Privacy Policy

Who we are

Berth is operated by Sean Larkin, an individual doing business as "Berth" (sole proprietor, Rhode Island, USA). There is no parent company, no investor dashboard, no ad-tech partner. In this policy, "we," "us," and "Berth" refer to Sean Larkin d/b/a Berth.

• Contact for privacy questions: privacy@driversurvivalkit.com
• General contact: contact@driversurvivalkit.com
• Support: support@driversurvivalkit.com

What the app collects and why

Berth requests the following iOS permissions. You can review or revoke any of these at any time in iOS Settings → Berth.

Location (while using the app, and optionally in the background). Used for turn-by-turn navigation, finding nearby earning zones and points of interest, detecting arrival at stops, and keeping your Live Activity and CarPlay display updated during an active driving session. Location is used on your device and is not uploaded to our servers. Background location only runs while a driving session is active.

Motion & Activity. Used to detect whether you're driving, stopped, or walking, so the app can time wellness breaks and begin or end sessions automatically. Processed on-device.

Camera. Used only for the optional dash-cam feature during driving sessions. Recordings are stored locally on your iPhone unless you explicitly export them.

Microphone. Used for in-app voice commands and voice search, optional dash-cam audio, real-time translation, and — if you choose to send one — voice clips to your driver community.

Speech Recognition. Used for hands-free voice commands. Audio is processed by Apple's on-device Speech framework and is not sent to our servers.

Siri. Used so you can ask Siri to run Berth shortcuts (e.g., "Start a driving session"). Managed by Apple according to Apple's privacy terms.

Bluetooth. Used to connect to an OBD-II adapter if you pair one, to read battery level and trip data from your vehicle.

Notifications. Used for break reminders, wellness check-ins, and arrival alerts. All generated on your device.

What leaves your device

Almost everything Berth does runs locally. The specific cases where data leaves your phone are listed below. Each one is either (a) something the app needs to function, or (b) optional and only activated when you choose to use it.

Subscription purchases (Apple)

If you buy a Berth Pro subscription, the purchase is handled entirely by Apple's App Store and StoreKit. Apple sends us a signed, anonymous receipt that confirms your subscription is active; we do not see your payment method, billing address, or Apple ID. Receipt validation is governed by Apple's Privacy Policy.

Account sync (Supabase, optional)

If you create a Berth account, we use Supabase (operated by Supabase, Inc.) as our backend to:

• store your email address and a hashed password for sign-in,
• sync a small set of records across your devices: visit logs (timestamps for stops you've made), saved points of interest, driver favorites, and daily earnings snapshots.

Supabase data is accessed only by you (via your signed-in account) and by Sean Larkin for operational purposes (diagnosing bugs, responding to support requests). We do not sell this data and do not use it for advertising.

You can use Berth without creating an account. If you don't sign in, nothing syncs to Supabase.

Vehicle connection (SmartCar, optional)

If you connect an EV through the SmartCar integration, Berth requests the OAuth scopes read_battery and read_charge only. That means we can read your battery percentage, estimated range, and charging status. We do not request and cannot read your vehicle's location. You can disconnect at any time from Settings or from your SmartCar dashboard.

Weather

If weather-aware tips are enabled, Berth sends your current latitude and longitude to Apple Weather and/or the U.S. National Weather Service (NOAA) to fetch local conditions. Apple handles its data per Apple's privacy terms. NOAA is a U.S. government service; our requests include a contact email (contact@driversurvivalkit.com) as NOAA requires, but no user identifier.

Event and transit data (optional, your own API keys)

Berth integrates with PredictHQ, Ticketmaster, AviationStack, and MBTA to surface surge-relevant events near you. These integrations are off by default. If you choose to enable one, Berth calls that provider directly using an API key you provide and that is stored in your iPhone's Keychain. Berth does not proxy these calls through our servers and does not receive a copy of the response. Each provider's use of your data is governed by that provider's privacy policy.

Crash and diagnostic logs

Berth logs operational events (e.g., "SmartCar token refreshed," "session started") using Apple's OSLog. These logs stay on your device unless you manually export a sysdiagnose or email a log to support. We do not use Crashlytics, Firebase, Sentry, or any third-party telemetry SDK.

What we NEVER do

• Sell, rent, or share your location history with advertisers, insurance companies, employers, data brokers, or law enforcement (absent a valid legal order).
• Record or transmit audio from your microphone to our servers.
• Build advertising profiles from your driving patterns.
• Track you when the app is closed or backgrounded, except during an active driving session you started.
• Share data with your rideshare platform (Uber, Lyft, etc.) in either direction.
• Use dark patterns to trick you into sharing more than you want.

Where your data lives

On your iPhone. Drive history, preferences, voice samples, saved points of interest, route corridors, and vehicle telemetry are stored locally in the app's SwiftData database and in UserDefaults. iOS encrypts this at rest. If you delete Berth, this data is deleted with it.

Secrets (your API keys, OAuth tokens) in the iOS Keychain. Keychain is encrypted and sandboxed to this app.

Supabase (U.S. region), if you sign in. See "Account sync" above.

Apple's App Store, for subscription receipts. We only see the anonymous validated receipt.

We do not operate a separate data warehouse, analytics warehouse, or CRM. There is no backend user database with your driving data.

How long we keep data

• On-device data: as long as Berth is installed. Uninstalling the app removes all local data.
• Supabase account data: until you ask us to delete it (see "Your rights" below) or delete your account.
• Apple receipts: per Apple's retention policy.

Your rights

Regardless of where you live, you can:

• Delete everything. Uninstalling Berth removes all on-device data. If you have a Berth account, email privacy@driversurvivalkit.com and we will delete your Supabase records within 30 days.
• Export your data. You can export your drive history from Settings → History. If you want your Supabase records, email privacy@driversurvivalkit.com and we'll send them to you within 30 days.
• Revoke permissions anytime. iOS Settings → Berth lets you toggle Location, Microphone, Motion, Camera, Bluetooth, and Speech Recognition independently. Berth will degrade gracefully.
• Disconnect third-party integrations. SmartCar, event providers, and any other integration can be disconnected from Berth's Settings screen. For SmartCar you can additionally revoke access at dashboard.smartcar.com.

If you live in California (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as defined by California law. To exercise any right, email privacy@driversurvivalkit.com.

If you live in the EU, UK, or Switzerland (GDPR / UK GDPR)

The legal bases for processing are: (i) contract — to deliver the features you enabled; (ii) consent — for optional features like SmartCar, event providers, and weather; and (iii) legitimate interests — to keep the app functioning and debug issues. You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Email privacy@driversurvivalkit.com. You also have the right to complain to your local data protection authority.

Children

Berth is not directed to anyone under 17. We do not knowingly collect data from children. If you believe a child has signed up, email privacy@driversurvivalkit.com and we will delete the account.

Security

Data on your iPhone is protected by iOS device encryption. Secrets are stored in the iOS Keychain. Supabase traffic uses TLS. We take reasonable measures to protect data, but no system is perfectly secure.

If we ever discover a breach affecting your personal data, we will notify affected users by email as soon as practicable and in any event as required by applicable law (for example, within 72 hours of confirmation under GDPR, or on the timeline required by the state law that applies to you).

Changes to this policy

If we change this policy in a material way, we'll update the "Last updated" date above and, for account holders, send an email to your account address. Continued use of Berth after a change indicates acceptance.

Contact

Questions, requests, complaints, or curiosities:

Sean Larkin d/b/a Berth
Email: privacy@driversurvivalkit.com

We are a tiny operation — please give us a few days to reply, especially on weekends.