Effective date: October 21, 2026
The short version: ArcLead is a private, offline-first CRM for tracking accounts, contacts, deals, and follow-ups. Everything you enter is stored in the app's private storage on your phone. The app does not require an account and does not use its own servers, analytics, advertising, or tracking. Your records remain on your device unless you choose to create a backup or share a file — and even then, you pick where it goes: your phone, Google Drive or Microsoft OneDrive through Android's save or share interface, or another app you choose. No account. No automatic cloud sync. Your data, your choice.
What the app stores on your device
Information you enter, import, or create in ArcLead is stored in the app's private storage on your phone, including:
- Accounts — business names, addresses, phone numbers, emails, websites, and social media links you record for the companies you track.
- Contacts — the people at those companies: names, titles, phone numbers, emails, and notes you enter.
- Deals and pipeline — deal names, values, stages, expected close dates, and stage history.
- Activities and notes — calls, emails, meetings, tasks, follow-ups, and notes you log, including links to calendar events you choose to create.
- App settings — currency, business types, outreach statuses, your user profile, and similar preferences.
- App lock settings — if you enable the lock, a cryptographic hash of your PIN (never the PIN itself) and your preference for biometric unlock.
This information is used by the app to provide its record-keeping features. The app also ships with a built-in, read-only directory of publicly registered Philippine companies that you may optionally import — that dataset is bundled inside the app and is not personalized to you.
What the app does not do
- Does not require an account or an internet connection for normal offline use.
- Does not operate its own cloud storage or synchronize your records automatically.
- Does not collect or transmit your CRM records to the developer's servers.
- Does not include advertising, analytics, or tracking.
- Does not sell your personal information.
- Does not access your contacts list, location, messages, or browsing activity.
App lock and biometrics
If you enable the app lock, your PIN is stored only as a salted PBKDF2 hash — the PIN itself is never saved and cannot be recovered from the device. Wrong attempts escalate a temporary lockout. If you turn on fingerprint or face unlock, the app asks Android's biometric system to confirm you; your biometric data is handled entirely by Android's secure hardware and is never seen, stored, or sent by ArcLead.
Calendar integration
When you choose "Add to calendar" on an activity, ArcLead creates (or updates) an event in the calendar you select on your phone. Calendar permission is used only for events you explicitly create from the app. Removing an event link in the app can delete the calendar event it created. The app never reads, edits, or shares calendar entries it did not create through this feature.
Backups and cloud storage
You can create backups to protect your records or move them to another device. When you choose the backup feature, ArcLead builds a single backup file of your database and hands it to Android's save or share interface — you choose where to save or send it.
Encryption. If you set a passphrase, the backup file is encrypted (AES-GCM with a key derived from your passphrase) and no one can open it without that passphrase. If you leave the passphrase blank, the backup is an ordinary readable file — the app's lock PIN is never included in any backup. Encrypted backups are recommended.
Available backup destinations may include:
- Local storage — a backup file on your phone or another local location available through Android.
- Google Drive — if it appears in Android's save or share interface on your device.
- Microsoft OneDrive — if it appears in Android's save or share interface on your device.
- Other destinations — any compatible storage or file-sharing app your device offers.
ArcLead does not automatically upload your records to these services. You initiate every backup and choose its destination. If you save a backup to Google Drive, Microsoft OneDrive, or another third-party service, that provider stores the file under its own terms and privacy policy.
Keep backup files — and the passphrase that unlocks them — safe. Anyone who obtains an encrypted backup and its passphrase may be able to read the records inside. Restoring requires you to pick the backup file in the app and, for encrypted backups, enter its passphrase. Backups are optional; saving to a cloud destination may require an internet connection.
Sharing and exporting files
You can share backup files through Android's sharing options. When you share a file, it is passed to the destination app or service you select — an email app, a messaging app, or a cloud storage service. That service then handles the file under its own privacy practices; only share records with people and services you trust. If you do not choose to share, export, or back up your information, the app does not send those records anywhere.
Your choices and control
- Delete account, contact, deal, activity, or note records within the app.
- Create backups whenever you choose, and choose where to save or send them.
- Delete backup files from wherever you saved them.
- Turn the app lock on or off, change your PIN, and enable or disable biometric unlock at any time.
Uninstalling the app removes its app-private data from your device. Files you previously saved outside the app — backups and shared files — remain where you put them until you delete them separately. Keep a secure backup if you want to preserve your records before uninstalling or changing phones.
Children's privacy
ArcLead is a business tool intended for adults. It is not directed at children, and the app does not knowingly collect personal information from children.
Third-party services
ArcLead does not use its own servers to collect or store your records and does not include advertising or analytics services.
When you choose to use an external service — Google Drive, Microsoft OneDrive, an email or messaging app, or your phone's calendar — that service may process information or files you provide to it, under its own privacy policy and terms. Google Play handles app distribution and updates under Google's applicable policies.
Changes to this policy
If the app's data-handling practices change, this policy will be updated to reflect them and the effective date at the top of this page will be revised.
Contact
Questions about this Privacy Policy or ArcLead? Email arclead.crm@gmail.com (app support) or hello@arcvertex.io (company).