Last updated:

Who we are

Wampums is a management app for scout units and youth groups, designed and run in Quebec by Christian Sabourin. This policy covers the wampums.app website and the Wampums app.

Each unit that uses Wampums decides what information it collects about its members, and why. Wampums hosts and processes that information on the unit's behalf, and only to make the app work.

Person in charge of personal information

Christian Sabourin is the person in charge of the protection of personal information for Wampums. For any question, request or complaint: info@christiansabourin.com.

Information we handle

In the app

  • Accounts: name, email address, password (stored hashed, never in plain text), preferred language and roles in the unit.
  • Registered youth: name, date of birth, section, attendance, badges, points, completed forms and signed permission slips.
  • Health and safety, when the unit asks for it: health form, allergies, medications, doses given and emergency contacts.
  • Families: guardians, contact details and links to the youth.
  • Unit finances: fees, payments recorded by leaders, expenses and receipts. Wampums receives no payment card data.
  • Messages and files that leaders send or upload.
  • Technical server logs, such as IP address and request times, for security and troubleshooting.

On the wampums.app website

  • What you write in the demo request form: name, email, unit, phone and message.
  • Google Analytics audience measurement, according to your choice in the cookie banner.

What we do with it

The information is used to run the unit: taking attendance, tracking progress, preparing activities, looking after the youth's health, keeping families informed and managing finances. It is also used to protect the service and to answer you when you write to us.

Wampums sells no information, shows no advertising and builds no commercial profiles.

Who can see it

  • Within a unit, each person sees only what their role allows. Parents see their own children's records.
  • A unit never sees another unit's records.
  • Christian Sabourin may access data to provide support, maintenance and security for the service, and only for that purpose.

Where it is kept

Each unit's database and files are hosted in Quebec, at OVHcloud's Beauharnois data centre. Everything travels over HTTPS, and backups are encrypted.

Outside services

A few features rely on providers, which receive only what they need to deliver their service:

  • Brevo (France) delivers the emails Wampums sends. It receives the recipient's address and the message. Most messages are written by the unit; two automatic emails name a youth: the permission slip to sign, sent to their parents, and the incident report, sent to the people in charge, which also describes the injury and first aid given.
  • Groq or OpenAI (United States) provide the optional AI-assisted writing. They receive only the text a leader submits, never your unit's records.
  • WhatsApp and Google Chat, if the unit turns them on, receive the announcements posted to those channels.
  • The notification services of Apple, Google or Mozilla deliver notifications to the devices that accepted them.
  • Veryfi (United States), if the unit uses receipt reading, receives the image of the receipt to read.
  • Google Analytics measures visits to the wampums.app website only, never the app.

Cookies and storage on your device

On wampums.app, Google Analytics sets cookies only if you accept them. Without your consent, Google receives only limited measurements, without cookies. Your choice is kept for 180 days and can be changed at any time with the "Cookie settings" button at the bottom of the page.

The app keeps your session and a copy of your unit's data on your device so it works without a connection. It uses no advertising cookies. On a shared device, sign out when you are done.

How long we keep it, and erasure

Records are kept as long as the unit uses Wampums, so its history stays available: a youth who leaves the unit remains in the attendance and badge history.

When a family asks, the unit can permanently erase a youth's record: their registration, attendance, badges, forms and health data, along with guardians and parent accounts left with no other child and no other role. Copies in backups disappear as the backups are replaced.

A unit that stops using Wampums can ask for all its data to be deleted.

Your rights

You can ask to see the information about you or your child, have it corrected, withdraw your consent or have it erased. Contact your unit, or write to info@christiansabourin.com. We answer within 30 days.

Information about a youth under 14 is collected with the consent of their parent or guardian.

If our answer does not satisfy you, you can file a complaint with the Commission d'accès à l'information du Québec.

Privacy incidents

If an incident affects personal information, we take steps to limit its consequences and record it in a register. If it presents a risk of serious harm, we notify the people concerned, the unit and the Commission d'accès à l'information.

Changes

When this policy changes, the date at the top of the page changes too. Units are told about any significant change.