Continuity Plan

1.The honest starting point§

FND is run by one person. That makes some things faster than at a large vendor and one thing riskier: there is no second engineer to take over at 3am. Pretending otherwise would be the easiest thing to disprove, so here is what actually exists instead.

2.If the service goes down mid-session§

1. 2.1A camp keeps running: FND supports the day, it does not control a door, a gate or a payment. The fallback is the paper schedule the camp had before.
2. 2.2The emergency button dials 112 from the device without touching our servers, so it works during an outage.
3. 2.3Daily backups with point-in-time recovery, retained 30 days, and restores tested before each season rather than after an incident.
4. 2.4If we cannot run your season, the fair remedy is a refund for the unused part of the term, as stated in /terms.

3.Your data is not held hostage§

An organization can ask for a full export at any time, without giving a reason, and receive it in a machine-readable format within five business days.

1. 3.1Participants, staff, activities, zones and settings. Photos are included as files.
2. 3.2No fee, no exit interview, no retention offer attached to the request.

4.If FND winds down§

If the company stops operating, partner organizations get at least 90 days' notice by email, and the notice comes before any public announcement.

1. 4.1A final export is offered to every organization during those 90 days.
2. 4.2Unused parts of a paid term are refunded.
3. 4.3After the notice period, all participant data is deleted and deletion is confirmed in writing.
4. 4.4The app and the cabinet keep working during the notice period; we do not shut down first and tell you afterwards.

5.If the operator is unavailable§

Credentials, infrastructure access and this plan are held in a way that a nominated person can reach if the operator cannot act, with the single purpose of keeping the service running or executing the wind-down above.

1. 5.1That person's role is custodial: keep the lights on or turn them off properly, not take over the product.
2. 5.2This clause exists so that an organization's data cannot become unreachable because one individual is unreachable.

6.Review§

This plan is reviewed before each summer season and whenever the company's structure changes. If your procurement process needs it in a specific format, write to hello@findndo.app and we will fill in your template.