CanvassFlowPrivacy Policy
CanvassFlow is a mobile app for door-to-door canvassing teams. It's made and operated by Taryn Maloney ("we", "us"), based in Washington, United States. This policy explains what information the app collects, why, who it's shared with, and how to delete it.
In short: we collect what you need to log doors and work as a team: your account, the homes and notes you enter, and your location and route while you canvass. Your teammates can see your live position and routes during sessions unless you turn sharing off. We don't sell your data, show ads, or use analytics or advertising trackers. You can delete your account in the app at any time.
Information we collect
Account and profile
- Your name, email address and password (stored only as a one-way hash), or, if you choose "Continue with Google", the name and email Google shares with us.
- Your avatar icon and colors, your route line color, and a profile photo if you upload one.
- Which team you belong to and when you joined it.
Location
- While the app is open, your device's precise location is used to show your position on the map. Opening the app by itself does not send your location to anyone.
- During a canvassing session, your route (a series of GPS points with times) is recorded and saved to your account, and your live position is shared with your team about every 10 seconds, unless you turn off "Share my live location" in Profile. Pausing or ending the session stops live sharing.
- Lock-screen tracking (optional, off by default) keeps recording your route during an active session while your phone is locked. It only runs if you turn it on in Profile and allow "Allow all the time" location access. Android shows a notification while it's running.
Homes and leads you enter
- Pin locations and addresses, whether someone answered, owner/renter, outcome, follow-up dates, tags, sale amounts, and notes.
- Contact details you choose to record for a lead, such as a name and phone number, and notes you share with your team.
Only enter information about other people that you have a legitimate reason to keep, and follow any rules that apply where you canvass.
Voice notes
If you use the dictate button, the recording is sent to our speech-to-text provider to turn it into text. CanvassFlow keeps the resulting text in your notes and does not store the audio.
Technical information
Our hosting provider keeps standard server logs (such as IP address, time and the request made) for security and troubleshooting. The app does not include analytics, advertising, or crash-reporting software, and does not use advertising identifiers.
How we use it
- To sign you in and keep your account secure.
- To show the map, your homes, follow-up reminders, routes and walked-street coverage.
- To let your team work together: shared homes and notes, live positions, assigned streets, leaderboards and reports.
- To transcribe voice notes when you ask.
- To keep the service running, prevent abuse (for example, limiting repeated failed logins), and respond to support requests.
We don't sell your personal information, and we don't use it for advertising.
Who can see your information
- Your team can see the homes, outcomes, contact details and notes shared within the team; your name and avatar; your live position and today's route during sessions (if sharing is on); and your routes from up to the last 30 days for street coverage, only from the time you were both on the team.
- People outside your team can't see your location, routes or homes.
- If you turn off location sharing, teammates see neither your live position nor your routes.
Service providers
We use these providers to run CanvassFlow. They process data on our behalf to provide their service:
| Provider | What for | What they receive |
|---|---|---|
| Render (USA) | Runs the CanvassFlow server and these web pages | All app requests and server logs |
| MongoDB Atlas (Google Cloud, Iowa, USA) | Database | Account, team, home, note, route and session data |
| Cloudflare R2 | Stores profile photos | Photos you upload |
| OpenAI | Speech-to-text for voice notes | The audio of notes you dictate. Under OpenAI's API terms it isn't used to train their models and may be kept for up to 30 days for abuse monitoring. |
| "Continue with Google" sign-in | Only if you choose it: confirms your Google account and shares your name and email | |
| Esri | Map imagery | Your device downloads map tiles directly from Esri, which reveals your IP address and the areas you view |
We may also disclose information if required by law, or to protect the safety of users or the public.
How long we keep it
- Your account, homes, notes and route history are kept until you delete them or delete your account.
- You can delete individual routes (Routes tab) and homes at any time.
- Information waiting to upload is stored on your phone until it syncs or you clear the app's data.
- Server logs are kept by our hosting provider for a limited period and then deleted automatically.
Deleting your account and data
You can delete your account at any time in the app: Profile → Delete account. You can also request deletion without the app; see Delete your CanvassFlow account.
When you delete your account, we delete your login and profile, your profile photos, your live location, your route and session history, and streets assigned to you. Homes you added to a team stay available to that team, but your name is removed from them and replaced with "Former member". If you were the last member of a team, the team and all its homes are deleted. Personal homes not shared with a team are deleted. Team ownership passes to the longest-standing remaining member.
Your choices and rights
- Turn location sharing and lock-screen tracking on or off in Profile, or change location permission in your phone's settings.
- Edit or remove your profile photo, name and colors in Profile.
- Ask for a copy of your data, or for corrections or deletion, by emailing us (below). We'll respond within 30 days.
Depending on where you live, you may have additional privacy rights. Contact us to exercise them.
Security
Connections between the app and our server are encrypted (HTTPS). Passwords are stored only as one-way hashes. Your sign-in token is kept in your phone's secure storage (Android Keystore / iOS Keychain). Access to the database and photo storage is restricted to our server. No system is perfectly secure, but we work to protect your information.
Children
CanvassFlow is a work tool for adults and isn't directed at children under 16. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we make important changes, we'll update the date above and let you know in the app or by email before they take effect.
Contact
Questions or requests: support@canvassflow.com