Privacy rules

• List endpoints return first name, last initial, numeric id, and a profile URL.
• Medical information, dietary needs, allergies, disabilities, addresses, emails, and phone numbers are never returned.
• You may submit medical and contact details when creating people or posting a registration form. You may not collect camp consent (e-signature) over OAuth2. The primary contact is emailed the permission slip and a separate signature request.
• OAuth is always for one camp. Billing accounts cannot be authorised.
• Authorising an app is your organisation’s choice. Scout Camp is not liable for data the app receives or for medical details it submits when registering people. See the Terms & Conditions (Section 9).