Privacy Policy
This Privacy Policy explains how the ClientFox mobile application (“App”, “we”, “us”) collects, uses, stores, and shares information when you use our service on Android and iOS devices, as well as the web version linked to the same account.
By using ClientFox, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Who we are
ClientFox is a tool for finding local business opportunities (leads), designed for freelancers, agencies, and service providers. The App displays publicly available business data in a city you choose and helps you manage your own lead pipeline.
2. Information we collect
2.1 Account information (required to use the App)
The App requires registration. We collect:
- Name — provided at sign-up or received from Google/Apple sign-in
- Email address — for login, password reset, and account identification
- Password — only if you register with email (stored only in hashed form by our authentication provider, Supabase; we never see your plain-text password)
- Unique account ID — links your data in our database
- Gender (male/female) — optional in profile settings; used only to personalize pitch template wording in your language
Sign-in methods: email/password, Google Sign-In, and (iOS only) Sign in with Apple.
2.2 App usage data
- Service type you offer (e.g. web design, marketing) and related pitch text
- Language and theme preferences (dark/light)
- Selected city / search location — coordinates and city name you manually choose by searching for a city (the App does not use GPS or request precise device location permission)
- City search history — up to the last 20 cities you searched
- Saved leads — business records you save (name, category, phone, email, website, address, score, pipeline status, etc.)
- Skipped businesses — identifiers of businesses you dismissed
- Stats and sales — view counters, closed jobs, revenue/expense amounts and individual sale entries you enter
- Daily refresh counter — stored locally on device to enforce free vs. premium daily search limits
2.3 Subscription data
ClientFox Premium is billed through Google Play (Android) or the App Store (iOS) via RevenueCat. We do not collect or store payment card numbers. Google or Apple processes payments. RevenueCat receives your account ID, subscription status, and product identifiers to verify premium access.
2.4 Information we do not collect
- Real-time precise GPS location
- Contacts from your phone address book
- Photos, microphone, or camera data
- Payment card numbers or bank account details
- Content of messages or calls you make to businesses outside the App
3. How we use information
- Provide and maintain the App (login, data sync, saving leads)
- Personalize your experience (language, theme, service type, search city)
- Verify and manage Premium subscriptions
- Improve reliability (local search cache, refresh rate limits)
- Respond to your requests (support, account deletion)
- Comply with legal obligations
We do not sell your personal information to third parties.
4. Public business data and third-party services
Leads shown in the App mainly come from public sources (OpenStreetMap, Overpass API, Nominatim, Wikidata, and similar services). When you search a city, the App sends coordinates and search parameters to those services. They have their own privacy policies.
The App may also use:
- Map tiles (OpenStreetMap, CARTO, Esri) — to display maps
- Google Maps — only as an external link when you open a location in the Maps app
- Contact extraction backend — when needed, a business website URL is sent to our serverless service to find publicly listed phone numbers or emails on that page. We do not send your personal data in that request.
- Frankfurter API — public exchange rates (no user data)
5. Where data is stored
5.1 Cloud (Supabase, EU region)
When signed in, your profile, leads, stats, city location, and settings are stored in a Supabase PostgreSQL database hosted in the European Union (Frankfurt, Germany). Authentication is handled by Supabase Auth.
5.2 Device (local)
We temporarily store search cache, recent results, language settings, theme, refresh counters, and similar technical data in localStorage or IndexedDB (including your sign-in session). User-linked local cache is cleared when you sign out.
5.3 PDF export
Lead and stats PDF exports are generated entirely on your device. PDFs are not uploaded to our servers. On mobile, you may share the file via the system share sheet (e.g. save to Files or send by email).
6. Third-party data processors
| Provider | Purpose |
|---|---|
| Supabase | Authentication and database (EU region) |
| Google / Apple | OAuth sign-in; subscription billing |
| RevenueCat | Subscription and entitlement management |
| OpenStreetMap ecosystem | City geocoding and business data |
| Netlify | Web hosting and serverless functions |
| Resend | Sending account emails (confirmation, password reset) |
| Cloudflare | Domain, DNS, and forwarding of support emails |
Third-party policies: Supabase, Google, RevenueCat, OpenStreetMap Foundation.
6.1 Notifications
On iOS and Android, the App can show reminders (for example, to follow up with a lead that is waiting for a reply, or a weekly overview). These reminders are scheduled locally on your device; we do not run a push-notification server and no notification content is sent to us. You can turn each reminder type on or off in Settings, or disable notifications in your device settings.
7. Analytics
The App does not use advertising or analytics trackers (e.g. Google Analytics, Facebook Pixel, Amplitude). RevenueCat maintains its own subscription analytics under its privacy policy.
8. Legal basis (GDPR / EEA users)
- Contract performance — providing the service you signed up for
- Legitimate interest — security, abuse prevention, refresh rate limits
- Consent — where required (e.g. optional settings you explicitly enable)
- Legal obligation — record-keeping for app store subscriptions
9. Data retention
We keep account data and saved content while your account is active. After account deletion, we delete or anonymize data within a reasonable period, unless law requires longer retention (e.g. payment records held by Google Play).
You can remove local cache by signing out or uninstalling the App.
10. Security
Database row-level security (RLS) ensures each user can access only their own data. Communication with our services uses HTTPS/TLS encryption. However, no internet transmission or storage is 100% secure.
11. Your rights
Depending on your jurisdiction (including GDPR), you may have the right to:
- Access data we hold about you
- Correct inaccurate data (in the App: Settings → profile)
- Delete your account and associated data
- Restrict or object to processing
- Data portability (PDF export or email request)
- Withdraw consent where processing is consent-based
To delete your account, email support@clientfox.app from the address linked to your ClientFox account. We will process requests within 30 days.
You can also delete your account in the app: Settings → Delete account. See our account deletion page for details.
You can cancel a subscription in Google Play → Payments & subscriptions or through the RevenueCat Customer Center in the App (Premium users).
12. Children
ClientFox is not intended for anyone under 16 years of age. We do not knowingly collect data from children. If we learn an account was created for a child, we will delete it.
13. International transfers
Your data may be processed in countries where Google, RevenueCat, and our hosting providers operate servers (including the EU and USA). These providers apply contractual and technical safeguards.
14. Changes
We may update this Privacy Policy. We will notify you of material changes in the App or by email. The date at the top shows the latest version. Continued use after changes means you accept the updated policy.