Effective 13 October 2026
Camor ("we", "us", "our") is operated by Connect Business Trading Pty Ltd (ABN 75 637 920 042, ACN 637 920 042), an Australian company. Camor helps clubs, churches, associations and families organise themselves online. This policy explains what personal information we collect, why, who sees it, and the choices you have. We wrote it to meet the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and to give people in the European Economic Area, the United Kingdom, New Zealand, Canada, California and elsewhere the rights their own laws provide.
Camor is used by many separate organisations ("groups"), such as a church, a cricket club or a family. For the information you and your group put into Camor, your group's administrators decide what is collected and how it is used, and we process it on their behalf. For your Camor account itself, and for running, securing and improving the platform, we are the responsible party (the "controller" under the GDPR). If you have a question about what a particular group does with your information, ask that group first.
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account and your groups' features (chat, calendar, events, prayer, study, check-in, scheduling, bookings, scoring) | Contract |
| Send service emails: invitations, confirmations, password resets, shift and booking notices, safeguarding and renewal notices | Contract; legitimate interests |
| Keep children safe: age checks, guardian approvals, monitoring of conversations that include a child, recording and tracking the expiry of safeguarding checks | Legitimate interests; legal obligation; protecting vital interests |
| Detect abuse, secure the platform, fix errors | Legitimate interests |
| Improve Camor (only if a site analytics tool is switched on) | Consent where required, otherwise legitimate interests |
| Meet legal obligations and respond to lawful requests | Legal obligation |
| Process sensitive information such as religious beliefs, as part of a religious or not-for-profit body's activities | Explicit consent, or the not-for-profit / religious body exemption |
We do not sell your personal information, and we do not share it for third-party advertising.
Messages, prayers, calendar entries and some study notes are encrypted at rest in our database using application-level encryption, so that a copy of the raw database does not expose their contents. We also use HTTPS for all traffic, restrict who can access production systems, and keep backups. No system is perfectly secure, and we cannot guarantee absolute security.
To help keep children safe, messages in any conversation that includes a child are automatically checked for signs of bullying, racism or grooming using an AI model that runs on our own servers; message text is not sent to an outside AI provider for this. A flag is only a prompt for a human Safekeeping reviewer, who makes the decision. No one is subject to a solely automated decision with legal or similarly significant effect.
Children under 18 can only join a group with the approval of a parent or guardian, who can also decide whether the child has their own login. Children's accounts are subject to additional protections: conversations that include them are monitored by the group's Safekeeping team, and adults in restricted roles need a current safeguarding check on record. We do not knowingly collect personal information directly from a child under 13 without a parent or guardian's involvement. If you believe a child's information was provided without appropriate consent, contact us and we will remove it.
We use trusted providers to run Camor. They may only use information to provide their service to us.
If our business is sold or reorganised, information may transfer to the new owner, who must honour this policy.
Some of the providers above are located outside Australia, including in the United States. Before we disclose personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles. Where GDPR or UK GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
We use cookies that are needed to keep you signed in, protect forms from forgery, and remember your language and light/dark theme. If analytics is switched on, it may set additional cookies. You can block or delete cookies in your browser, though parts of Camor will not work without the essential ones.
We keep your information while your account is open and your group is active. When an account is closed we delete or de-identify its personal information within a reasonable period, except where we must keep some records to meet legal obligations, resolve disputes, or (for a short time) keep backups. Safeguarding records may be kept for longer where a group or the law requires it. A group's administrators may also delete content in their group.
When an administrator deletes an event it is archived rather than erased: it is hidden from everyone, but kept for 12 months together with its responses and event admins. During that time it can be restored by an administrator, which brings it back exactly as it was, or deleted permanently. If no one does, it is permanently deleted after 12 months.
Events you create on your own calendar are deleted straight away. An organisation event you said you are going to disappears from your calendar when it is archived and comes back when it is restored.
Depending on where you live, you can ask us to:
You can update most details yourself on your Profile page. For anything else, email us (section 15). We will respond within 30 days, and may need to verify your identity first. We will not treat you worse for exercising your rights.
California residents have the right to know, delete and correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in California law.
Complaints. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to your local authority: for example the UK Information Commissioner's Office, your EU data protection authority, the New Zealand Privacy Commissioner, or the Office of the Privacy Commissioner of Canada.
If a breach of personal information is likely to result in serious harm, we will notify affected people and the relevant regulator, including under the Notifiable Data Breaches scheme, as required by law.
We may update this policy. When we make a significant change we will post the new version here with a new effective date and, where appropriate, notify you by email or in the app.
Privacy questions, requests and complaints: [email protected] (Attention: Privacy), Connect Business Trading Pty Ltd, Australia.