Privacy policy

This policy explains what the Online Trading Leads app does with information. It covers the app on Android and iPhone.

The short version

The app keeps your leads, and the consent records and do-not-contact list that go with them, on your phone. There is no account, no ads, and nothing in the app tracks how you use it. In this version we do not run a server that receives your leads, notes, photos, files or consent records.

The only information that leaves the phone because of the app is what is needed to run subscriptions: the purchase records that Apple or Google share with RevenueCat, the service we use to check which plan is active. Anything else leaves the phone only when you send it yourself, for example a message you send from your own WhatsApp, SMS or email app, a post you publish, or a file you export.

The app is a lead and client-record tool, not a financial service. It does not offer trading, signals, brokerage or investment advice, it does not hold or move money, and it never asks for anyone's bank, card or investment account details.

Who we are

The app is published by the developer named in the details at the top of this page. For any question about privacy, or to use your rights, write to the email address given there.

What stays on your phone

Everything you enter is stored in the app's own storage on your phone:

• your business profile: your name or business name, area, services, what you do and the WhatsApp number people should write to;
• your leads: names, phone numbers, email addresses, what they need, what they are interested in (investments, pension, insurance, mortgage or a trading course) and where they came from;
• each lead's thread: the calls and messages you logged and how they went, notes, voice notes, photos, files, proposals, meetings and meeting summaries, statuses and next steps;
• the consent records and the do-not-contact list (next section);
• post drafts and your settings.

What you write about a client's money, such as their pension, insurance or savings, stays on the phone like everything else. Keep only what you need to follow up.

The app also saves a backup of this data on the phone every day and keeps the last 7. We cannot see or recover any of it. If you delete it or uninstall the app, it is gone, apart from copies you made yourself (exports) and your phone's own backup (below).

Consent records and the do-not-contact list

When you record consent for a lead, the app saves when it was given, how (for example: they contacted you first, said so on a call, wrote on WhatsApp, or signed a form), which channels it covers (calls, WhatsApp, SMS, email) and any note you add. A withdrawal is saved the same way. Records cannot be edited or deleted one by one: a change is a new record, so the log stays complete.

The do-not-contact list holds phone numbers and email addresses, with a reason and a date. While a number or address is on it, the app blocks the Call, WhatsApp, SMS and email buttons for it, on existing leads and on any new lead with the same number or address. Taking someone off the list is saved too.

Each record keeps the person's name, phone number and email as they were at the time. The records stay after a lead is deleted, so the log stays complete and nobody who asked not to be contacted is contacted by mistake. They are removed by Me → Delete my data, or by uninstalling the app.

These records are stored only on your phone and are never sent to us. You can export them at any time as a CSV file (Me → Consent log), and the Excel and JSON exports include them. Whether they meet the rules that apply to you, for example those of your licence or the law on marketing messages, is for you to check.

Calls, messages and the clipboard

When you tap Call, WhatsApp, SMS or Email on a lead, the app opens your phone's own app with the number or address, and for messages a text you can change before sending. You do the sending. The app never sends a message by itself and never sends in bulk.

If the number or address is on your do-not-contact list, or consent for that channel was withdrawn, the app does not open the call or the message and shows why.

The app does not read your call log, text messages, WhatsApp chats or contacts. When you come back after a call or a message, it asks how it went and saves only the answer you give.

The app reads the clipboard only when you tap Paste on a lead, to fill in a name, a number or a note from what you copied.

Camera, microphone, photos and files

The app asks for the camera only when you take a photo, for example of a form a client shows you, and for the microphone only when you record a voice note. Photos and recordings are saved in the app's storage on the phone.

To use an existing photo or file, the app opens the system picker, which gives the app only what you choose. The app has no access to your photo library as a whole, your location or your contacts.

Your WhatsApp link and QR

Your link is a standard wa.me address that the app builds on the phone from your number and a first message. When someone scans the QR or taps the link, WhatsApp opens on their phone. The app does not learn who scanned it or tapped it. Where a lead came from is worked out on your phone, from the first message, when you paste that chat into a lead.

Subscriptions and RevenueCat

Subscriptions are sold by Apple (App Store) or Google (Google Play). They handle the payment, and we never see your card or bank details. Their own privacy policies apply to the payment.

To know which plan is active on your phone, the app uses RevenueCat, Inc. (United States). RevenueCat receives:

• a random ID that the app creates on the phone (it is not your name, email or phone number);
• the store's records of purchases in this app: which plan, when it started and renews, trial status, price, currency and store country;
• basic technical details needed to answer, such as the app version and the phone's language. Like any internet request, it also sees the IP address the request comes from.

RevenueCat never receives your leads, your consent records or anything you type into the app. We use RevenueCat's dashboard to see purchase totals, for example how many trials became subscriptions; these are not linked to your name. RevenueCat's privacy policy: https://www.revenuecat.com/privacy

Notifications

If you allow notifications, the app works them out on the phone from your own leads (for example a next step you set, or a new lead still waiting for a reply) and the phone shows them. Nothing is sent to a server, and this version does not register for push messages. Each kind can be switched off in Me → Notifications.

Backups and exports

Your phone's own backup (Google backup on Android, iCloud or computer backup on iPhone) may include the app's data, depending on your phone's settings. That backup belongs to your Google or Apple account and is covered by their policies. We cannot read it.

When you export to Excel, CSV or JSON, export the consent log, save a QR card as a PDF, share a status image or send a lead summary, the file or text goes only where you send it from the share sheet.

Information about other people

Leads are other people's personal information. You decide what to record about them and why, and you are responsible for it: for having a good reason to keep it, for keeping only what you need to get back to a client, and for deleting leads you no longer need. Deleting a lead removes it and its thread, photos, files and voice notes from the phone; its consent records and do-not-contact entries stay in the consent log, as described above.

In this version none of it is sent to us. Every lead in the app is someone who wrote to you or whom you added yourself: the app never buys, sells or shares leads.

What we do not do

• No ads, no advertising ID, and no tracking across other apps or websites.
• No analytics or crash-reporting tools in the app.
• No access to your location, contacts, text messages or call log.
• No messages sent for you, and no bulk sending.
• No trading, signals, brokerage or investment advice, and no handling of money.
• We do not buy, sell, rent or share leads or any other personal information.

Your choices and rights

• See and export your data at any time: Me → Export my data, also on the plan screen; the consent log on its own: Me → Consent log. Export is free with or without a plan.
• Delete everything on the phone, including the consent records and the do-not-contact list: Me → Delete my data. Uninstalling the app deletes it too. Export the consent log first if your rules ask you to keep it.
• Cancel a subscription in your App Store or Google Play subscription settings.
• Ask us to delete the purchase records RevenueCat holds for you: email us with the order number from your store receipt, and we will delete the matching RevenueCat record within 30 days. The store keeps its own records under its policy.

Depending on where you live (for example under Israel's Protection of Privacy Law or the EU and UK GDPR), you may have the right to access, correct or delete personal information, to object to its use, and to complain to your data protection authority. Write to us and we will answer within 30 days.

Legal bases (EU and UK users)

We process purchase records to provide the subscription you asked for (performance of a contract) and to see purchase totals and prevent abuse of trials (legitimate interests).

Where the data is processed

RevenueCat processes purchase records in the United States. Apple and Google process payments in the countries where they operate. Where the law requires it, these transfers rely on the safeguards those companies provide, such as standard contractual clauses.

How long we keep it

Data on your phone stays until you delete it or uninstall the app; the daily backups on the phone roll over after 7 days. Consent records and do-not-contact entries stay until Me → Delete my data, even after the lead is deleted. Purchase records at RevenueCat are kept while they are needed to run your subscription and for the store's and the law's record-keeping, and are deleted on request as described above.

Security

Your data is protected by your phone's own security, such as its lock screen and storage encryption. The connection to RevenueCat is encrypted (TLS).

Children

The app is a business tool for people aged 18 and over and is not directed to children.

Features that are not in this version

A hosted lead page with a form, alerts for new requests from that page, AI writing and sign-in are not part of this version. If they are added later, this policy will say what they send, where and why before that version is released.

Changes to this policy

If this policy changes, the new version will have a new date, and the app will show it. If a change means the app sends more information, we will tell you in the app before it happens.