Effective September 3, 2026
BERFO Garage is a maintenance log for the stuff you own and take care of. This policy explains what the app collects, how it's used, and the choices you have. We keep it plain and short on purpose.
BERFO Garage is a personal vehicle-maintenance log. It's made by Berforia LLC and it's part of the BERFO family of tools. We built it because we wanted one — a simple place to write down what you did to a truck, a mower, a boat, a bike, and actually find it again later.
You'll see the word "vehicle" a lot in the app. That's our umbrella term. It covers:
If it has an oil change, a battery, or a filter, it belongs in your garage.
There are three kinds of data in BERFO Garage. We treat each one differently.
We do not collect contacts or advertising identifiers, and we do not use third-party trackers or ad networks. We do not track your device's location directly — the only location we ever see is what's already saved inside a photo's file data, and only when the photo-location setting above is on.
Only to run the app for you — to store and show your maintenance history across your devices, generate reminders, and produce features you ask for (such as reading details from a photo or exporting your history). We do not sell your data. We do not use it for advertising.
To run the service, understand load, and price it correctly, we track a small set of operational metrics tied to your account — things like sign-ins, how many AI requests you make, and how much storage you're using. We do not collect or analyze the content of your vehicles, service records, documents, photos, or AI conversations for analytics — that data exists only to run the app for you, as described above. We do not share these operational metrics with any third party.
Your maintenance records are stored in a Postgres database and your photos in Cloudflare R2, both operated for BERFO Garage. Data is protected in transit with HTTPS and access-controlled on the server. By default, your maintenance data is stored in plain form — that's a deliberate choice so you can search across all your vehicles, sync between your phone and the web, and get to your records from any device you sign into. If you'd rather keep your photos locked down, see the Optional Zero-Knowledge encryption for photos section below.
When a scan saves a photo, it's stored privately in Cloudflare R2 and linked to the record it belongs to. We keep it for as long as you keep that record. You can delete an individual photo or an entire record at any time, and deleting your account removes every photo you've stored. We do not copy photos to your phone's camera roll unless you turn that on in Settings.
Because a scan reads whatever is in the photo, please avoid photographing details you don't want stored — such as full card numbers or Social Security numbers. The app does not extract or save those as data, but they can remain visible in the stored image, so it's best to keep them out of frame.
Many phone cameras save the GPS coordinates where a photo was taken directly inside the photo's file data (this is called EXIF data). When you upload a photo to BERFO Garage, we read that location, if it's there, and store it with the photo — so you can see where a receipt or a repair photo was taken.
This is on by default, and you can turn it off any time in Settings → Privacy & Data. Turning it off stops us from reading location out of any photo you upload from that point forward. It doesn't remove location already saved on photos you uploaded earlier — you can delete an individual photo (or its record) if you want that gone too. If Zero-Knowledge encryption for photos is on, a photo's location is sealed on your device the same as everything else that toggle covers — see the section below.
Photos often carry sensitive stuff — your name, your address, a VIN, a policy number. So we let you turn on Zero-Knowledge encryption (we call it ZK) for photos.
Here's how it works when you turn it on:
The trade-off: if you lose your device AND your recovery phrase, we can't get your photos back. Not "we won't" — we CAN'T. That's what makes it Zero-Knowledge.
ZK is off by default because most people want the convenience of cloud photos over the extra care of a recovery phrase. It's your call. You can turn it on any time in Settings.
Photos you took before turning ZK on stay in plain form until you re-upload them under ZK. We'll walk you through that when you flip the switch. Maintenance data (service records, notes, DTC lookups) stays in plain form even with ZK on — so search and cross-device sync keep working. We're expanding what ZK can cover over time.
We use Sign in with Apple. That gives us an anonymous identifier from Apple — not your real Apple ID, not your password. If you choose to share your email through Apple Sign In, we use it only to reach you about your account (a receipt, a security notice, a heads-up about a change to this policy).
We don't build a marketing list. We don't sell it to anyone. We don't hand it to a "trusted partner" — because there is no trusted-partner list. Berforia LLC is the whole company.
No ads. No ad networks. No tracking pixels. No third-party analytics that identify you. No selling your data. No sharing your data with data brokers. No AI training on your content.
If we ever need to add something like crash reporting, we'll tell you first, keep it anonymous, and give you a switch to turn it off.
Here's the piece most privacy policies bury or dodge. We're going to say it clearly.
8a. What it is. The developer of BERFO Garage — Bill Detlefsen at Berforia LLC — can access user content that isn't sealed with ZK. That means plain-form maintenance data and non-ZK photos. This is done through an admin-only dev-view built into the backend.
8b. What it's for. Two things: helping you when you write in with a support request ("my fill-ups aren't syncing — can you look?"), and finding bugs when something breaks. That's the entire list.
8c. What it is NOT for. Browsing. Curiosity. Marketing research. Sharing with anyone. Selling. Training AI. Building a profile of you.
8d. What ZK does to this. If you've sealed a photo with ZK, the admin dev-view can't read it. Not "won't" — literally can't. The sealed bytes are the sealed bytes.
8e. Every access is logged. Every time an admin opens the dev-view, the server writes an audit record — timestamp, which admin, which user was viewed, what action was taken. Nothing is invisible.
8f. You can ask. Email us at privacy@berforia.com and we'll send you the audit trail for any admin access to your account. No hoops.
8g. We're shrinking this. As BERFO Garage matures, we're moving more data classes under ZK. Photos are first. The plan is that "admin dev-view can read your stuff" becomes a smaller and smaller footprint over time. We'll note in the app when a class flips.
The admin dev-view described here is a developer support access path, and it is distinct from the invite-based access to the app itself (see Access to the app below).
BERFO Garage is currently invite-based: new accounts start as pending until approved by the operator or unlocked with an access code. This does not change what data is collected.
You own your data. You can leave any time.
To delete your account: go to Settings → Account → Delete Account. We'll confirm once, then remove your maintenance records, your photos (sealed and unsealed), and your account info from our servers within 30 days.
Some things linger a little longer:
If you'd rather export first, use Settings → Account → Export my data. You'll get a zip file with your records in a plain format.
BERFO Garage isn't designed for kids under 13. We don't knowingly collect data from anyone under 13. If you're a parent and you think your kid signed up, email privacy@berforia.com and we'll delete the account.
If we change something material — new data we collect, a new use for existing data, a change to how ZK works — we'll tell you inside the app before the change takes effect, and we'll update the effective date at the top of this page. Small edits (typo fixes, clearer wording) get a bumped effective date and nothing else.
Privacy questions, data requests, audit-trail requests, deletion help — all one address: privacy@berforia.com
Berforia LLC. We answer real emails from real people. Usually within a few business days.
know your car. keep it running.
BERFO™ and BERF® are trademarks of Berforia LLC. © 2026 Berforia LLC. All rights reserved. · Disclaimer