Privacy notice
Last updated: 4 October 2026
Cambase is an app that film crews use to track camera kit. This notice tells you which personal data Cambase collects, why, where it goes, and how long it stays. It also tells you about your rights.
Who is responsible for your data
Tom Littlewood runs Cambase in the United Kingdom, and is the data controller for the personal data in Cambase.
The data that Cambase collects
Your account. Your email address, your display name and your password. Cambase does not keep your password as text. Supabase keeps only a hashed copy.
Google sign-in. If you use "Continue with Google", Google sends Cambase your name, your email address, a link to your profile picture and your Google account ID. Cambase uses these to sign you in. Cambase gets no other data from your Google account.
Your work on a project. When you check kit in or out, move kit, count kit, receive kit or report a fault, Cambase records your name and the time. This history is the record of where the kit went, so all members of the project can see it.
Photos. Photos that you add to items or faults. A photo can show people or places.
Data on your device. Cambase keeps your settings, a copy of your project data for offline use, and the app files on your device. Cambase uses this data only to make the app work. The app also keeps a list of recent problems on your device. The list goes to nobody unless you copy it and send it.
Cambase does not use advertising, analytics or tracking cookies.
Why Cambase uses your data
- To give you the service: your account, your projects and the kit records. The legal basis is the contract between you and Cambase.
- To keep a correct history of the kit, and to keep Cambase secure and backed up. The legal basis is legitimate interests. A production needs to know who moved its kit and when.
- To send you account emails, for example an invite or a password reset. Cambase does not send marketing emails.
Who processes your data
These companies store or carry data for Cambase. They process it only to supply their service.
| Company | What it does | Where |
|---|---|---|
| Supabase | Keeps the database. Signs you in. | London, UK |
| Resend | Sends account emails, for example invites and password resets. It gets your email address and the text of the email. | Ireland, EU |
| Cloudflare | Hosts the app at cambase.co.uk. Keeps the nightly backups. Delivers some code libraries. | Global network |
| jsDelivr | Delivers one code library to your browser. It sees your IP address. | Global network |
| Signs you in, only if you use "Continue with Google". The Google button loads on the sign-in screen. | Global |
Cambase keeps photos on its own server in the UK, not with these companies.
Some of these companies can move data outside the UK. When they do, they use the legal safeguards that UK law requires.
How long Cambase keeps your data
- Your account: until you ask Cambase to delete it.
- Project data and photos: while the project exists. If you leave a project, your name stays in the history of that project, because the history is the record of the kit.
- Backups: 30 days. After 30 days, Cambase deletes each backup.
Your rights
You can ask Cambase to:
- Give you a copy of your personal data.
- Correct data that is wrong.
- Delete your data.
- Stop or limit how it uses your data.
- Give you your data in a format that a computer can read.
To make a request, send an email to support@cambase.co.uk. Cambase replies within one month.
If you are not satisfied with the reply, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this notice
If Cambase changes how it uses your data, it updates this page and the date at the top.