Mobile App Policy

EstateFlow publishes mobile applications for Android (Google Play and direct APK for enterprise customers), iOS (App Store) and as an installable progressive web app (PWA):

• Agent App — leads, calls, WhatsApp, plot sharing, bookings and geo check-in for sales staff and dealers.
• Recovery App — recovery lists, visit logging, payment posting with receipt, defaulter follow-up.
• Site App — daily logs, progress photos, store issues and labour attendance for construction teams.
• Resident App — maintenance bills, online payment, complaints, visitor passes and society notices.
• Dealer App — inventory, holds, bookings against quota and commission statements for dealer networks.
• The apps are companions to a Customer’s EstateFlow subscription; you need an account issued by your organisation’s administrator.

Accounts are created by the Customer’s administrator and are personal to one named user. You must be at least 18 years old and authorised by the organisation to use its data. The Resident App is available to owners and tenants registered by the society.

Sign-in uses email or mobile number with a one-time code or password, and optionally device biometrics (fingerprint/Face ID) which are verified by your phone, never sent to us. Sessions expire after a period of inactivity set by your administrator.

The apps ask for permissions only when a feature needs them. You can refuse any permission; the related feature will be unavailable and the rest of the app keeps working.

• Location (while using the app): geo-tagged check-ins at site offices, plots and customer visits, and to show your position on the scheme map. Background location is never collected. Check-ins record a point and a timestamp only when you tap the button.
• Camera and photos: capturing CNICs, cheques, signed documents, site progress and complaint photos. Images are uploaded to your organisation’s workspace and not stored in your phone’s gallery unless you choose to save them.
• Contacts (optional, Agent App): to add a lead from your address book. We read only the contact you pick; the address book is never uploaded.
• Phone and call log (Android, optional): to log outbound calls to leads as activities. Call audio is never recorded by the app.
• Notifications: reminders, assigned leads, approval requests, ballot results and society notices. Manage them in the app or your phone settings.
• Storage / files: attaching PDFs and spreadsheets, and caching data for offline use.
• Microphone (optional): voice notes on a lead or ticket, transcribed by Flo if your organisation has enabled it.

The apps are offline-first. They cache the records your role can see (for example your leads, today’s recovery list, the plots in your block) so you can work without signal and sync when you are back online. Queued actions (a payment posting, a check-in, a complaint) are timestamped at the moment you performed them.

Cached data is stored in an encrypted database on the device. It is cleared when you log out, when your administrator revokes the device, after 30 days without sign-in, or when the app is uninstalled. Do not root or jailbreak a device used for EstateFlow; the app may refuse to run on such devices.

Payments posted offline are provisional until synced and confirmed by the server, which applies the same duplicate and amount checks as the office. A receipt is sent to the customer only after confirmation.

The apps collect the data you enter (leads, notes, payments, photos, complaints) and technical data needed to run and secure the service: device model, OS version, app version, a device identifier for revocation, crash reports and the timestamps and locations of check-ins you perform. This data belongs to the Customer’s workspace and is governed by the Customer’s agreement with us and by our Privacy Policy.

We do not use third-party advertising SDKs and do not sell app data. Crash and performance diagnostics are pseudonymised. Analytics inside the app, where enabled by the Customer, measure feature usage only.

Sending a WhatsApp message, SMS or email from the app uses your organisation’s approved templates and the company number, so the conversation stays on the customer’s record. Personal WhatsApp numbers are not read by the app. Recipients can opt out at any time and opt-outs are honoured across all products.

Keep your phone locked with a PIN or biometrics, install OS updates, and never share your login. Report a lost or stolen device to your administrator immediately; devices can be revoked and their cache wiped remotely. Your organisation may enforce a minimum OS version, screen-lock, or a mobile device management profile as a condition of use.

We release app updates roughly monthly with a changelog. Security updates may be mandatory: the app will ask you to update before continuing. Versions older than 12 months may stop working.

Downloads from Google Play and the App Store are also subject to those stores’ terms. For enterprise customers we provide signed APKs and TestFlight builds; installing from other sources is at your own risk.

Support for the apps is provided through your organisation’s administrator and through EstateFlow support at sales@estateflow.live or WhatsApp during business hours.

Residents, buyers and staff whose data is held in a Customer’s workspace should first contact that organisation, which controls the data. You can request deletion of app-side data (device cache, crash reports, device identifier) by uninstalling the app or emailing sales@estateflow.live with the device and account details; we complete such requests within 30 days, subject to records the Customer must keep by law (for example payment receipts).

Questions about the apps or this policy: sales@estateflow.live · +44 7367 064067 · WhatsApp.