Information We Collect

We collect information necessary to operate your CRM environment, including:

Personal identification
Names, email addresses, phone numbers, job titles, employee IDs, profile photos, and account credentials provided by you or your organization.

Work and CRM data
Client details, projects, tasks, notes, communications, sales records, attendance, leave, timesheets, visits, appointments, meetings, files, and other data you create or access in the app.

Location information
With your permission, the Onest CRM app accesses your device’s location (precise and approximate GPS/network location). We collect location data for the following purposes:

• Attendance check-in and check-out — to record where you check in or out when your organization enables location-based attendance.
• Field visits and meetings — to show maps, directions, and visit/meeting records.
• Appointments and calendar features — when location is linked to scheduled events.
• Live workforce tracking (when enabled by your employer) — periodic location updates may be collected while the app is in use and in the background during an active work shift or tracking session, then stored on your device and sent to your organization’s servers (and related cloud services such as Firebase) for route history and workforce visibility.

Location is not collected for advertising. Your organization controls whether location features are turned on. You can allow or deny location in your device Settings; some features will not work if location is denied.

Device and technical data
IP addresses, device type, operating system, app version, login activity, push notification tokens, crash logs, and performance diagnostics.

Camera and files (when you use those features)
Photos or documents you capture or upload (e.g. attachments, attendance photos, profile images), and files downloaded through the app.

Interaction history
Notes, tasks, communications, and activity within your CRM account.

How We Use Your Information

Your data is used to:

• Provides core CRM functionalities, including clients, projects, tasks, sales, attendance, and related modules.
• Authenticate your account and enforce role-based access.
• Process location data for attendance verification, field visits, maps, meetings, and optional live tracking as described above.
• Personalize your dashboard and sync data with your organization’s Onest server.
• Automate workflows and send critical system or work-related notifications.
• Analyze system performance, reliability, and security (including Firebase Analytics and Performance Monitoring where enabled).
• Send important service updates and protect your account from unauthorized access.

We do not use your location for selling data or for unrelated marketing.

Sharing Your Information

We do not sell your personal data.

We may share information with:

• Your employer / organization — administrators and authorized users per your company’s policies.
• Trusted service providers — only as needed to operate the service, for example:
  • Cloud hosting and your organization’s Onest CRM backend.
  • Google Firebase (push notifications, analytics, performance, and optional location sync).
  • Google Maps (maps, geocoding, and directions).
  • Email or infrastructure tools used to deliver the service.
• Legal authorities — when required by law, court order, or to protect rights, safety, and security.

Service providers process data under contractual obligations and their own privacy policies.

Your Choices

You maintain control over your data:

• Update your profile and work data within the app (subject to your organization’s permissions).
• Location: enable or disable in device Settings; disable background location if you do not want tracking when the app is not in the foreground (when your employer has enabled live tracking, some features may require location).
• Camera and storage: manage permissions in device Settings.
• Opt out of non-essential notifications where the app or device allows.
• Log out or uninstall the app; local data on the device is removed, but data already stored on your employer’s servers may remain per their retention rules.

For organization-managed account data, please contact your organization administrator first. For app or privacy-related questions, please contact us using the information below.