Privacy Policy — LeadsNimble mobile app

Applies to the LeadsNimble Android and iOS applications (Android package / iOS bundle id com.leadsnimble.app).

This policy covers the mobile app only. The LeadsNimble web service has its own policy at /privacy-policy.

Effective date: 16 August 2026  ·  Last updated: 16 August 2026

1. Who we are

The LeadsNimble mobile app ("the app") is published by LeadsNimble ("we", "us"). We have no public street office — contact us at m.shojol80@gmail.com. The app is a companion client for the LeadsNimble customer relationship management service ("the workspace"). It is used by staff of businesses that subscribe to LeadsNimble — it is not a consumer product and it does not create accounts.

Two different roles matter in this policy:

• You, the agent — a member of staff who signs in to the app with an account created for you by your employer.
• Your employer (the workspace owner) — the business that decides which customer data is held in the workspace and for how long. For that customer data, your employer is the data controller and we act on their instructions as a service provider.

2. What the app handles

Data	Why	Where it goes
Sign-in details — your work email address and password	To authenticate you and issue a session token	Sent once over HTTPS to your workspace. The password is never stored on the device.
Session token	To keep you signed in between launches	Stored on the device in OS-backed secure storage (Android Keystore / iOS Keychain). Deleted on sign-out, on session expiry, and on uninstall.
Your profile — name, email, role, assignment settings	To show who is signed in and apply your permissions	Read from the workspace; displayed in the app.
Lead and contact records — customer name, phone number, email address, source, pipeline stage, notes	So you can work the leads assigned to you	Read from, and written back to, your workspace. This is your employer's business data.
Conversations and messages — message text, attachments, sender names and timestamps from the channels your company has connected (WhatsApp, Facebook Messenger, Instagram, website live chat)	So you can read and reply to customer conversations	Fetched from the connected channel providers on demand through your workspace and shown in the app. Replies you send are delivered through the same channel.
Photos and documents you attach	Only to send them in a conversation, when you pick them	Uploaded through your workspace to the messaging channel. The app does not scan, index or upload your gallery in the background.
Tasks and follow-ups	To show work items attached to your leads	Read from and updated in your workspace.
Channel connection status — which channels your company has connected and whether they are active	To show you what is available to reply on	Read from your workspace. The app never displays or stores channel API keys or tokens.
App preferences — last tab, list filters	To restore the app where you left it	Stored only on your device.

What the app does not do

• No advertising, and no data is sold or shared with data brokers or advertisers.
• No third-party analytics, tracking or profiling SDKs are bundled in the app.
• No access to your location, contacts, call log or SMS.
• Tapping "call" on a lead hands the number to your phone's dialler — the app does not place, record or listen to calls.
• No account creation or self sign-up: accounts are issued by your employer.

3. Permissions the app requests

• Internet / network state — required; the app is useless without a connection to your workspace.
• Photos, media and files — requested only at the moment you choose to attach a photo or document to a message, through the Android or iOS system picker.

4. Legal basis and purpose

We process your sign-in and profile data to perform the contract between your employer and us and to secure the service. Customer data in the workspace is processed on your employer's instructions for their legitimate interests in running their sales and support operation. Where your employer requires consent from their customers to message them, obtaining that consent is your employer's responsibility.

5. Sharing

The app shares data only as needed to do its job:

• Your workspace (the LeadsNimble backend operated for your employer) — all app traffic goes here.
• Messaging channel providers — Meta Platforms (WhatsApp Business, Messenger, Instagram) and any other channel your company has connected receive the messages you send, as is inherent to delivering them, and are governed by their own privacy policies.
• Hosting and infrastructure providers that run the workspace on our behalf, under contract.
• Where the law requires it, for example a valid legal request.

6. Retention

• On the device: only the session token and your app preferences. Both are gone when you sign out or uninstall the app.
• In the workspace: leads, conversations and tasks are retained for as long as your employer keeps them, under their own retention policy.
• The app does not keep a local copy of your message history — messages are read from the channels on demand each time you open a conversation.

7. Security

• All traffic between the app and the workspace uses HTTPS/TLS. Cleartext traffic is disabled in release builds.
• The session token is held in OS-backed secure storage — the Android Keystore on Android and the Keychain on iOS — not in plain preferences.
• The token is scoped to this app's own permission and is rejected for any other use; an expired or revoked session immediately returns you to the sign-in screen.
• Inside the app you can only see the leads and conversations your workspace role and assignment allow.

No system is perfectly secure. If you believe an account has been compromised, tell your workspace administrator and contact us at the address below.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete personal data held about you, and to object to certain processing.

• If you are an agent using the app: contact your workspace administrator first, as they control your account, or write to us at the address below.
• If you are a customer whose messages or lead record appear in a workspace: the business you contacted controls that data — please direct your request to them. We will support them in responding.

Requests can also be sent to m.shojol80@gmail.com.

9. Account and data deletion

Agent accounts are created and removed by your workspace administrator; ask them to deactivate yours. To have the personal data associated with your agent account deleted from the workspace, email m.shojol80@gmail.com from your work address and we will process the request with your employer, normally within 30 days, unless we are required to keep records by law. Removing the app from your phone deletes everything the app stored locally.

10. Children

The app is a workplace tool intended for people aged 18 and over. It is not directed at children and we do not knowingly collect data from them.

11. International transfers

Your workspace and our infrastructure providers may process data in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for those transfers.

12. Changes to this policy

We will update this page when the app's data handling changes, and will revise the "last updated" date above. Material changes will be announced in the app or by email to workspace administrators.

13. Contact

LeadsNimble
Contact us at m.shojol80@gmail.com
Privacy and support: m.shojol80@gmail.com