Your Privacy is Our Priority
Boring CRM is designed as an offline-first application. Your data stays on your device. When you use the optional Facebook Lead Ads integration, data is fetched from Facebook's API and stored locally — we never send your data to our own servers.
About This App
Boring CRM ("the App") is a free customer relationship management tool designed to help real estate professionals manage their leads and follow-ups efficiently. The App is developed and maintained by The Boring Medium.
Data Collection
We believe in complete transparency about how your data is handled:
- No Personal Data Collection: We do not collect, store, or transmit your personal data or your leads' data to any external server.
- Local Storage Only: All data you enter into the App is stored locally on your device using an encrypted database.
- No Account Required: You can use the App without creating an account or providing any personal information.
- No Analytics Tracking: We do not use analytics tools to track your usage behavior within the App.
Data Storage
Your data is stored exclusively on your device:
- All lead information, follow-ups, notes, and settings are saved locally.
- Data is stored using Hive, an encrypted local database.
- We cannot access your data as it never leaves your device.
Data Safety
Since all data is stored only on your device:
- Please use the "Backup" feature regularly to prevent data loss in case of device failure or app uninstallation.
- Backups are created locally and can be exported to your preferred storage location.
- You are responsible for maintaining your backup files.
Facebook Lead Ads Integration
Boring CRM offers an optional Facebook Lead Ads integration that allows you to import leads from your Facebook Page's Lead Ad forms into your local CRM. Here's how your data is handled:
- Facebook Login: When you connect your Facebook account, we use Facebook Login to obtain an access token. This token is stored securely on your device using encrypted storage and is never sent to our servers.
- Lead Data: We fetch lead information (name, email, phone number) from your Facebook Page's Lead Ad forms using the Facebook Marketing API. This data is stored locally on your device only.
- Permissions Requested: We request
pages_show_list,pages_read_engagement,leads_retrieval, andpages_manage_adspermissions — solely to list your pages and import lead data. - Background Sync: If enabled, the app periodically syncs new leads in the background. All synced data stays on your device.
- No Server-Side Storage: We do not operate any backend server. Your Facebook access token and imported lead data are stored exclusively on your device.
- Disconnecting: You can disconnect your Facebook account at any time from Settings → Integrations. This removes your access token and stops all syncing. Previously imported leads remain in your CRM unless you delete them manually.
- Account Deletion: Deleting your app data or uninstalling the app removes all Facebook tokens and imported lead data from your device.
Third-Party Services
The App may include the following third-party services:
- Facebook (Meta): When you use the Facebook Lead Ads integration, the App communicates with Facebook's API to retrieve your lead data. Facebook's own data practices are governed by the Meta Privacy Policy.
- Google AdMob: We display advertisements through Google AdMob. Google may collect certain information for ad personalization. You can learn more about Google's privacy practices at Google Privacy Policy.
- URL Launcher: When you tap on external links (like WhatsApp), the App uses your device's default browser or app to open them.
Permissions
The App may request the following permissions:
- Notifications: To send you follow-up reminders and lead sync notifications.
- Contacts (Optional): To import contacts as leads.
- Call Log (Optional, Android): To automatically log calls with your leads.
- Biometric Authentication (Optional): To secure your app with fingerprint or face recognition.
- Internet (for Facebook Sync): To communicate with Facebook's API for importing leads. No other data is transmitted over the network.
All permissions are optional and the App functions without them.
Children's Privacy
The App is not intended for use by children under the age of 13. We do not knowingly collect any information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date.
Contact Us
If you have any questions about this Privacy Policy or our practices, please contact us:
- Website: linktr.ee/boringcrm
- Email: contact@theboringmedium.com
Summary
Your data stays on your device. Even with Facebook Lead Ads integration, all imported data is stored locally. We don't operate any servers and can't access your data. Simple as that.