🔒 ClientVault Privacy Policy

Effective Date: April 9, 2026 · Version 1.2

This document governs the collection, use, and disclosure of data by the ClientVault iOS application.

1. Introduction

BassTech Consulting Group ("we", "us", or "our") operates the ClientVault iOS application (the "App"). This Privacy Policy explains how we collect, use, store, share, and protect your information when you use ClientVault on iPhone, Apple Watch, and CarPlay.

ClientVault is designed with a privacy-first architecture. Personal Identifiable Information (PII) — such as contact names, email addresses, and phone numbers — is stored exclusively in your private iCloud account via Apple CloudKit and is never transmitted to or stored on BassTech servers. Non-PII operational data (client status, heat scores, notes, reminders, and tags) is stored on our secure Azure-hosted backend, associated with your anonymous server-side account.

By using ClientVault, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the App.

2. Who We Are

See the summary block above for our full contact details.

3. Information We Collect

3.1 Information You Provide Directly

When you use ClientVault, you may enter the following information about your clients and contacts. This information is stored exclusively in your personal iCloud / CloudKit account and is never accessible to BassTech:

• Contact names, company names
• Email addresses and phone numbers
• Custom PII fields you define (e.g. LinkedIn URL, job title)
• Voice notes dictated via the Apple Watch or iPhone
• Contacts captured via Apple Watch dictation (Contact Capture feature)

3.2 Information Generated by the App

The following non-PII data is generated by the App and stored on our Azure-hosted server under your anonymous account identifier:

• Client status (Active, Follow Up, Inactive)
• Free-text notes and reminder records (linked to anonymous client IDs, no PII)
• Relationship Heat Scores (0–100, calculated server-side from interaction patterns)
• Tags applied to clients
• Meeting outcomes and duration (from Apple Watch Meeting Timer feature)
• App usage metadata (account creation date, subscription status)

3.3 Information Collected Automatically

When you use ContextIQ features (optional, requires purchase), the App accesses the following on-device signals. None of this data leaves your device.

• Calendar events — for Meeting Prep nudges
• Device location — for Nearby Contact geofencing nudges (processed on-device; raw coordinates never transmitted)
• Device motion — for Commute Window detection (processed entirely on-device)
• Photos metadata — for Photo Memory nudges (accessed read-only; never uploaded)
• Contacts app data — for Birthday nudges and Import from Contacts

3.4 Authentication Information

ClientVault uses Sign In with Apple exclusively. On first sign-in, Apple provides your full name and email address to the App. This data populates your in-app Account section. We store your Apple-issued user identifier on our server for authentication purposes. We do not store your Apple ID password.

3.5 Ask Claude (CarPlay & iPhone)

The Ask Claude feature sends your spoken queries to the Anthropic Claude API for processing. Conversation history is held in device memory only for the duration of the session and is cleared when the session ends. Your Anthropic API key is stored securely in the iOS Keychain on your device and is never transmitted to BassTech servers.

• Query text is sent to Anthropic for processing — Anthropic's Privacy Policy applies.
• Ideas you choose to "Save to ClientVault" are stored in your private iCloud CloudKit database.
• No conversation history is retained after a session ends.

3.6 Brainstorm (Apple Intelligence)

Brainstorm is powered by Apple Intelligence and runs entirely on-device. No Brainstorm conversation data is transmitted to BassTech servers or to Apple's cloud. Apple's on-device AI privacy guarantees apply.

3.7 Apple Watch

The Apple Watch companion app communicates with the iPhone app via WatchConnectivity (a peer-to-peer local channel). No Watch data is sent directly to any server; all data flows through the iPhone app, which applies the same storage rules described above.

4. How We Use Your Information

5. How We Store Your Information

ClientVault uses a split-storage architecture designed to maximise your privacy:

Our Azure-hosted server is located in the United States and is protected by industry-standard security controls including encryption at rest and in transit (TLS 1.2+), access control policies, and regular security audits.

iCloud / CloudKit data is governed by Apple's iCloud Terms and Conditions and Privacy Policy. BassTech has no ability to access your CloudKit data.

6. Data Retention

7. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share limited data with the following third parties solely to operate the App:

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of BassTech, its users, or the public.

8. Device Permissions

ClientVault requests the following iOS permissions. All permissions are requested at the point of use. You may grant or revoke them at any time in Settings → Privacy on your iPhone.

You can use ClientVault without granting any optional permissions. Certain ContextIQ, Watch, and CarPlay features will not be available if the relevant permissions are denied.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

Access & Portability

• You can view all PII stored in CloudKit directly within the App (Clients tab → client record).
• Non-PII server data is accessible through the App interface.
• To request an export of your server-side data, contact us at privacy@support.basstechdev.com.

Correction

• You may edit or correct any client record at any time within the App.

Deletion

• Delete individual client records from the Clients tab (swipe left → Delete).
• Deleting a client removes server-side non-PII data immediately. CloudKit PII is removed upon confirmation.
• To delete your entire account and all associated server data, contact privacy@support.basstechdev.com. We will process deletion requests within 30 days.
• Uninstalling the App removes locally cached data. CloudKit data persists in your iCloud account until you delete it.

Opt-Out of Notifications

• Disable push notifications in Settings → Notifications → ClientVault on your iPhone.
• Configure quiet hours and daily nudge caps in the App under Settings → Notifications → Quiet Hours & Limits.

Opt-Out of On-Device Signals

• Revoke any device permission in iPhone Settings → Privacy at any time.
• Disable individual nudge signal types in Settings → ContextIQ → Nudge Preferences within the App.

California Residents (CCPA)

California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@support.basstechdev.com.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing. Our lawful basis for processing is the performance of a contract (providing the App services) and, where applicable, your consent. To exercise your rights, contact us at privacy@support.basstechdev.com.

10. Children's Privacy

ClientVault is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@support.basstechdev.com and we will delete it promptly.

11. Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• All communications with our server use TLS 1.2 or higher.
• Azure SQL databases are encrypted at rest using Transparent Data Encryption (TDE).
• Your Anthropic API key is stored in the iOS Keychain and never transmitted to BassTech.
• PII is stored exclusively in your private iCloud / CloudKit account, which BassTech cannot access.
• Authentication uses industry-standard Sign In with Apple (OAuth 2.0 / OIDC).
• Server access is controlled by Azure Active Directory (Azure AD B2C) with least-privilege policies.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

12. Third-Party Services

ClientVault integrates with the following third-party services. Their respective privacy policies govern their handling of any data they receive:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy within the App (Settings → About ClientVault) and updating the Effective Date at the top of this document. We encourage you to review this policy periodically.

Continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

← Back to ClientVault ← BassTech Home