifically shared with their permitted group or activity.

Not all staff can see all records, and health/safeguarding information can have additional restrictions. If you share a message or assignment, remember that the authorized recipient may see what you send.

7. Hosting and service providers

Primary program data is hosted in the European Union, using Hetzner infrastructure and self-hosted MongoDB. Depending on which functions are used, relevant supporting services may include Cloudflare (network and security), Firebase Cloud Messaging, Google reCAPTCHA Enterprise, Sentry (configured EU data region for the mobile diagnostic service), MailerSend (transactional email), Google or Apple (optional sign-in), YouTube/Vimeo (external video), Stripe (payment handling where enabled).

Support and safety reports may also be handled in CampOrganizer-operated, self-hosted support and internal reporting systems.

Some providers may process limited technical information outside the EEA. Where necessary, GDPR transfer safeguards apply, such as adequacy decisions, Standard Contractual Clauses and relevant additional measures. EU hosting of the primary database should not be read as a guarantee that no external provider ever receives technical data.

8. App permissions

Depending on what you do, Explorer may request notifications, camera, photo or file permissions for an enabled feature. You can manage optional permissions in your device settings, although declining them can prevent the related function from working. Explorer does not provide live precise-location tracking of participants.

Browser-based sessions may use necessary authentication storage, and externally embedded video providers may use their own technical identifiers or cookies. For the website, see https://camporganizer.app/legal/cookies/.

9. Safety and reporting a concern

Explorer is intended for organized, authorized communication. Bullying, harassment, threats, child exploitation, illegal material and other abusive use are prohibited.

If a chat message worries you, use any Report option available in that chat. You can always tell a trusted parent/guardian or your program’s safeguarding contact, or contact support@camporganizer.app. Available in-app reporting options can differ depending on the app version and program setup. An in-app report is a request for review, not a guarantee of a particular immediate outcome.

Do not share passwords, unnecessary medical documents or private information about others in an ordinary support message. A safety concern can also be raised without using the app.

10. How long information is retained

The organization determines appropriate retention criteria for participant records according to program purpose, applicable contracts, session lifecycle and the law. Different categories—account data, assignments, messages, uploads, technical records, consent evidence, accounting records and protected backups—may have different periods.

Some categories are subject to post-session retention arrangements. Records are reviewed for deletion or anonymization when the applicable retention criteria are met; certain steps may require controlled manual handling. There is no single automatic deletion date for every category of information. Where the law requires certain information to be kept, retention must be limited to the justified scope and time. Protected backup copies may persist until their applicable expiry.

Uninstalling Explorer does not itself delete your account or your organizer’s program records.

11. Requesting account or data deletion

You, or a parent/guardian where legally authorized, may request correction or deletion of relevant information. An in-app Delete my account and data option, where provided, submits a request; it does not immediately erase every record.

You may also request deletion without the app using:

https://camporganizer.app/legal/how-to-delete/
support@camporganizer.app — subject: Explorer account and data deletion request
gdpr@camporganizer.app — privacy rights enquiries

Requests may require proportionate verification of identity or parental authority and review with the organization controlling the program records. We will identify information that can be erased or irreversibly anonymized and any information that must be retained for a legitimate legal reason. Requesting deletion does not mean that a complete erasure has already been performed.

12. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing, withdraw consent where applicable and complain to a competent data protection authority. You can ask a parent, guardian, trusted program adult or CampOrganizer for help understanding these rights.

Contact your organizer about its records or gdpr@camporganizer.app for assistance. In Austria, the data protection authority is the Österreichische Datenschutzbehörde: https://www.dsb.gv.at.

13. Security

CampOrganizer uses restricted account access, scoped permissions, protected network connections and relevant security measures for sensitive fields and permitted messages. No service can guarantee absolute protection. CampOrganizer’s information security management system is independently certified to ISO/IEC 27001:2022; certificate and scope information is available at https://camporganizer.app/platform/trust/.

14. In simple words

• Explorer helps you follow your camp day, learning activities and messages from authorized program staff.
• You need an account connected to a participating program; just downloading the app does not give you access.
• Your camp decides who may see different information about you.
• We do not sell your information or show you behavioral ads.
• Ask a parent, trusted adult or us if you see something unsafe or want to correct or delete information.
• Some records may need to be checked by the organization before they can be deleted.

15. Changes and contact

We may update this notice when services, access rules or data practices change. Where the law requires, we will provide additional notice.

CampOrganizer APP GmbH
Diesterweggasse 1/1A, 1140 Vienna, Austria
gdpr@camporganizer.app · support@camporganizer.app