Privacy Policy
2. Privacy Policy — MyCampLab
1. Data Controller
MyCampLab is operated by:
Winston Holguin
Netherlands
Email: info@mycamplab.com
Winston Holguin is the data controller responsible for personal data processed through MyCampLab.
2. Information We Process
This section describes data the current MyCampLab app actually collects. We do not list data types for features we have not shipped.
Account Information
We collect:
name;
username;
email address;
password (stored as a hash);
account ID.
We do not use a third-party login provider.
Profile Information
We collect:
profile picture;
biography;
optional social links you add;
connected camera name, model and colour;
followers;
accounts followed.
Community Data
We collect:
photographs you publish;
looks and filter files you create or claim;
captions and descriptions;
optional city or place tags;
likes;
comments;
saved looks;
reports you send.
Messages
We collect direct messages and related metadata, including:
message text;
sender and recipient;
time sent.
We process messages to deliver the conversation, prevent abuse, and handle reports or moderation. Messages are not public community posts.
Location
If you choose to tag a photo, the app may use the device's location on your phone to suggest a city or public place.
We store the place label with the post. We do not run background location tracking.
Face ID and device unlock stay on your device. We do not receive biometric data.
Technical Information
crash and product events the app sends to our own API, such as a crash description or a like or follow event;
IP address in ordinary server logs, used for security and to operate the service.
We do not use a third-party analytics or crash-reporting SDK.
Subscription Information
whether MCLAB+ is active;
product ID (monthly or yearly);
purchase or restore status.
When payments are processed by Apple, MyCampLab does not receive your card or bank details.
3. Why We Use Your Information
We process this data in order to:
create and manage accounts;
sign you in;
show profiles and the community;
publish photos and looks;
deliver and moderate direct messages;
allow follows, likes and comments;
manage monthly look claims;
remember connected cameras;
verify MCLAB+ status;
handle reports and abuse;
fix crashes and keep the service running;
answer support requests at info@mycamplab.com;
comply with legal obligations.
4. Legal Bases for Processing
Depending on the activity, we rely on:
performance of a contract (your account, community, messages, looks);
consent (optional location tag; Face ID on your device);
legitimate interests (security, abuse prevention, crash events);
compliance with legal obligations.
Where processing is based on consent, you may withdraw that consent.
5. Photos Used for Local Preview
If you select a photograph only to preview or create a look on your device, we process that image locally when we do not need to upload it.
A local preview is not published. If you choose to publish, the image is uploaded to our servers.
6. Public Content
Content you publish may be visible to other users:
profile photos;
photographs;
looks;
usernames;
biographies;
captions;
place tags.
Direct messages stay between the people in the conversation, except where we need to review a report.
Do not publish information you want to keep private.
7. Moderation
Staff can review reports and remove posts, hide content or suspend accounts.
We may send public captions, direct-message text and post photos to OpenAI’s Moderation API when that toggle is on in our admin settings. OpenAI receives only the content being checked, not your password. If moderation is off, nothing is sent to OpenAI.
8. Messages and Safety
We store chat so you can read the thread later.
We may access a conversation if someone reports it, if we must investigate abuse, or if the law requires it.
Blocking a user stops further messages from that account.
9. Third-Party Service Providers
The processors we use today are:
Hetzner (Germany) — hosting, database and file storage;
Apple — App Store payments and subscription management;
OpenAI — optional moderation for captions, chats and post photos (only when enabled).
Authentication is provided by MyCampLab itself.
We do not currently use a separate analytics or crash-reporting vendor. Email is sent through your configured SMTP host. Text moderation may use OpenAI when enabled in admin.
Those providers receive only the data needed to run their part of the service. If we add a processor, we will update this list.
10. Apple
If you buy MCLAB+ through the App Store, Apple processes the payment under Apple's privacy policy.
MyCampLab only receives what we need to know whether Plus is active.
11. International Data Transfers
Hosting is in Germany. Apple may process payment data outside the Netherlands or the EEA.
Where required, we use appropriate safeguards for transfers.
12. Data Retention
Account, profile, public posts, looks, follows and messages: for as long as the account is open.
After you delete your account: we remove that personal data and community content within 30 days, unless we must keep a record longer for law, fraud, security or a dispute.
Crash and product events on our servers: up to 90 days.
Server access logs including IP address: up to 30 days, unless needed for a security investigation.
Reports and related moderation records: up to 12 months.
Optional place tags: with the post, and they are deleted with the post or the account.
Password-reset codes: a few hours, then they expire.
MCLAB+ status: while we need it to provide the subscription, and it is removed with the account. Cancelling Plus in Apple settings does not by itself delete your MyCampLab account.
13. Account Deletion
You can delete your MyCampLab account in the app.
That does not cancel an App Store subscription. Manage or cancel MCLAB+ in your Apple subscription settings.
14. Your Privacy Rights
Depending on applicable law, you may have rights including:
access to your data;
correction;
deletion;
restriction of processing;
objection;
data portability;
withdrawal of consent.
Requests: info@mycamplab.com
15. Security
We use HTTPS, hashed passwords, access controls and staff-only admin tools.
No online system is perfectly secure.
16. Children
MyCampLab is for users aged 13 years and older. The Terms of Use use the same age.
In the EU and some other countries, a parent or guardian may need to consent before someone under 16 (or the age set by that country) can use an online service. We do not knowingly create an account for a child below 13, or below the age that applies in their country without the required consent.
If we learn that an account was created in breach of those rules, we will delete it and the related personal data.
17. Changes to This Privacy Policy
We will update this policy when the data we collect or our processors change.
The date at the top is the last update.
18. Contact
Winston Holguin
info@mycamplab.com