Chippewa Campouts is a camp companion for current and alumni adult members. Updated October 5, 2026.
What is stored
We store your sign-in email and password hash, family directory details supplied by you or the Chief, cropped headshots, shared photos and videos, media metadata and tags, photo likes and comments, job assignments, saved server reminders, device notification tokens, support requests, and account security records. Children do not have accounts; a parent manages their information.
Joining the app
Current families register using the tribe’s group code. Alumni can register with an email and password without a group code or Chief approval. New accounts complete family questions and headshots before entering the app. Alumni then have the same member access to the directory and gallery. The app does not independently verify alumni history; the Chief can correct or suspend accounts.
Who can see it
Signed-in current and alumni members can see the family directory, approved headshots, shared photos and videos, like counts and comments with the author’s name. The Chief manages membership, assignments and content review. Sign-in credentials, support messages and reports are not shown to other members. Downloads or screenshots saved by another member cannot be recalled by the app.
Location is your choice
GPS permission is optional. Your location is sent to the server only after you choose to share, and only while inside the campground boundary with a recent, sufficiently accurate position. Other members see a recent position, accuracy and update time. Choose 15 minutes to four hours, or until the confirmed end of the campout. For Fall 2026 that is Sunday, October 4 at 2 PM Eastern. The app remembers your choice on this phone and may resume the same session when reopened; it never extends your chosen end time. Stop sharing at any time. Background updates depend on phone permissions and operating-system limits. Expired positions are not shown; expired location records are removed by scheduled cleanup. This is not an emergency or child-tracking service.
Photo details and optional AI
Dates and embedded GPS information may be read from a photo to suggest its event or location. Originals can contain camera metadata and are available to signed-in members when uploaded. Registration shows an optional activity-tagging choice, selected by default. Submitting with that choice selected allows reduced photo previews to be sent to Cloudflare Workers AI for activities and objects; it is not asked to identify people. Uncheck it before submitting, or turn it off later in Photos to stop future AI processing. Existing accounts retain their saved choice. Manual tag edits remain available.
Importing from Google Photos
You can connect Google Photos to select photos and videos to copy into the private gallery. We only access your selected files and their dates and file details. We do not browse your library or change its contents. Temporary Google access credentials are encrypted and deleted when you close the import or within one hour. Imported files follow the same visibility, reporting, optional activity-tagging and deletion rules as other uploads. Google Photos imports are excluded from automatic face matching; people can be tagged manually. Chippewa’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Videos and activity tags
Mux processes uploaded videos for private adaptive playback. Originals remain in Cloudflare R2. The app sends Mux opaque asset IDs, not the family directory or member contact details. Playback uses expiring links; a link already issued can work for up to 15 minutes. Video AI is a separate optional registration choice: Cloudflare Workers AI can analyze three reduced still frames for activities and objects, without audio analysis or identifying people. Existing members have video AI off until they choose it. These samples can miss moments. Video people tags are manual. Tags are editable.
Optional family matching
A parent may separately opt their family into headshot matching. The app calculates numerical face templates on a device and stores those templates in the private service. Photo face measurements are sent to that service for comparison with enrolled templates, not to the activity-tagging AI. Templates are used only to suggest or add family photo tags, never for advertising or general identification. Turning matching off removes stored templates and automatic family matches. You can correct tags.
Services and security
Cloudflare hosts the app, private database, stored original photos and videos, optional activity AI, recovery email and operational logs. Apple or Google notification services receive device tokens and notification content when alerts are enabled. We do not sell personal information, use advertising SDKs or track you across other companies’ apps. Passwords are hashed; private API requests require an authorized session.
Retention and deletion
Your information stays while the account is active. In App settings → My account & devices → Delete my account, enter your password and confirm. This removes your account, app family profile, family headshots, uploaded photos and videos, your likes and comments, matching templates, location, reminders and devices; it revokes your sessions immediately. Deletion also queues the Mux video for removal. Storage cleanup retries automatically if interrupted. Other members’ photos and independent club records are separate; contact the Chief to request removal of a photo of your family. Private database recovery snapshots are retained for seven days. The next completed backup removes unreferenced media copies. A separate deletion journal prevents these restores from republishing subsequently deleted families, photos or comments. Provider recovery history and previously downloaded copies may persist temporarily.
Offline copies and your choices
An optional offline download stores the schedule, map, directory and jobs on your phone. Sign-out clears the app’s private cache on that phone. Older offline copies on other phones expire after ten days and refresh on reconnect. You may turn off notifications, location, activity AI or family matching separately. Ask the Chief to correct family details or use Support for privacy and deletion requests.