Privacy Policy for Detailing CRM

Developer: Karan Singh • Jurisdiction: Ontario, Canada
Effective Date: September 2, 2026 • Last Updated: September 2, 2026
Official URL: https://apps.reiterstein.com/detailingcrm/privacy

1. Introduction & Core Privacy Commitment

This Privacy Policy describes how Detailing CRM (the “Application” or “App”), developed and maintained by Karan Singh (“Developer”, “we”, “us”), handles your data.

We believe that user and customer privacy is a fundamental human right. Accordingly, Detailing CRM is engineered from the ground up as a 100% offline-first application.

No Remote Servers: We do not operate remote application servers, cloud databases, or centralized user accounts.
No Telemetry or Tracking: The Application contains zero third-party analytics SDKs, advertising frameworks, crash reporting trackers, or behavioral telemetry tools.
Zero Remote Data Collection: We do not collect, transmit, store, sell, or monetize any personal or business data entered into the Application. All information remains strictly on your local iOS device.

2. Legal Distinction: “Data Controller” vs. “Software Tool Provider”

If you operate a commercial detailing business and enter personal records concerning your customers, employees, or contractors into the Application, the legal roles under GDPR, CCPA/CPRA, and PIPEDA are defined as follows:

You Are the Sole “Data Controller”: As the business owner or operator utilizing the Software, you decide what customer information to collect. You are the sole Data Controller of any personal data you input into the Application and are exclusively responsible for obtaining necessary customer consent and honoring client deletion requests.

The Developer is Merely a “Software Tool Provider”: Karan Singh provides the client-side Software as an offline productivity tool. The Developer is not a “Data Processor” or “Data Controller” with respect to your customer records, as the Developer never has technical access, possession, transmission channels, or visibility into your database.

No Developer Access: At no point does the Developer have the technical ability to view, intercept, decrypt, retrieve, or modify your customer records or business data.

3. Inventory of Data Stored on Your Device

All information created, imported, or managed within the Application resides strictly in local Hive CE database boxes and the isolated iOS application sandbox on your device:

Customer CRM Data

Names, phone numbers, email addresses, street addresses, cities, provinces/states, postal codes, and service notes.

Vehicle & Job Records

Vehicle year, make, model, color, vehicle notes, assigned service packages, and pricing.

Appointments & Schedules

Booking dates, appointment times, service status, payment fulfillment status, and sequential invoice numbers.

Financial & Expenses

Operating expenses (payee, descriptions, amounts, dates), gross revenue calculations, and profit summaries.

Gift Certificates & Vouchers

Voucher codes, monetary balances, expiry dates, redemption logs, recipient details, and purchaser details.

Business Profile & Settings

Business name, owner name, business contact info, tax registration numbers, tax rates, payment instructions, and custom logos.

4. Device Permissions & Specific Usage Disclosures

Photo Library Access (NSPhotoLibraryUsageDescription): Allows you to select an optional business logo and custom gift certificate background from your photo library. The App does not scan, index, or access any other photos.
Local Notifications (flutter_local_notifications): Delivers automated on-device reminder alerts (24h, 2h, and 15m prior to jobs). Alerts are triggered strictly by iOS locally. No push tokens (APNs) are collected or sent to external servers.
Camera Access: Not Requested. The Application does not access or request camera permission.
Location Services: Not Requested. The Application does not track GPS or location data.

5. Data Transmission, Exports & User-Initiated Sharing

The Application never transmits database records automatically. Data leaves the Application strictly upon user request:

PDF Invoices & Certificates: Generated locally on device. When shared via the iOS Share Sheet or AirPrint, transmission is governed by your chosen destination app (e.g., Mail, Messages, or AirDrop).
Database Backup Files (.JSON): Generated locally in temporary storage via “Backup & Restore”. You maintain complete control over where the backup is saved (e.g., iCloud Drive, local Files app, or flash drive).
iOS System-Level Backups (iCloud / Finder): If you have enabled full-device iCloud or computer backups on your iOS device, your local application database may be included as part of your personal, encrypted Apple system backup. This transmission occurs entirely between your device and Apple under your personal Apple ID, and the Developer has zero access to or custody of these backup files.

6. Data Retention, Control & Permanent Deletion

In full compliance with Apple App Store Review Guideline 5.1.1(v):

In-App Deletion: You can edit or delete customers, appointments, and vouchers at any time. Deleted records move to the in-app “Recycle Bin” and can be permanently purged.
Total Application Erasure: Uninstalling the Detailing CRM app from your iOS device immediately and irreversibly deletes 100% of your local database, images, and settings from your device.
Backup File Deletion: Backups exported externally to iCloud Drive or email must be deleted directly by you on those services.

7. Data Security & User Responsibilities

Because data is stored on your local device, security relies on physical device protection and Apple iOS hardware encryption (Secure Enclave and Data Protection API). You are responsible for safeguarding your device with a secure Passcode, Face ID, or Touch ID.

Because the Developer maintains no cloud copies, you are solely responsible for creating regular backups using the built-in “Backup & Restore” feature. The Developer cannot recover lost data resulting from device theft, damage, or accidental application deletion.

8. Third-Party Links & External Communications

The Application contains optional links to the Developer's website (www.reiterstein.com) and support email (info@reiterstein.com). Tapping these links opens your default browser or email client.

9. Children's Privacy

Detailing CRM is a professional business application and is not intended for or marketed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from minors.

10. Apple App Store Nutrition Labels & Regulations

Apple Privacy Nutrition Label: “Data Not Collected”. The Developer does not collect, link, or track any personal data from this app.

CCPA / CPRA (California): We do not sell or share consumer personal information.

GDPR (European Union) / UK GDPR: All data processing occurs strictly on your local terminal equipment.

11. Disclaimer of Warranties & Limitation of Liability

The Application is provided “AS IS” without warranties of any kind. Karan Singh shall not be held liable for any data loss resulting from device damage, operating system updates, physical theft, or omitted backups.

12. Updates to This Privacy Policy

Any revisions will be published with an updated “Last Updated” date at the official policy URL: https://apps.reiterstein.com/detailingcrm/privacy

13. Severability

If any provision or clause of this Privacy Policy is held by an applicable court of competent jurisdiction to be invalid, illegal, or unenforceable, such provision shall be severed to the minimum extent necessary, and all remaining provisions and clauses of this Privacy Policy shall remain in full force and effect regardless, retaining their full validity and legal enforceability.

14. Contact Information

Developer: Karan Singh

Support & Legal: info@reiterstein.com

Website: https://www.reiterstein.com

Privacy URL: https://apps.reiterstein.com/detailingcrm/privacy