Privacy Policy

Last updated: 24 August 2026

Draft notice. This policy is generated from OIDDS's actual data model so every section reflects data the platform genuinely collects — nothing here is placeholder boilerplate. We're not a law firm and this isn't legal advice, so have it reviewed by counsel before treating it as your binding policy.

1. Who this policy covers

This policy explains how the OIDDS platform ("OIDDS", "we", "us") collects, uses, and protects personal data for everyone who uses it: instructors applying to and working on programmes, administrators and programme operations staff, and IDP (Instructor Development Pathway) appraisers who review instructor progress. It applies to the OIDDS admin dashboard and API at api.oidds.com and any connected mobile or web application.

OIDDS is operated by CAMP-CHALLENGE, 1 Larkhill Road, Sentosa, Singapore 099394. If you have questions about this policy or your data, contact enquiries@CAMP-CHALLENGE.com.

2. Information we collect

We collect the following categories of personal data, all tied to your use of the platform:

Category	What's included
Account & profile	Name, email address, phone number, country, and login credentials (passwords are stored as salted cryptographic hashes — we never store or can see your actual password).
Instructor development records	Your current rank in the Instructor Development Pathway, rank history, progress against rank requirements, and evidence or statements you submit for appraisal review.
Certifications & regulatory registration	Certification types you hold and their expiry dates (e.g. first aid, water-safety qualifications), and your MOE (Ministry of Education) registration status where applicable.
Programme activity	Programmes you've applied to work, the status of those applications, your assigned role on a programme (e.g. team instructor, station master, Program Lead), and session attendance records.
Session check-in data	When you check in to a session, we record the time and method (in-app button, QR code, or an administrator marking you present). If your device provides it, we may also record your GPS coordinates at the moment of check-in to confirm on-site attendance — this is never used for ongoing location tracking outside that single check-in event.
Points & recognition	Point transactions earned through programme completion, peer review, or manual adjustments, and your resulting tier.
Activity & audit logs	Sign-in/sign-out events and a record of significant actions taken on your account (e.g. an application decision, a rank change) for security and accountability purposes.

3. How we use your information

To create and secure your account, and authenticate you when you sign in.
To match you to programmes, process your applications, and manage your assigned role and schedule.
To track your development through the Instructor Development Pathway and administer rank appraisals.
To verify certifications and regulatory registrations required to deploy you to a programme.
To confirm attendance at sessions you're scheduled for, including via check-in location where provided.
To calculate and record points, tiers, and recognition.
To maintain security logs and investigate misuse, in line with our audit and accountability obligations.
To communicate with you about programmes, your account, or policy changes.

We do not use your personal data for advertising, and we do not sell personal data to third parties.

4. Who we share information with

Programme records (your assigned role, attendance, and readiness) are visible to the partner organization running that specific programme, and to OIDDS administrators and programme operations staff who coordinate staffing. IDP appraisal evidence is visible to the appraisers assigned to review it. We do not share your personal data with any other third party except:

Service providers who host our infrastructure, strictly to operate the platform on our behalf.
Where required by law, regulation, or a valid legal process.
With your consent, for any other purpose we've told you about at the time.

5. Data retention

We retain account and programme records for as long as your account is active, and for a reasonable period afterward to satisfy record-keeping obligations for programme safety, certification history, and audit requirements. You can request deletion of your account as described in Section 7 below; some records (such as audit logs relating to safety-critical decisions) may be retained longer where we have a legal or safety basis to do so.

6. Security

Passwords are never stored in plain text — we use modern salted password hashing and automatically upgrade older hashes when you sign in. Access to instructor and programme data is role-gated, so only staff with an administrative or programme-operations role can view or change staffing records, and every significant change is written to an audit log.

7. Your rights

Depending on where you're located, you may have rights to access, correct, or request deletion of your personal data, to withdraw consent, or to lodge a complaint with your local data protection authority (for example, Singapore's Personal Data Protection Commission, if the PDPA applies to you). To exercise any of these rights, contact us at enquiries@CAMP-CHALLENGE.com.

8. Cookies & local storage

The OIDDS admin dashboard keeps your sign-in session only in your browser tab's local session storage — it is cleared when you close the tab and is never shared across devices or sent to third parties. We do not use third-party advertising or tracking cookies.

9. Children's privacy

OIDDS is a platform for adult instructors, appraisers, and staff, and is not directed at children. We do not knowingly collect personal data from children through this platform.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

11. Contact us

Questions about this policy or how your data is handled? Reach us at enquiries@CAMP-CHALLENGE.com.