Last updated August 24, 2026
Bunkhouse is camp management software. Camps use it to run registration, payments, health records, and daily operations. This policy explains what we collect, why, and the rights you have over it. It is written to be read; if anything here is unclear, email us and we will explain it plainly.
Account data is what camps and their staff give us to operate the service: names, email addresses, camp organization details, and billing information. For this data, Bunkhouse is the data controller.
Camp data is what a camp stores in the product to run its programs: household and guardian contact details, camper profiles, enrollments, payment records, and — where the camp uses the health center — health forms, medication logs, and incident records. For camp data, the camp is the controller and Bunkhouseis a processor acting on the camp's instructions. Questions about a specific camp's records should go first to that camp; we support them in answering.
Camper records describe children. Campers never have accounts and we never communicate with campers; guardians provide camper information to their camp, and the camp controls it. We do not use camper data for marketing, advertising, or profiling of any kind, and we do not sell it — or any other data — to anyone.
Health forms, medication logs, and incident records are stored encrypted in transit and at rest, and are visible only to the roles a camp designates (Director and Nurse). Our staff access customer health data only when a camp asks us to help with a support issue that requires it, and that access is logged.
Card and bank payments are processed by Stripe. Payment credentials go directly to Stripe and never touch our servers; parent payments settle to the camp's own Stripe account. Stripe's privacy policy governs the data it processes.
This website sets analytics and marketing cookies only with your consent, via the banner, and works fully if you decline. The product itself uses only the cookies required to keep you signed in. Where analytics runs, it measures product usage in aggregate; we do not run third-party advertising trackers inside the product.
We run on a small set of infrastructure providers, each bound by data processing terms: Vercel (hosting), Convex (database and backend), Clerk (authentication), Stripe (payments), Resend (email delivery), and PostHog (product analytics). We will update this list before adding to it.
Camp data is retained while a camp's account is active. When a camp closes its account, its data is deleted from production systems within 60 days, except records we are legally required to keep (such as financial records). Camps can export their data at any time — data portability is a product feature, not a request queue.
Depending on where you live, you may have rights to access, correct, export, or delete personal data about you. For account data, contact us directly. For camp data — including camper records — contact your camp, and we will help them respond. We answer privacy requests within 30 days.
Email hello@bunkhousehq.com for anything in this policy. If we change the policy materially, we will notify camp Directors by email before the change takes effect.