Privacy Policy

Last updated: July 31, 2026 — added the website waitlist section

TouchPoint CRM (“the app”) is a personal CRM for tracking your contacts and follow-ups. The app is published by 3 Bears Studio LLC (“we,” “us”), a Florida limited liability company, which is the entity responsible for your data described here. We built TouchPoint to be private by default — this policy explains exactly what that means.

The short version

• Your data is stored on your device. You don’t need an account to use the app.
• We use no third-party analytics or advertising trackers, no advertising identifiers (IDFA), and we don’t track you across other apps or websites.
• We never sell or rent your data, and we don’t share it for advertising.
• Cloud backup is optional — it only happens if you choose to create an account.
• You can delete your data — and your account — at any time.

Data stored on your device

By default, everything you enter — contacts, notes, activity history, tasks, follow-up schedules, and app settings — is stored locally on your device and is not transmitted to us or anyone else. You can use the entire app this way, with no account and while completely offline.

Optional account & cloud sync

If you choose to sign in — with an email and password, Google, or Apple — the app backs up your contacts, activities, tasks, status history, and preferences to the cloud so they can sync across your devices. This is powered by Google Firebase (Firebase Authentication and Cloud Firestore), acting as our data processor. Your data is stored under your account and protected by security rules so that only you can read or write it.

If you never sign in, no data leaves your device. Signing out keeps your local data; deleting your account removes your cloud copy (see “Your choices & control”).

Sign in with Apple may provide us a private, Apple-relayed email address instead of your real one — that’s fine; the app works entirely from your account identifier.

Device permissions

The app asks for these only when you use the related feature, and each is used only for the stated purpose:

• Camera — to scan a business card into a new contact. Text is recognized on your device using Apple’s Vision framework; the card image is not uploaded to us.
• Photos (add only) — if you scan cards, the app can save the card image to your photo library for your own reference.
• Contacts — to import contacts you select from your phone, or export contacts you choose. We only access the contacts you pick for that action.
• Location (while using the app) — to show your contacts on a map, center the map on you, and plan routes. Your location is used on-device for these features and is not stored by us or shared.
• Notifications — to send the follow-up reminders and daily digests you configure. These are scheduled locally on your device.

Third-party services

• Google Firebase (Authentication + Cloud Firestore) — only if you create an account, to authenticate you and store your synced data. Firebase is used strictly as backend infrastructure; we do not use Firebase Analytics, Crashlytics, AdMob, or any advertising/measurement product.
• Sign in with Apple / Google Sign-In — only if you choose those sign-in methods.
• Maps & navigation — the in-app map uses Apple Maps. When you tap to navigate, the app hands off to the maps app you choose (Apple Maps, Google Maps, or Waze); once you leave TouchPoint, that app’s own privacy policy applies.

What we don’t do

• No advertising SDKs, no ad targeting, no advertising identifiers.
• No third-party analytics or behavioral tracking.
• No selling, renting, or sharing of your personal data for others’ marketing.
• No “tracking” in the sense defined by Apple’s App Tracking Transparency — the app does not link your data with third-party data for advertising, so it will not ask you to allow tracking.

Your choices & control

• Use it fully offline — simply don’t create an account.
• Export your contacts (for example as a vCard) at any time.
• Clear local data from within the app.
• Delete your account — this removes your cloud backup and your authentication record, and clears your local data.

Children

TouchPoint CRM is intended for professionals and general audiences. It is not directed to children under 13, and we do not knowingly collect personal information from children.

Data security & retention

Local data is protected by your device’s own security. Cloud data (if you use an account) is stored with Google Firebase and access is restricted to your account by security rules. We retain your cloud data until you delete your account or remove it, after which it is deleted from our active systems.

Website waitlist (this website, not the app)

If you enter your email address into the waitlist form on this website, we store that email address, which app’s page you submitted it from, and the date and time. That is the entire record — we do not store your name, your IP address, your browser, or the page you came from.

We use it for one purpose only: to email you when testing or public release opens. We do not send a newsletter, we do not market anything else to you with it, and we do not sell, rent, share, or disclose it to anyone outside the service providers who store it for us.

The waitlist is held on Cloudflare infrastructure operated for us. It is kept until you ask us to remove it, or until the app has launched and that announcement has been sent — whichever comes first.

To be removed at any time, email hello@3bears.studio from the address you signed up with. We will delete the record and confirm. You do not need to give a reason.

This concerns the website only. Nothing in the waitlist is connected to the app, to anything stored on your device, or to any account within the app.

Changes to this policy

If we make material changes, we’ll update this page and revise the “Last updated” date above. Continued use of the app after a change means you accept the updated policy.

Contact

3 Bears Studio LLC · Apopka, Florida, USA
hello@3bears.studio