Simple CRM · last updated 1 October 2026
Simple CRM works entirely on your phone unless you choose otherwise. Without an account, your records never leave your device. If you sign in to back up, sync or add your crew, your business records are stored on our server so your other phones and your crew can reach them. This page says exactly what, where, and how to delete it.
The records you create — customers and their contact details, service addresses, projects, jobs, appointments, estimates, invoices, payments, costs and mileage, photos and receipts you attach, and your own business details — are saved in the app's private storage on your device. Android prevents other apps from reading it.
Signing in is optional and free, and uses Sign in with Google or Sign in with Apple. There is no password. From that account we keep only its account identifier and an email address (with Apple, that may be a private relay address Apple creates for you); Google or Apple may show us your name during sign-in, but we don't store it. An account keeps your business with you when you change phones and is how you join a crew.
While you're signed in and on a plan, the app copies your business records to our server so they're backed up and appear on your other devices: customers and their contact details and addresses, projects, jobs, appointments, estimates, invoices, line items, payments, costs, mileage and your price book. Photos and receipt images are not uploaded; they stay on the phone that took them.
The server runs on Cloudflare (Workers and D1) in the United States. Everything travels over encrypted connections (HTTPS). We don't sell this data, show ads, or share it with anyone except as described here.
On a Crew plan the owner can invite people with a one-time code. Everyone on a crew works from the same business records, and members can see each other's email addresses. The owner can remove a crew member at any time; that person then loses access to the business's cloud records.
If you text a customer an invite link, the web form they open sends the details they choose to type — name, email, address and a note — to our server, where they wait until your app collects them into the customer's record. They are deleted from the server as soon as your app has them. Unused links expire after 14 days. The customer's phone number is never sent; the text message is composed on your own phone.
A business can also share one reusable sign-up link — by text, on social media or on its website. Anyone who opens it can send that business their name, phone number, email, address and a note. Those details wait on our server until the business's app collects them as a new customer, and are deleted from the server as soon as the app has them (or after 30 days if it never does). The business can replace its link at any time, which stops the old one working. Sign-ups through any one link are capped per day to stop abuse.
Plans are bought through Google Play. We never see your payment details. Your phone sends us the purchase token Google issues so our server can confirm the subscription with Google.
The app uses Google's Firebase Analytics and Crashlytics to count how features are used and to report crashes: which screens and actions are used, app version, device model and operating system, and a random app-instance identifier. These never include the contents of your records — no customer names, amounts or notes.
Job photos (before, during and after) come from your camera or your photo library, which hand over only the images you choose. They stay on your phone; a photo report you share is handed to your phone's share sheet.
Deleting your account does not cancel a Google Play subscription — cancel it in Google Play → Payments & subscriptions.
Simple CRM is a tool for running a contracting business and is not directed at children under 13.
If what the app collects changes, this page will be updated before that version ships and the change described in the release notes.
Questions about this policy: support@nextlayertechnology.net