Privacy policy

Who is responsible

The Befar Work Cam app and befar.app (the website and sync service) are run by Morten Punnerud-Engelstad, who is the data controller for the personal data described here. Questions about privacy go to the e-mail address below.

Developer: Morten Punnerud-Engelstad
Email: support@befar.app

In short

No tracking, no ads, and we never sell your data. You can use the app without an account: then your photos and jobs stay on your phone and in your own iCloud, and only address search, maps and route planning go through Apple Maps (see below), plus fully anonymous usage counts (see “Usage analytics in the app”). A befar.app account is only needed for the web version, sharing groups, customer links and server storage.

On your phone and in your iCloud

Photos, jobs, notes, drawings and the product catalog are stored on your device. If iCloud is on, the app syncs them through Apple's iCloud (CloudKit) to your own iCloud account. We have no access to your iCloud data; Apple processes it under its own privacy policy.

The app uses your location only if you allow it: to record where a photo was taken, show photos on the map, fill in a job address and plan routes. The position is saved in the photo's metadata, together with what the phone's sensors read at that moment: compass direction, tilt and rotation (pitch, roll, yaw), altitude, air pressure and how accurate the position is, plus the camera's zoom and lens. Address search, maps and route planning use Apple Maps, so the addresses and positions involved are sent to Apple.

With a befar.app account

When you sign in to befar.app, we store what is needed to sync and share:

• Your e-mail address, display name and language.
• Photos you sync, with their metadata: the time they were taken, GPS position (if location was on), the sensor readings described above (compass direction, tilt and rotation, altitude, air pressure, position accuracy) and the camera's zoom and lens, plus notes and drawings.
• Jobs and job data: addresses, sites, notes, custom fields, trips, events, products and prices.
• Your product catalog (suppliers, categories and products).
• Sharing groups: group names, members, their e-mail addresses and roles.
• Your device's push token, so we can send notifications to your phone.
• Purchase linking: App Store transaction IDs and an account identifier (appAccountToken) that ties a purchase to your account.
• A password hash if you set a password, and one-time sign-in codes (only a hash is stored), with the IP address each code was requested from and the IP address of wrong guesses, to stop abuse. These records are deleted after 30 days.

Members of a sharing group can see the jobs and photos that are shared in that group.

Customer links

When you share a job as a link (befar.app/s/…), anyone who has the link can see the parts you chose, for example the job description, photos (with or without drawings, time and place), products, prices and terms. You can stop the link or set an expiry date at any time.

About visitors to a link we store the number of views and the time of the first and last view, and on links that require e-mail, the e-mail addresses that were verified with a code and the IP address each code was requested from (deleted after 30 days). When a customer accepts, we store the name they enter, their e-mail address (when they confirm by e-mail), the drawn signature, IP address, browser (user agent), time, and a copy and a fingerprint (hash) of exactly what was accepted.

Only the person who created the link and the owner of the job can see this information. It documents the agreement between them and their customer. If the owner of the job deletes their account, the links on that job are deleted too, including links other group members made.

Usage analytics in the app

The app only sends usage analytics if you say yes in “Privacy and analytics” (shown once, and always in Settings). Both choices are off until you turn them on. We use Mixpanel as our data processor, with storage in the EU (EU data residency). The website befar.app uses no analytics.

• Usage analytics: which screens and features are used, with counts, durations and simple choices (for example PDF or link), plus app version, iOS version, device model, language and whether you are signed in and on which plan.
• Errors and performance: error codes (never error messages) and how long things like sync take.
• The data is tied to a random ID made on your phone, not to your befar.app account, e-mail or name. You can make a new ID at any time with “Reset analytics ID”. If you turn analytics off, the ID and anything not yet sent are deleted from the phone.
• Without consent the app only sends fully anonymous counts: that the app was opened, which screen was shown, the format of a share and error codes. They carry no ID that is stored (a new random one each time the app is opened), no device model and nothing about you, and nothing is saved on the phone for them.
• Never sent: addresses, job names, notes, products, prices, names, e-mail addresses, photos or what is in them, location or any text you type. Mixpanel receives the IP address of the request when the data arrives; the app tells Mixpanel not to use it to work out where you are.

Who handles data for us

• Hetzner Online GmbH hosts our server in Germany (EU). Everything stored on befar.app is stored there.
• Resend sends our e-mails (sign-in codes, invitations, customer-link codes and receipts) as our data processor. It receives the recipient's address and the content of the e-mail.
• Apple handles payments and iCloud. We never see card details; we only receive information about which subscription or pack was bought. Apple Maps: addresses and positions are sent to Apple for address search, maps and route planning, under Apple's privacy policy.
• Feedback: the app has an optional link to a Google Forms survey. If you use it, Google processes what you enter under its own terms. Feedback sent with the form on befar.app is stored on our server with your account, together with the page you sent it from and your browser (user agent).
• The map page on befar.app loads map tiles from OpenStreetMap and the map library from unpkg.com, which see your IP address when the map loads.
• Mixpanel, Inc. processes the app's usage analytics for us as our data processor, stored in Mixpanel's EU data centres (EU data residency). Only if you say yes, apart from the anonymous counts described under “Usage analytics in the app”.

What we don't do

We don't track you across other apps or websites, we don't use advertising, and we never sell or rent out personal data. The app sends usage analytics only if you allow it (apart from fully anonymous counts, see “Usage analytics in the app”). The website uses no analytics and only uses cookies needed for sign-in, security and your language choice.

Legal basis (GDPR)

• Contract (Art. 6(1)(b)): to provide the account, sync, sharing and storage you have asked for.
• Legitimate interest (Art. 6(1)(f)): security, preventing abuse (including the IP addresses stored with sign-in and link codes), and documenting acceptances on customer links for the person who sent the link.
• Consent (Art. 6(1)(a)): location, push notifications, optional feedback and usage analytics in the app. You can withdraw consent at any time in iOS Settings, in the app under Settings → Privacy and analytics, or by not using the feature.

How long we keep data

• Account data is kept until you delete it or delete your account.
• One-time e-mail codes expire after 15 minutes. The records of code requests and wrong guesses, with their IP addresses, are deleted after 30 days.
• Customer links stop working when they expire or are stopped. The PDF of an accepted offer stays available through the link for 30 days after the link is stopped.
• Usage analytics is kept as long as it is needed to improve the app, at most 5 years.
• When you delete your account, everything above is deleted from our server, including your customer links and their acceptance data, and links other group members made on your jobs. Customers who accepted already have their signed PDF by e-mail or download.

Your rights

You have the right to access, correct and delete your data, to get it in a portable format, and to object to or restrict processing. Contact us at the e-mail address above. You can also complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Delete your account

In the app: open Profile (your befar.app account) and tap Delete account. On the web: sign in, open Profile and use Delete account. Your account and all its data on befar.app are deleted right away. Photos and jobs on your phone and in your iCloud are not affected. Active App Store subscriptions must be cancelled separately in iOS Settings → Apple ID → Subscriptions. A subscription you keep can be linked to a new befar.app account later: sign in with the same Apple ID and tap Restore purchases.

Changes

If we change this policy, we update the date at the top. We tell you about significant changes in the app.