Security
Last updated October 19, 2026. ValkFire is published by BonkWorks Studios LLC.
Your department's records are its own. This page says how they are kept safe, in plain words, so a chief, a council or a city clerk can check it.
Hosted on Google Cloud in the United States
The records live on Google Cloud, in a United States region: the same infrastructure that runs Gmail and Google Drive.
Encrypted everywhere
Google Cloud encrypts everything at rest with AES-256, and every connection between the app and the servers is encrypted in transit (TLS).
Access the chief grants
Members see and change what the department's administrators give them. That is enforced on the server by its security rules, not just hidden in the app.
Nothing disappears by accident
- Only an administrator can delete a record.
- Anything an administrator deletes goes to Recently deleted for a year and can be put back. Training records are kept for good.
- A few copies are removed on a schedule the department sets: a patient on an ambulance agency's handoff list, the live radio after 4 hours, and search-and-rescue drone photos after the retention the search chose. The privacy page lists them.
- Every change is logged with who made it and when.
Backed up daily
The database is backed up every day and can be recovered to any minute of the last seven days. Deleted photos and files can be recovered for 90 days.
Your data is yours
Administrators can export the department's records, documents and photos as a single file, any time and on the way out. Patient cards, patient notes and call narratives stay in the app. Nothing is sold, rented or shared for advertising.
Patient details stay out of notifications
Phone notifications never carry patient information. A MAYDAY or evacuation alert names the call type and address; everything else is behind sign-in.
What is collected and who can see it: Privacy.