Privacy Policy

1. Introduction & Core On-Device Architecture

CanvassPad ("the App," "we," "us," or "our") is dedicated to protecting the confidentiality and privacy of real estate professionals, agents, brokerages, and field teams. This Privacy Policy details our data practices across the CanvassPad iOS mobile application and the canvasspad.com website.

Local-First, On-Device Architecture: CanvassPad is engineered from the ground up on a local-first paradigm. All door-knocking records, contact information, resident names, phone numbers, email addresses, voice notes, lead sentiments, and GPS route coordinates remain stored exclusively inside your Apple device's private sandboxed storage (via Apple SwiftData). CanvassPad does not operate external database servers that copy, harvest, or collect your field farming records.

2. Device Permissions & Local Processing

A. Location Services (GPS Coordinates & Route Breadcrumbs)

When you start an active farming session, CanvassPad requests permission to access your device's location services (NSLocationWhenInUseUsageDescription).

• Your GPS coordinates are processed strictly on your local device to calculate distance walked, draw your route polyline on the live MapKit view, and pin door visits to geographic coordinates.
• When a pin is dropped, the App performs reverse-geocoding via Apple's native CoreLocation APIs to resolve a street address. This request is sent directly to Apple's MapKit infrastructure in accordance with Apple's Privacy Policy. CanvassPad never intercepts, logs, or stores these requests externally.
• Location data is never transmitted to advertising networks, third-party data brokers, or analytics servers.

B. Microphone & Speech Recognition (Voice Dictation)

CanvassPad requests microphone and speech recognition access (NSMicrophoneUsageDescription, NSSpeechRecognitionUsageDescription) solely to allow you to record and dictate field notes at the door without typing.

• Audio is captured and transcribed directly on your iOS device using Apple's on-device Speech framework whenever available.
• Audio recordings and transcriptions are saved inside your device's private sandbox and attached to the corresponding visit record. They are never sent to CanvassPad or any third-party marketing server.

C. Contacts, Lead Records & Field Observations

Any contact names, phone numbers, email addresses, lead sentiments, and text notes entered by you are saved strictly in your local device database. They are only shared when you explicitly initiate an export (such as generating a PDF report or CSV export) and share that file via the standard iOS Share Sheet.

3. Cloud Synchronization & Storage Scope

CanvassPad does not operate its own cloud sync infrastructure or third-party servers. If you have enabled Apple iCloud Backup on your iOS device, your local application sandbox data may be included in your personal Apple device backup, tied exclusively to your personal Apple ID and encrypted by Apple. CanvassPad has zero access to your Apple iCloud account or backups.

4. Subscriptions, Payments & Apple StoreKit

All financial transactions, subscriptions (Pro Monthly at $9.00/mo and Pro Annual at $49.00/yr), and in-app purchases are processed exclusively by Apple through the standard iOS App Store StoreKit framework.

• CanvassPad does not collect, receive, process, or store credit card numbers, billing addresses, or bank account details.
• Transaction receipts and subscription entitlement status are verified directly between your device and Apple's App Store servers.
• For details regarding Apple's payment handling, review the Apple Privacy Policy at apple.com/legal/privacy.

5. Analytics, Tracking & Third-Party SDKs

CanvassPad contains no third-party advertising SDKs, no behavioral trackers, and no third-party analytics frameworks (such as Google Analytics, Meta Pixel, or Firebase), adhering strictly to Apple's App Tracking Transparency standards. We do not track users across third-party websites or applications.

6. Data Retention & Customer Control

You retain complete ownership and control over all farming records. You may delete any door visit record, session log, contact, or audio recording at any time within the App. Because all data is stored locally, un-installing the App will completely purge all application data from your device storage.

7. Statutory US & Florida Privacy Disclosures

We do not sell, rent, monetize, or trade your personal information, contact records, or farming data to any third party or data broker. We disclose information only if required by a formal, valid court subpoena or law enforcement warrant under applicable Florida or federal law.

8. Contact & Inquiries