BSF186 app - Privacy policy
Last updated: 2026-10-23. This policy covers the BSF186 iPhone app published by Maragato, and the waitlist on this website.
What we collect
- Account: your email address and a password, managed by Amazon Cognito. Sign-up and password-reset codes are emailed through Resend, which receives only your email address and the code. When you ask the app to email you an export or your lists, Resend also receives that PDF or CSV file and sends it to your own address only.
- Photos you take in the app or choose from your photo library, and the inventory (item descriptions, categories, values, vehicle identification numbers) produced from them and edited by you.
- Importer profile: the details you type for the CBSA BSF186 form (name, date of birth, addresses, dates, family members).
- Purchases: Apple processes payment. We receive a signed transaction and keep its identifier to credit your account; we never see your card.
- Diagnostics: crash reports (Sentry) that contain no personal data - no name, email, sign-in tokens or photos - and anonymous usage counts (sign-up, first photo, purchase, export).
- Product analytics: the app sends usage events to HeyCatch, a third-party analytics service: the screens you open and the buttons you tap, sign-up, and purchases with the number of credits added. Events carry your account identifier and email address, your device model, iOS version, app version, language, time zone and screen size, and the IP address they are sent from. They never contain your photos, inventory or importer profile.
Where your data is stored
All data is stored on Amazon Web Services in the United States (region us-east-2). Photos are encrypted with a key that exists only for your account. Exports are encrypted at rest.
On your iPhone, photos waiting to upload are kept inside the app only, are excluded from device backups, and are deleted from the device after they are transferred. Photos taken in the app are never saved to your photo library. The app reads only the photos you pick in the iOS photo picker, and removes their location and other metadata before upload.
How we use it
Photos are analysed by an AI model (Amazon Bedrock) to draft inventory items. Your data is used only to provide the app: building your lists and generating your BSF186 PDF. We do not sell your data.
Vehicle broker contact
If you turn on the broker option for a vehicle, we record that choice and when you made it. No broker receives your data until a broker service exists and you are told about it.
Waitlist
If you join the waitlist on this website, we store your email address, when you joined and which page you joined from, in Amazon DynamoDB in the United States (region us-east-1). We use it only to email you once, when the app is on the App Store. It is not shared or sold, and no other data is collected by the form. To be removed, write to bsf186@maragato.ca.
Deleting your data
In the app, Settings → Delete account removes your encryption key, photos, inventory, exports, profile and sign-in from our servers immediately, and clears photos still waiting to upload from your iPhone. Analytics events held by HeyCatch are not removed by Delete account; email us and we will have them deleted. You can also email us to request deletion of anything else.
Contact
Questions about privacy: bsf186@maragato.ca