Privacy Policy
Camp Masters Tap to Pay

EFFECTIVE DATE: 06/08/2026
LAST UPDATED: 06/09/2026

Camp Master’s Privacy Policy

- Camp Masters – Tap to Pay is a mobile payment-terminal companion app used to accept in-person, contactless payments for CAMP MASTERS popcorn fundraisers. This Privacy Policy explains how Ramsey Popcorn Co., Inc. collects, uses, shares, and protects information when the Camp Masters – Tap to Pay app is used on iPhone or Android devices. 
- The app is designed for scouts, parents, unit leaders, volunteers, and event staff who are helping accept payments at storefronts, events, booths, and door-to-door sales. It is not a general consumer shopping app, and users do not create standalone accounts inside this app.

Who we are

- Camp Masters – Tap to Pay is operated by Ramsey Popcorn Co., Inc., doing business as Camp Masters Popcorn.
Ramsey Popcorn Co., Inc. 5645 Clover Valley Rd. NW
Ramsey, Indiana 47166
Email: customerservice@ramseypopcorn.com
Office Hours: 8 AM - 4:30PM Eastern, Monday-Friday.
For purposes of this Privacy Policy, “Camp Masters,” “we,” “us,” and “our” refer to Ramsey Popcorn Co., Inc. and Camp Masters Popcorn.

Scope

This Privacy Policy applies only to the Camp Masters – Tap to Pay mobile app, including the iOS app with bundle ID com.ramseypopcorn.campmasterstaptopay and the Android app with package name com.camp.ics.
This policy does not cover separate websites, ordering systems, fundraiser portals, or services that may have their own privacy policies. The app is launched from the CAMP MASTERS ordering system when a cashier starts an in-person sale, and it returns the user to the ordering or cashier experience after the payment process is complete.

Information we collect

The app collects or processes only the information needed to support an in-person contactless payment.
The app may process the following information:
Sale and payment session information, including the sale ID, also called cmSaleId; a short-lived signed session token; payment amount; Stripe location ID; PaymentIntent ID; Stripe connection token; return URL; and return HMAC used to return the user to the cashier or ordering app.
Location information, when the app is in use, as required for Stripe Terminal in-person payment processing and fraud prevention. The app’s location permission message is: “Location access is required to accept payments.”
Device-local app information, stored on the device only, such as a terms acceptance flag, Tap-to-Pay setup completion flag, pending sale ID or token during the terms flow, Stripe location ID cache, and temporary connection or session state during an active payment.
Device permissions needed to operate the app, including location for payment processing, NFC on Android for contactless card or mobile-wallet taps, Bluetooth declared for Stripe Terminal SDK compatibility, and network access for API calls to Camp Masters and Stripe.
The app does not collect or store full payment card numbers, CVV codes, or magnetic-stripe data on Camp Masters servers or in the app. The app does not collect advertising IDs, does not sell personal data, and does not use behavioral advertising profiles.

How we use your information

We use information processed through the app to:
Start and complete an in-person contactless payment transaction.
Connect the sale started in the CAMP MASTERS ordering system with the payment session in the Tap to Pay app.
Initialize Stripe Terminal and payment services needed to accept a customer’s card or mobile-wallet payment.
Verify that a payment session is valid and connected to the correct fundraiser sale.
Return the cashier or volunteer to the ordering or checkout experience after payment.
Support fraud prevention, payment security, troubleshooting, and app functionality.
Maintain temporary setup and session information on the device so the app can operate correctly.
We do not use location data, payment session data, or device-local app information for advertising or unrelated tracking.

How we share your information

We share or make information available only as needed to operate the payment process and related app functionality.
We may share payment session and transaction-related information with Stripe, Inc. for payment processing, Stripe Terminal, PaymentIntents, connection tokens, and related payment services. Stripe’s privacy policy is available at https://stripe.com/privacy.
For iPhone users, Apple Inc. may process information as part of Tap to Pay on iPhone and Apple platform services. Apple’s privacy policy is available at https://www.apple.com/legal/privacy/.
For Android users, Google LLC may process information as part of Tap to Pay on Android, Google Play Services, Android platform services, and related device functionality. Google’s privacy policy is available at https://policies.google.com/privacy.
Camp Masters and Ramsey Popcorn systems, including app.campmasters.org and demoapp.campmasters.org where applicable, are used to create payment sessions, validate signed handoff tokens, coordinate sales, and return users to the ordering or cashier flow.
We may also disclose information if required by law, regulation, legal process, or to protect the rights, safety, and security of Camp Masters, our users, customers, payment systems, or others.
We do not sell personal data. We do not share information with advertising networks for behavioral advertising.

Payment card data

Camp Masters – Tap to Pay does not store full payment card numbers, CVV codes, or magnetic-stripe data in the app or on Camp Masters servers.
Payment card and mobile-wallet tap data is handled by Stripe, Apple for Tap to Pay on iPhone, and Google for Tap to Pay on Android, as applicable. Camp Masters receives and uses payment session and transaction references, such as Stripe PaymentIntent IDs and related transaction status information, so the fundraiser sale can be completed.
Card data is not stored on the volunteer’s device by Camp Masters.

Location Data

The app requests foreground, when-in-use location access because Stripe Terminal requires location information for in-person payment processing and fraud prevention.
Location access is used only to support payment processing and payment security. We do not use location data for advertising, unrelated tracking, or behavioral profiling.
If location permission is denied, the app may not be able to accept contactless payments.

Data retention

The app stores limited information locally on the device for app functionality, such as terms acceptance, Tap-to-Pay setup status, Stripe location ID cache, and temporary active-session state. Temporary session information is used during the payment flow and is not intended to be kept longer than needed for app operation.
Payment transaction records and related sale information may be retained by Camp Masters, Ramsey Popcorn, Stripe, Apple, Google, and related service providers as needed for payment processing, accounting, fraud prevention, legal compliance, dispute handling, reporting, and business records.
Short-lived signed session tokens are designed for temporary use and expire after a brief period, typically about five minutes.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information processed through the app. These safeguards include signed session handoff tokens, short-lived payment-session credentials, secure network communication with Camp Masters and Stripe systems, and use of established payment-processing providers.
No method of transmission or storage is completely secure. However, the app is designed so that sensitive card data is handled by payment providers and platform services rather than stored by Camp Masters in the app.

Your choices and rights

You may choose whether to grant location permission to the app. Location access is required to accept in-person contactless payments, so the app may not function properly for payment acceptance if this permission is disabled.
Depending on where you live, you may have privacy rights such as the right to request access to personal information, request deletion of personal information, or ask questions about how information is used. To make a privacy request, contact us at campmasters@ramseypopcorn.com.
We will review requests and respond as required by applicable law. We may need to verify your request before taking action.
California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, delete, correct, and limit certain uses of personal information. Camp Masters does not sell personal information and does not share personal information for cross-context behavioral advertising.

Children’s Policy

Camp Masters fundraisers may involve scouts and youth organizations, but Camp Masters – Tap to Pay is intended to be used as a payment-terminal companion by adults, parents, unit leaders, volunteers, and event staff who are accepting in-person payments.
The app is not intended for children to create accounts or submit personal information directly inside the app. We do not knowingly use the app to collect personal information from children for advertising or behavioral profiling.
If you believe a child has provided personal information through the app in a way that is not part of the intended payment-terminal use, please contact us at campmasters@ramseypopcorn.com.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our app, payment services, legal requirements, or business practices.

When we update the policy, we will revise the “Last Updated” date above. The updated policy will be posted at https://www.campmasters.org/privacypolicy. For questions about this Privacy Policy, privacy requests, or the Camp Masters – Tap to Pay app, please contact us: Ramsey Popcorn Co., Inc. dba Camp Masters Popcorn 5645 Clover Valley Rd. NW Ramsey, Indiana 47166 Email: campmasters@ramseypopcorn.com Office hours: 8 AM–4:30 PM Eastern, Monday–Friday