Privacy Policy

About this app

Boring CRM ("the App") is a customer relationship management app for real estate professionals. It is developed and maintained by The Boring Medium ("we", "us"). This policy covers the Android app and this website.

Your CRM data stays on your device

• Never uploaded: leads, follow-ups, notes, call history, attachments, quotation details and settings are stored only in the App's private storage on your phone. They are not sent to our servers.
• How it is protected: the App's storage is private to the App under Android's app sandbox and is covered by your phone's device encryption when a screen lock is set. You can also turn on App Lock (fingerprint or face) in Settings.
• No account required: you can use the App without creating an account. The App signs in anonymously to Firebase so that support replies and notifications can reach your installation; this identity contains no personal details.
• Backups are yours: backup files are created on your phone (Downloads/BoringCRM_Backups) and contain your CRM data in readable form. If you share or upload them, for example to Google Drive or email, keep them somewhere private. You are responsible for your backup files.

Usage analytics

We use Google Analytics for Firebase to understand which features are used and how the App performs, for example screens opened, events such as "lead created", crashes, app version, device model and approximate country. This data is not linked to your name, your phone number or your leads' details.

Support chat

If you ask a question through Help & Support inside the App, we collect the following so that we can answer you:

• Support profile: your name, mobile number and, optionally, your email address.
• Conversation: the messages you send and receive in the support chat.
• Screenshots (optional): an image you choose to attach, only after our support team has enabled attachments for your ticket.
• Device details: app version, Android version and device model, so we can reproduce problems.

Support data is stored on Google Firebase servers located in India and is used only to resolve your request. It is never sold or shared for advertising. Support conversations are closed automatically a week after they are resolved, and attached images are deleted after one year at the latest.

Push notifications

Follow-up reminders are created on your phone and need no server. The App also stores a push notification token for your installation so that we can deliver replies to your support questions. Optional product updates and offers from Boring CRM use the same token and can be turned off at any time in Settings → Notification Settings → "Updates from Boring CRM". Marketing messages are sent only if you ticked the separate consent box when you first contacted support.

Promotions

Boring CRM can show offers and news from Boring CRM and its partners in the Promotions screen and on the dashboard. If you choose a city in Promotions, we store it with your anonymous install record so we can show offers for your area and count how many agents in each city saw or tapped an offer. We never use your phone's location services; the city is only what you pick. Offers marked "Sponsored" are paid for by partners and are not checked by Boring CRM. You can change or remove your city in Promotions at any time, and "Delete my support data" also removes your city and your offer statistics. The Remove Ads subscription removes Google ads only; offers from Boring CRM and its partners can be hidden from the dashboard in Promotions.

Facebook Lead Ads integration

Boring CRM offers an optional integration that imports leads from your Facebook Page's Lead Ad forms into the App on your phone.

• Facebook Login: when you connect, Facebook Login gives the App an access token. The token is stored on your phone in Android's secure storage and is never sent to our servers.
• Permissions requested: pages_show_list, pages_read_engagement and leads_retrieval, used only to list your Pages and forms and to read new leads.
• Lead data: the App fetches each lead's name, phone number and email directly from Facebook's API to your phone. It is stored only on your device.
• Background sync: if enabled, the App checks for new leads about every 15 minutes and notifies you.
• Disconnecting: disconnect at any time from Settings → Integrations. This removes the access token and stops syncing. Leads already imported stay in your CRM unless you delete them. You can also remove the App's access from your Facebook settings.
• Deletion: uninstalling the App or clearing its data removes the token and all imported leads from your phone.

Deleting your data

You can delete your support profile and every support conversation, including any screenshots, your Promotions city and offer statistics, at any time from inside the App: Settings → Help & Support → "Delete my support data". Deletion is immediate and permanent. If you no longer have the App installed, email contact@theboringmedium.com from the mobile number or email you used in support and we will delete it within 7 days.

Your CRM data on the phone can be erased from Settings → Delete All Data & Reset App, and is removed when you uninstall the App. Backup files you saved elsewhere are not affected; delete them yourself if you no longer need them.

Third-party services

• Google AdMob: ads in the free version. Google may collect information such as the advertising ID to show and measure ads. See the Google Privacy Policy.
• Google Firebase: analytics, support chat, push notifications, promotions, app integrity checks and subscription verification. See Firebase privacy.
• Google Play Billing: the Remove Ads subscription is processed by Google Play. We receive a purchase token and subscription status, never your payment details.
• Meta (Facebook): only if you connect Facebook Lead Ads. Governed by the Meta Privacy Policy.
• WhatsApp, phone dialer and other apps: when you tap WhatsApp, Call or Share, the App hands the action to that app on your phone.

Permissions

• Notifications and exact alarms: to deliver follow-up reminders on time, plus support replies.
• Contacts (optional): to pick a contact when adding a lead and to save a lead to your contacts.
• Phone state and Caller ID & spam role (optional, Android): only if you turn on "Detect calls to leads", to record calls with numbers saved as leads. The App does not read your full call log.
• Camera and photos (optional): only when you attach a photo to a lead or a screenshot in support chat.
• Biometrics (optional): for App Lock.
• Internet: for ads, analytics, support, promotions, subscriptions and Facebook sync. The CRM itself works offline.

Optional permissions can be refused; the related feature simply won't work.

This website

boringcrm.in uses Google Analytics to count visits and see which pages are useful. It sets cookies for that purpose. The website has no sign-up and collects no personal data beyond what Google Analytics records.

Children

The App is meant for professionals and is not intended for children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. Changes will appear on this page with a new "Last updated" date.

Contact

Email contact@theboringmedium.com or message us on WhatsApp.