Privacy Policy

1. Introduction

Abacus Tech Design, LLC ("Company," "we," "our," or "us") operates Daycampr, a day camp management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Daycampr, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, phone number, and billing information necessary to provide our services.

2.2 Child Information

To provide camp registration services, we collect information about children including name, date of birth, grade level, medical information, allergies, emergency contacts, and any special accommodations needed. This information is collected only from parents or legal guardians who register their children.

2.3 Usage Data

We automatically collect information about how you interact with our service, including pages visited, features used, browser type, IP address, and device information. We do not use third-party analytics or tracking services.

2.4 Cookies & Local Storage

We use essential cookies and browser storage to operate our service:

• Session Cookies: Used to maintain your login session and authentication state
• Security Tokens: Used to prevent cross-site request forgery and protect your account
• Preferences: Used to remember your settings and preferences within the application

We do not use advertising cookies, third-party tracking cookies, or analytics cookies. All cookies we use are essential for the service to function and cannot be disabled without breaking core functionality.

3. Children's Privacy & COPPA Compliance

Daycampr takes children's privacy seriously. Our service is designed for use by parents, legal guardians, and camp operators—not by children directly.

• Children under 13 cannot create accounts or directly interact with our service
• All child information is provided by parents or legal guardians
• We collect only the minimum information necessary for camp registration and safety
• Child information is never used for marketing purposes
• We do not sell children's personal information

Parental Rights: Parents and legal guardians may at any time:

• Review the personal information we have collected about their child
• Request correction of inaccurate information
• Request deletion of their child's information
• Refuse further collection or use of their child's information

To exercise these rights, contact us at support@daycampr.com.

4. Health & Medical Information

We understand the sensitive nature of health and medical information. Here is how we handle it:

• Purpose: Medical information is collected solely for camper safety and to enable camp staff to provide appropriate care
• Sharing: This information is shared only with the camp operators you register with, solely for care purposes
• Marketing: Health information is never used for marketing or advertising
• Sale: We never sell medical or health information to third parties
• Security: Medical data receives additional security protections including encryption and access controls

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide the services you have requested, including registration, payment processing, and communication about your registrations
• Consent: Where you have explicitly consented to specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, ensuring security, and preventing fraud, where such interests are not overridden by your rights
• Legal Obligations: Processing necessary to comply with applicable laws and regulations

6. How We Use Your Information

• To provide and maintain our camp management services
• To process registrations and payments
• To communicate with you about your account and registrations
• To send important updates about camp programs
• To share relevant information with camp operators for program delivery
• To improve our services and develop new features
• To ensure the security of our platform
• To comply with legal obligations

7. SMS/Text Messaging Communications

We offer SMS (text messaging) notifications for certain services that you may choose to receive.

Information Collected

When you opt in to receive SMS messages, we collect your mobile phone number and your express consent to receive text communications. This information is used solely to send you authorized messages you have agreed to receive.

How You Opt In

You may opt in to receive SMS notifications through an explicit consent flow in your account profile. This includes entering your phone number, checking an unchecked consent box, and completing a verification code (double opt-in). You will not receive SMS messages unless this process is completed.

Purpose of SMS Messages

We use your SMS data to send notifications about waitlist status, enrollment updates, and other important communications related to your account.

Opt-Out

You can opt out of SMS communications at any time by replying "STOP" to any message we send you. After you opt out, we will no longer send you SMS messages unless you opt in again.

Third-Party Processing

We may share your phone number with trusted third-party service providers (such as Twilio) to deliver text messages on our behalf. These providers are authorized to use your information only to the extent necessary to provide these services.

Message & Data Rates

Standard message and data rates may apply. Message frequency varies based on your account settings and activity.

This SMS communication policy is part of and governed by this Privacy Policy.

8. Third-Party Services (Subprocessors)

We use trusted third-party services to operate our platform. These subprocessors may have access to your information only to perform specific tasks on our behalf:

Our primary data processing and storage occurs in the United States. Some service providers may use global infrastructure (such as CDN edge nodes) for performance and reliability purposes. We maintain contractual safeguards with all service providers to protect your data regardless of processing location.

9. Geographic Scope

Daycampr is intended for use by individuals and organizations located in the United States. Our Service is not directed at residents of the European Union, United Kingdom, or other jurisdictions with data protection laws that may conflict with US practices.

• The Service is designed to comply with United States federal and state laws, including COPPA and CCPA
• We do not actively market to or solicit users outside the United States
• If you access the Service from outside the United States, you do so at your own initiative and are responsible for compliance with local laws

By using Daycampr, you consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction.

10. Data Controller & Processor Roles

When you use Daycampr to register for camp programs:

• Camp Operators are the data controllers—they determine the purposes and means of processing your personal data for their camp programs
• Daycampr (Abacus Tech Design, LLC) acts as a data processor—we process data on behalf of camp operators according to their instructions and our service agreement

For questions about how a specific camp uses your data, please contact the camp directly. For questions about Daycampr's data practices, contact us at support@daycampr.com.

11. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• Encryption at Rest: Stored data is encrypted using industry-standard encryption
• Access Controls: Strict access controls limit who can access personal data
• Authentication: Secure authentication mechanisms protect account access
• Regular Assessments: We conduct regular security assessments and updates
• Incident Response: We maintain incident response procedures to address potential security events

12. Data Breach Notification

In the event of a data breach that affects your personal information:

• We will notify affected users within 72 hours of confirming the breach
• Notification will include the nature of the breach, types of data affected, and steps we are taking
• We will provide guidance on steps you can take to protect yourself
• We will notify relevant regulatory authorities as required by applicable law

13. Data Retention

We retain your information according to the following schedule:

Why we retain data after account closure: The 2-year post-account retention period exists to support legitimate business and legal needs, including responding to disputes, processing refund requests, maintaining records for tax purposes, and complying with legal obligations. Payment records are retained for 7 years as required by tax law.

You may request earlier deletion of non-required data by contacting us at support@daycampr.com. We will delete data not subject to legal retention requirements within 30 days of a verified request.

14. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

California Residents (CCPA/CPRA)

• Right to Know: Request information about the personal data we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: We do not sell personal information, so no opt-out is necessary
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Limit Use of Sensitive Personal Information: We collect sensitive personal information (children's health data, allergies, medical conditions) solely to provide the camp registration service and ensure camper safety. This information is not used or disclosed for any purpose other than providing the service—we do not use it for profiling, advertising, or any secondary purposes

All Users

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Receive a copy of your data in a portable format
• Withdraw consent for processing (where consent is the legal basis)

To exercise your rights: Email us at support@daycampr.com with your request. We will respond within 45 days. We may need to verify your identity before processing your request.

15. Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary consideration. We share information only as described in this Privacy Policy—with camp operators you register with and with service providers who help us operate our platform.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the service after changes become effective constitutes acceptance of the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Business Customers: For organizations requiring a Data Processing Agreement (DPA) or security documentation, please contact support@daycampr.com.