Privacy Policy
Effective date: October 9, 2026
AlertCamp ("we", "our", "us") operates the AlertCamp mobile application and the alert.camp website. This policy describes how we collect, use, and protect your personal information.
1. Information We Collect
Account Data
- Email address (via Firebase Authentication)
- Unique account identifier
Device Data
- Push notification token (FCM)
- Platform (iOS/Android) and app version
- Language preference
Alert Data
- Selected parks, sites, and dates
- Notification preferences (push, email, SMS)
Subscription Data
- Plan type (Essai, Regular, Pro)
- Subscription status and expiration date
- RevenueCat identifier (we do not store any payment information directly — all payments are processed entirely by the Apple App Store or Google Play Store)
Usage and Log Data
- IP address
- Device type and browser version
- Pages visited and actions performed within the app (for example, screens opened, steps completed while creating an alert, and buttons tapped), recorded by our own servers. Before you sign in, these events are linked to a random identifier generated for your installation of the app rather than to your account.
- Error reports and performance data (via Sentry)
2. How We Use Your Data
- Send you campsite availability alerts
- Manage your account and subscription
- Improve our service and diagnose technical issues
- Contact you regarding your account (e.g., billing issues)
- Prevent abuse, fraud, and unauthorized activity
- Meet our legal and regulatory obligations
3. Third-Party Services
We use the following third-party services:
- Firebase (Google) — Authentication and push notifications
- RevenueCat — In-app subscription management
- SendGrid (Twilio) — Email notifications
- Sentry — Error reporting and performance monitoring
- Meta — Measurement of visits to the alert.camp website for our advertising (the Meta Pixel). It is not used in the mobile app.
- Oracle Cloud — Infrastructure hosting
Each of these services has its own privacy policy. We encourage you to review them.
4. Connected AI Agents (MCP)
AlertCamp runs a Model Context Protocol (MCP) server, which lets an AI assistant you choose — such as Claude or ChatGPT — work with your AlertCamp account on your behalf. No agent is connected unless you explicitly approve it from inside the app.
What a connected agent can access
- Read — the public park, campground and site catalogue; your alerts and their settings; and the openings your alerts have found.
- Write, only if you grant that permission — create, edit, pause, resume, and delete your alerts.
An agent never receives your password or authentication credentials, your email address, your phone number, your payment or subscription details, or any other user's data. Its access is limited to the permissions you approved, on your own account only.
How authorization works
Connecting uses OAuth 2.1. The agent shows you a short code, and you approve it inside the AlertCamp app, where you are already signed in — you never type your credentials into a page an agent opened. For each connection we store the name the agent declares for itself, the address its identity document was served from, the permissions you granted, and the dates it was created, last used, and revoked. That is what the Connected agents screen shows you.
Withdrawing access
You can disconnect any agent at any time from Settings → Connected agents. Revocation is immediate: it is checked on every request rather than waiting for the credential to expire. We keep the revoked entry so you can still see that an agent once had access and when it was withdrawn, and it is deleted along with the rest of your data if you delete your account.
Data that leaves AlertCamp
Once an agent reads your data, that data is in the hands of the AI provider you connected it to, and their privacy policy — not ours — governs what happens to it next, including whether it is retained or used to improve their models. We have no control over and no visibility into that processing. Please review your AI provider's privacy policy before connecting.
5. Local Storage
The alert.camp website uses browser local storage to remember your language preference. It also loads the Meta Pixel, which may set cookies to measure visits and the effectiveness of our advertising; you can limit this through your browser’s cookie settings or your Meta ad preferences. The mobile app does not use advertising or tracking cookies and does not track you across other companies’ apps or websites. Firebase may store authentication-related data locally on your device.
6. Sharing Your Data
We do not sell or rent your personal information to third parties. Your data is shared only with the service providers listed in Section 3, strictly as needed to operate the service, and with any AI assistant you have connected yourself under Section 4. We may also disclose your information when required by law or to protect our legal rights.
7. International Data Transfer
Some of our service providers (notably Firebase and Sentry) process data on servers located outside Canada, including in the United States. By using AlertCamp, you acknowledge that your data may be transferred to and processed in these countries, where data protection laws may differ from those in Canada. We take reasonable steps to ensure an adequate level of protection.
8. Data Retention
- Your account data is retained as long as your account is active.
- Database backups are kept for 30 days.
- In-app usage events (Section 1) are kept for 180 days, then deleted automatically.
- A connected agent's credential record — its name, permissions, and its creation, last-use and revocation dates — is retained while your account is active, revoked entries included, so your access history stays answerable.
- When you delete your account, all your data (alerts, preferences, notification history) is deleted via cascade.
- Anonymized usage data may be retained for statistical purposes.
9. Your Rights
Under Quebec's Act respecting the protection of personal information in the private sector (Law 25) and the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate data
- Deletion — Request deletion of your account and data
- Portability — Obtain your data in a structured format
- Withdraw consent — Withdraw your consent to data processing at any time, subject to our legal obligations
To exercise these rights, contact us at support@alert.camp.
10. Communications
We may send you emails related to the operation of the service (e.g., billing issues, important changes). If we send promotional communications, each message will include an unsubscribe link allowing you to opt out.
11. Children's Privacy
AlertCamp is not intended for anyone under the age of 16. We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, please contact us and we will remove it promptly.
12. Security
We use reasonable security measures, including encryption in transit (HTTPS/TLS), Firebase authentication, and encrypted backups. However, no system is completely secure.
13. Changes
We may update this policy. The effective date will be updated accordingly. For significant changes, we will notify you by email or through an in-app notification. Continued use of the service after a change constitutes acceptance of the revised policy.
14. Contact
For any questions about this policy, contact us: