Privacy Policy

Last updated: September 22, 2026

Welcome to GRASS (the "Service"), operated by GRASS Outdoor CO., Ltd. ("we"). We are responsible for the collection, processing, and use of personal data described in this policy. We understand that your personal privacy is extremely important. This Privacy Policy explains how we collect, use, store, and protect your personal data. This policy explains our data practices and does not waive your personal data rights. We obtain separate consent where required by law.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, phone number, display name, and password provided during registration.
  • Profile Information: Age, gender, bio, interest tags, and Outdoor Passport content you choose to fill in.
  • Photos & Media: Personal photos and activity photos you upload.
  • Communications: Messages sent and interaction records within the app.
  • Support and Safety Records: Reports, appeals, and relevant evidence provided by you or other users, along with support correspondence, warnings, account decisions, and review records.

1.2 Automatically Collected Information

  • Device Information: Device model, operating system version, unique device identifiers.
  • Location Information: GPS location data collected with your consent for "Find Buddy" and "Group Adventure" features.
  • Usage Data: App usage frequency, feature interaction records, and browsing behavior.
  • Log Data: IP addresses, access times, and error logs.

2. How We Use Your Information

We use the collected data for the following purposes:

  • Providing, maintaining, and improving the Service's features and user experience.
  • Matching you with suitable outdoor activity partners and recommending relevant activities.
  • Sending service-related notifications, security alerts, and account updates.
  • Detecting, preventing, and addressing fraud, misuse, or security issues.
  • Conducting data analysis to improve service quality and develop new features.
  • Using content you post to promote the Service within the scope of your content license and applicable law, without making private conversations public for marketing. We obtain separate consent where legally required for the use of personal data. When lawfully using personal data for marketing, we provide a way to opt out and stop that marketing use if you opt out.
  • Complying with legal requirements and responding to lawful data requests.

Safety Detection, Reports, and Appeals

To prevent fraud, harassment, spam, and other misuse, and to handle reports, appeals, and support requests, automated tools and authorized personnel may analyze or review account information, message content and context, interactions, device information, and prior enforcement records relevant to a safety risk or case. Safety detection does not require a report first; processing remains limited to what is needed for these purposes.

Automated tools can help identify risks, organize evidence, and suggest actions, but their results can be wrong. Users may request human review of account decisions by providing specific reasons or new evidence. Safety review does not make private conversations public or authorize their use in advertising or promotion.

3. Information Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Other Users: Your public profile information (display name, photos, Outdoor Passport) will be visible to other users.
  • Service Providers: We may engage cloud storage, support, analytics, and safety analysis providers to process necessary data. Their work is limited to agreed service purposes, and we require confidentiality, security, and data-use restrictions.
  • Legal Requirements: When required by law, court order, or lawful government request.
  • Safety Protection: Where lawful and necessary to protect users, resolve disputes, or enforce our terms, we may provide relevant data to competent authorities or service providers acting on our behalf.

We generally do not disclose a reporter's identity, the original report, or information identifying third parties to the reported user, except where legally required. We may explain the type of violation and main reason for an account decision while protecting other users' information. A dispute in public reviews or on social media does not itself justify publishing private conversations or personal data.

4. Data Storage and Security

  • Your data is stored on protected cloud servers using industry-standard encryption.
  • We implement access control measures, allowing only authorized personnel to access personal data.
  • We regularly review and update our security measures to address emerging threats.
  • While we strive to protect your data, we cannot guarantee absolute security of internet transmissions.

Account, message, and support data is kept for as long as needed to provide the Service and meet the purposes above. After account deletion or termination, relevant records may be retained where lawful and necessary to resolve open cases, meet legal obligations, or prevent evasion of enforcement. Once no longer needed, that data is deleted or de-identified; a report alone does not justify keeping an entire chat history indefinitely. We comply with any legal requirement to delete data or stop processing it sooner.

5. Your Rights

You have the following rights regarding your personal data:

  • Right of Access: Request access to the personal data we hold about you.
  • Right of Correction: Request correction of inaccurate or incomplete personal data.
  • Right of Deletion: Request deletion of your personal data (some data may be retained for legal obligations).
  • Right to Restrict Processing: Request that we stop collecting, processing, or using your personal data.
  • Right to a Copy: Request a copy of your personal data. Additional portability rights apply where required by applicable law.

To exercise any of these rights, please contact us at service@grass.camp.

We may reasonably verify your identity to protect your data. Where a request involves other people's data, legal retention duties, or other legal limits, we will handle it under applicable law and explain what we can provide. Account suspension alone is not a reason to refuse a request. You may choose not to provide optional information, but without information needed to verify an account or handle a case, we may be unable to complete that service or review.

6. Cookies and Tracking Technologies

This website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help us remember your preferences and analyze website traffic. You can control cookie usage through your browser settings.

7. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect personal data from users under 18. If you become aware of a minor using the Service, please notify us immediately, and we will take appropriate steps to delete the relevant data.

8. Changes to This Privacy Policy

We may update this policy and will show the updated date. For material changes, we will explain the changes and their effective date through an in-app notice or email. Where new processing requires separate consent by law, we will obtain that consent first; updating this policy does not replace it.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: