Privacy Policy

1. General provisions

This Policy defines the procedure for processing personal data of users of the Campy application (the "Service") in accordance with Federal Law No. 152-FZ "On Personal Data" dated 27.07.2006. By using the Service and registering in it, the user confirms consent to the processing of their personal data under the terms set out in this Policy.

2. What data is processed

Depending on which Service features are used, the following may be processed:

• first name, last name, email address, password (as a hash);
• profile photo (if provided via Yandex ID sign-in);
• trip participation details: role, participation status, gear, tent and car seats;
• information about a trip participant's allergies — health data belonging to a special category of personal data (Art. 10 of 152-FZ). Providing this information is optional and done solely at the user's discretion;
• information about trip expenses and how they're split between participants;
• trip tracks and routes;
• reviews and feedback about past trips.

3. Purposes of processing

Personal data is processed solely for the purpose of organizing joint trips within the Service: identifying the user, keeping records of trip participants, distributing gear, transport and tent spots, calculating and splitting expenses, restoring account access, and sending the user notifications related to the Service's operation.

4. Legal basis for processing

Personal data is processed on the basis of the user's consent, given upon registration in the Service (checking the consent box on the registration form) or upon first sign-in via a third-party authentication service (Yandex ID) — continued use of the Service after such sign-in constitutes the user's agreement with this Policy. Health data (allergy information) is processed only when the user explicitly provides such information separately.

5. Disclosure to third parties

To send password-recovery emails, the Service uses a third-party email delivery provider, Resend (Resend, Inc., USA), to which the user's email address is transferred to the extent necessary to deliver the email.

Cross-border data transfer: Because Resend is used, personal data is transferred across borders to the United States. Resend maintains an adequate level of personal data protection in accordance with applicable data protection legislation. By agreeing to this Policy, the user consents to such cross-border transfer.

In all other cases, personal data is not disclosed to third parties, except where directly required by the laws of the Russian Federation.

6. Data storage

Personal data is stored for as long as the user uses the Service and is deleted upon the user's request or upon expiration of the period necessary for the purposes of processing.

7. User rights

The user has the right to:

• obtain information regarding the processing of their personal data;
• request correction, blocking, or destruction of their personal data;
• withdraw consent to the processing of personal data;
• file a complaint with the authorized body for the protection of personal data subjects' rights.

To exercise these rights, the user may contact the Service's administration.

8. Contacts

For questions about personal data processing, as well as bug reports and suggestions for improving the Service, users may reach out at tachkov.maksim@gmail.com.