Privacy Policy

Who we are

MyCamp is organization and membership administration software provided by Javadude Development at https://mycamp.javadude.dev. This policy describes how MyCamp handles information when you visit the website or use the application.

Participating camps, brigades and divisions decide which organizational records to enter and how to use their authorized reports and exports. Your organization is the first contact for questions about its membership records; you may also contact MyCamp using the address below.

Information we collect

Account and access information: name, email address, password hash, account status, invitations, organization access requests, assigned roles, sign-in sessions and security activity. When you enroll in authenticator MFA, we store an encrypted authenticator secret and hashed recovery codes; we do not store your password or recovery codes in readable form.

Organization and membership information entered by authorized users: member names, SCV membership numbers, contact details, mailing addresses, camp affiliations, membership status and history, life membership information, officer positions, dues assessments, receipts, deposits and remittance records. A roster record can exist without a member having a MyCamp login.

Content submitted by authorized users: organization profiles and logos, events, newsletter text, photos, saved newsletter drafts and prayer text included in those drafts. Prayer text or photographs may contain sensitive information about other people. Submit it only with appropriate permission and include only what is needed.

Technical information: essential session cookies, security and audit records, and information that hosting systems may record when you visit, such as IP address, browser information, request time and requested page. Support correspondence includes the information you choose to send us.

How we use information

We use information to authenticate users, enforce organization permissions, administer membership and dues records, provide calendars and reports, save newsletter content, process invitations and access requests, respond to support requests, investigate misuse and maintain the service.

We do not sell or rent personal information, use it for targeted advertising, or use Google account information to train general-purpose AI models. MyCamp does not request payment-card details for its current recordkeeping features.

Google and Facebook sign-in

Google and Facebook sign-in are optional methods available when MyCamp enables the integration. Google sign-in permissions are limited to basic identity scopes: openid, email and profile. These may provide an account identifier, name, email address, email-verification status and profile image. MyCamp uses the account identifier and optional email needed to authenticate you and link a provider account that you explicitly choose to connect; it does not store provider profile photos or names. It does not request Gmail messages, Google Drive files, Google Calendar data or Google contacts for sign-in.

If Facebook sign-in is offered, it will be limited to the identity information disclosed during that sign-in flow, such as an account identifier, name and an email address if available. A provider account does not automatically confer camp membership, officer status or access to member records.

Google user data will be used and transferred in accordance with the Google API Services User Data Policy, including applicable Limited Use requirements. Identity data will not be sold, used for advertising or disclosed to an organization as proof of membership. Before a feature requests additional provider data or changes its use, we will update the disclosures and obtain any required consent.

Who can receive information

Organization users can access records and reports only through the permissions available to their roles and organization scope. Depending on those permissions, this can include authorized camp officers and related brigade or division leadership. Administrative or support access is used to operate the service, handle support or investigate security issues.

We use service providers for hosting, storage and configured transactional email. MyCamp is hosted on DigitalOcean. A configured email provider processes recipient addresses and message contents for invitations and access-request notifications. Providers receive information necessary for those services.

Authorized users can download, print or otherwise distribute reports and newsletter PDFs outside MyCamp. Those copies are handled by the organization and recipients, not controlled by MyCamp access permissions. Automatic newsletter email, postal delivery and shared publication workflows are not currently enabled; any future delivery service will be disclosed before activation.

We may disclose information when required by applicable law or when reasonably necessary to investigate abuse, protect the service or protect the rights and safety of users. We do not make private roster or newsletter records publicly accessible as part of ordinary website browsing.

Cookies and browser storage

MyCamp uses essential cookies to maintain your signed-in session and short-lived MFA setup or verification state. Newsletter editing may keep a working draft in browser storage; saved articles and drafts are also stored on the server when you choose to save them. Clearing browser storage can remove local work but does not delete server records.

MyCamp currently includes no advertising cookies or third-party behavioral analytics integration. Hosting and security logs are separate from advertising tracking. You can manage cookies and local storage through your browser; disabling essential cookies prevents sign-in from working.

Security

Safeguards include HTTPS for the website, password hashing, organization permission checks, session expiration and authenticator MFA controls. Authenticator secrets are encrypted and recovery codes are hashed. We do not guarantee that any online service, exported file or transmission is completely secure. Keep your password and recovery codes private and report suspected unauthorized access promptly.

Retention and deletion

Information is retained while needed to provide the service, maintain authorized organization records, resolve disputes, prevent abuse or meet applicable legal requirements. Account deactivation does not automatically erase historical membership, dues, officer or audit records. Backup and technical-log copies may persist until the applicable retention or replacement cycle completes.

You may request access, correction or deletion by contacting us and, for organization records, your camp officer. We may need to verify your identity and coordinate with the organization. We will explain if a record must be retained or a request cannot be completed. Do not send passwords, authenticator secrets or recovery codes with a request.

Your choices and provider permissions

You can manage available account security controls in Preferences. Ask your organization to correct roster details or change its communication choices. If provider sign-in becomes available, you can revoke MyCamp access in that provider’s account settings. Revoking provider access will not itself delete organizational records; contact us to request account or data deletion.

Depending on your location, applicable law may provide additional rights to access, correct, delete or restrict use of information. Contact us to make a request. We do not use these requests to grant access to another person’s private records.

Children and sensitive information

MyCamp is intended for organization administration by authorized account holders and is not directed to children under 13. Organizations must obtain any required permissions before entering information about children or sensitive prayer requests. Contact us if you believe information was submitted without required permission. Do not upload government identification numbers, full payment-card details or unnecessary medical records.

Processing location and other services

MyCamp is operated from the United States. Hosting and service providers may process information in locations where they operate; we do not promise a particular storage region. Google, Facebook and other external services have their own privacy policies for their services. This policy covers MyCamp’s handling of information.

Changes and contact

We will update the date on this page when this policy changes. Material changes will be communicated through the application or appropriate account contact channels, and additional consent will be requested when required. For privacy questions or data requests, email the contact address below and identify your organization and the nature of your request.