Privacy Policy

Campernight is operated by Bagolar Studio SL, VAT ID B22924724, registered at Carrer Colom 34, 3-1, 17600 Figueres, Spain.

Summary

Your privacy is important to us. It is Campernight's policy to respect your privacy regarding any information we may collect from you across our website, https://www.campernight.com, the Campernight app, and other sites we own and operate.

We only ask for personal information when we need it for a stated purpose. We collect and use it fairly, lawfully and transparently, and ask for consent where consent is the applicable legal basis.

We retain personal information only for as long as needed for the purposes described in this policy, including providing the service, security, fraud prevention, legal obligations, support, analytics and product reliability.

We do not sell your personal information. We share personal information with service providers, app stores, infrastructure providers and partners only when needed to operate Campernight, provide features, process purchases, analyze usage, prevent fraud, comply with the law or protect our rights.

Our website and app may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

If you have any questions about how we handle user data and personal information, feel free to contact us at hello@campernight.com

This policy is effective as of 10 August 2026.

Information we collect

Depending on how you use Campernight, we may collect account details, authentication identifiers, app and device information, approximate or precise location when you use location features, public content you add such as places, reviews, photos and trips, support messages, subscription status, analytics events and Kai chat content.

If you contact us directly, we may receive additional information such as your name, email address, device/app details, user ID or RevenueCat ID, the contents of your message and attachments, and any other information you choose to provide.

We receive most information directly from you or your device. We may also receive identity data from your sign-in provider, purchase and subscription status from Apple, Google or RevenueCat, delivery and engagement data from Brevo, and public place or business information from partners and public sources.

An authentication identifier and email address are required to create and maintain an account; without them we cannot provide account features. Profile details, vehicle and travel preferences, precise location, photos, notifications, marketing and use of Kai are optional, although a chosen feature may need the relevant data to work.

How we use your information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website and app
  • Improve, personalize, analyze and expand our website and app
  • Understand how users use Campernight through consent-gated website/blog analytics and app analytics
  • Develop new products, services, features, AI assistance and functionality
  • Communicate with you for support, account, product, marketing and service messages where allowed
  • Process subscriptions, purchases, notifications, moderation and public user-generated content
  • Monitor reliability, debug issues, secure the service, detect abuse and prevent fraud

Log Files

Campernight keeps operational logs for security, fraud prevention, moderation, debugging and reliability. Depending on the feature, they may include IP addresses, HTTP method, endpoint paths and query parameters, app/device and user-agent details, request, user or record identifiers, content type/size, status and error details, push-registration tokens during device registration, and moderation or AI inputs and outputs needed to investigate faults or abuse. These logs can contain personal data and user content. We restrict access to people who need it to operate and secure Campernight. We rely on our legitimate interests in protecting and operating the service. We do not intentionally log API keys or authentication tokens.

Legal bases for processing

We rely on a legal basis for each purpose:

  • Contract and steps you request before a contract – to create and manage your account, authenticate you, provide maps, trips, contributions, Kai responses and support, and manage subscriptions and purchases.
  • Consent – for marketing, website analytics cookies and attribution where consent is required. You may withdraw consent in the app, website cookie settings, device settings or by contacting us, without affecting earlier lawful processing.
  • Legitimate interests – to secure Campernight, prevent fraud and abuse, moderate public content, measure and improve pseudonymous app use, diagnose faults, maintain service reliability and defend our rights. We use proportionate data and consider your rights before relying on this basis; you may object in your particular situation.
  • Legal obligation – to meet tax, accounting, consumer-protection, regulatory and lawful authority requirements. We may also retain limited information to establish, exercise or defend legal claims.

Data retention

We keep personal data for different periods depending on why we process it:

  • Account/profile data is kept while your account is active, unless you delete the account or ask us to delete it and no exception applies.
  • Trips, reviews and uploaded place photos are deleted when your account is deleted. Public places you added may remain as community locations without your account attribution. We assign the place to the Campernight system account. The place remains until it is deleted or removed through moderation, subject to legal or safety exceptions.
  • Authentication tokens are short-lived, generally around one month.
  • Standard operational and debugging logs are normally kept for up to 30 days. Required Google Cloud security and administrator audit logs are kept for 400 days.
  • Encrypted, access-restricted backups are kept on a rolling lifecycle for up to 90 days and are not edited user-by-user; if a backup is restored, we replay deletion requests where required.
  • Support messages are normally kept for up to 24 months after closure unless needed for legal, security, billing or abuse reasons.
  • Raw analytics events are kept for up to 14 months where configurable. Genuinely anonymized aggregate reports may be kept indefinitely. Crash, payment, subscription, app-store and AI provider data follow the relevant provider settings and deletion processes.

We may keep limited records for longer where needed for legal obligations, security, fraud prevention, abuse investigations, disputes, accounting, enforcing our terms or respecting unsubscribe/suppression choices.

International data transfers

Some providers process data outside the European Economic Area, including in the United States. Where Chapter V of the GDPR applies, we rely on an adequacy decision (including the EU-U.S. Data Privacy Framework for certified recipients) or approved Standard Contractual Clauses and supplementary safeguards, as appropriate.

You can ask for more information about the applicable transfer safeguard or a copy of it by contacting hello@campernight.com.

AI and automated decisions

Kai and our moderation or quality tools can generate recommendations, summaries, translations or content flags. Campernight does not use solely automated decisions that produce legal or similarly significant effects for you. You may contact us to request human review of a moderation decision affecting your content.

Children

Campernight is intended for adults and is not directed to anyone under 18. We do not knowingly seek personal data from anyone under 18. If you believe a person under 18 supplied personal data, contact hello@campernight.com so we can investigate and delete it where required.

Third Party Privacy Policies

The Campernight website and app use third-party services that may process information used to identify you. These services help us run the app, host data, provide AI, maps, analytics, payments, email, support, diagnostics, notifications and the shop.

  • Google Analytics

    Google Analytics helps us understand website and blog traffic. On the website, it only loads after you accept analytics cookies in the cookie banner. We do not enable ad personalization in the website GA4 configuration.

  • Firebase

    Firebase supports authentication, app analytics, crash reporting, performance, remote configuration and messaging in the mobile apps.

    App analytics uses app-instance and device/app data to measure product use. Campernight does not set its account UUID in Firebase Analytics or use Firebase Analytics for advertising. Diagnostics can include the Campernight account UUID in Crashlytics to investigate errors. Notification and attribution permissions can be changed in device settings. See Google's Privacy Policy for provider information.

  • OpenAI

    OpenAI provides the AI models used by Kai, summaries, translations and moderation. When you ask Kai a question, we send your message, recent conversation context, app version, language and, when relevant, limited place, trip or location context so Kai can answer. When you are signed in, we also send your stable opaque Campernight account UUID as a request identifier for abuse prevention and service diagnostics; we do not send your name or email for this purpose. Campernight disables Responses API application-state storage. OpenAI may retain limited abuse-monitoring logs under its API data controls and states that API data is not used to train its models by default.

  • Google Maps / Places / Translation / Cloud Logging

    Google Maps, Places, Geocoding, Directions and Translation help provide maps, route planning, place enrichment, search context and translations. Requests may include search terms, place names, coordinates, addresses or text to translate. Google Cloud Logging stores operational logs used to secure, debug and operate the backend.

  • RevenueCat

    RevenueCat helps manage subscriptions, purchases, entitlements, restore purchases and subscription-related support. It may receive app user IDs, purchase information, subscription status and limited attribution or account details.

  • Brevo

    Brevo helps us send marketing emails where permitted and manage unsubscribe or suppression choices. It may receive email, name, language, user ID and marketing preference information.

  • DigitalOcean

    DigitalOcean hosts parts of our infrastructure, images, backups and runtime data. It may process stored images, database backups, logs and server metadata on our behalf.

  • Apple App Store / Google Play

    Apple App Store, StoreKit, Google Play and Play Billing process purchases, subscriptions, refunds and store-managed account/payment data. Deleting a Campernight account does not automatically cancel store-managed subscriptions.

  • Meta / Facebook SDK

    On iOS, the Meta/Facebook SDK initializes with automatic app-event logging and advertiser-ID collection disabled. Attribution identifiers are enabled only after Apple App Tracking Transparency is authorized. You can change ATT permission in device settings.

  • Spreadshop

    Spreadshop provides the embedded merchandise shop. When you interact with the shop, Spreadshop/Spreadshirt manages its own cookies, privacy choices, checkout, order and payment processing under its own policies.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • The right to access – You have the right to obtain information about our processing and a copy of your personal data. Rights requests are free unless a request is manifestly unfounded or excessive.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions. Some records may be retained where required for legal, security, fraud, accounting, backup, dispute or unsubscribe/suppression reasons.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability – Where the legal conditions apply, you may receive data you provided to us in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller where technically feasible.
  • The right to withdraw consent – Where processing relies on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.
  • Rights concerning automated decisions – You have the right not to be subject to a solely automated decision with legal or similarly significant effects, subject to the exceptions in applicable law.

To request access, portability or another right, contact us. You can also use the account deletion control in the app. We normally respond within one month. If a request is complex, we may extend by up to two further months and will tell you within the first month. We may verify your identity and may handle provider requests manually.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live, work or believe an infringement occurred.

Cookies

The website uses necessary cookies to remember your language and cookie choices. If you accept analytics cookies, we also use Google Analytics to understand website and blog traffic. The embedded Spreadshop shop manages its own cookie choices for the shop experience.

You can accept, reject, or change analytics cookie choices from the cookie banner or the Cookie settings link in the footer. Spreadshop choices are managed in the embedded shop or by Spreadshop/Spreadshirt.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes.

Contact Us

If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact us at hello@campernight.com.