Policy

Privacy

What Simple Portal stores, who else receives it, and how to delete an account. Updated 30 October 2026.

This policy covers the Simple Portal iOS app and the affiliate portal at share.simpleportal.io. It describes what those products actually store. The marketing pages on simpleportal.io do not ask you to create an account.

Who operates Simple Portal

The Simple App Inc. operates Simple Portal.

Account information

An account starts from an invite. We store the display name you confirm, the phone number in international format, the email address when one is on the account, the workspace you belong to, your role, and whether you have finished welcome. We also store whether you are willing to join sales calls.

Sign-in is a six-digit code by text, or an email link, sent through Supabase Auth. The code request does not create an account for a number or email that was not invited. We store a salted hash of the phone number to rate-limit code requests. We do not store the text-message code after it is checked.

Contacts you add

If you import or type contacts, we store the name, email, phone number, company, role, notes, follow-up date, and where the row came from (typed, the contact picker, a vCard, or a CSV file). Those rows are private to your affiliate account. Staff tools are not granted read access to them.

Your public card, if you publish one, can show your name, title, company, short bio, and photo. Phone and email stay off the card unless you set them to visible. The photo is stored as a file tied to your account.

Referrals, commissions, and bookings

When someone uses your link, we store the referral: the offer, the stage, and, when they inquire or book, their name, email, phone, and company. A person who writes in through a link can also leave a short message. Booked calls are scheduled through Cal.com, and we keep the booking record that comes back from that webhook.

Commissions, invoices, agreement acceptances, and payout history are stored so the amount you earn can be explained and paid. You see your own figures. Finance staff see what they need to approve and send a payout.

Payout information

If you add a payout method, we store the details for that method. Bank transfer (ACH) stores the name on the account, the routing number, the account number, and whether it is checking or savings. PayPal stores an email. Venmo stores a username and, if you add it, a phone number. Zelle stores an email or a phone number. A check stores the payee name and mailing address.

Those details are encrypted with AES-256-GCM before they are written. You and finance staff see a masked version. Revealing the full details is a separate action, and each reveal is logged. A payout version is not edited in place. A new version replaces it.

Links, visits, and your card

We store your promo links, when you copy or share them, and which channel you used. When someone opens a link or your card, we store the time, a class of user agent (browser, preview, crawler, or unknown), the referrer host, and an HMAC of the IP address. The raw IP address is not stored. Card views and vCard downloads use the same hash.

Push notifications

The iOS app can register an Apple push token, with the app version and whether the build is sandbox or production. We use it to send alerts about your referrals. Signing out of the iOS app revokes that device token. The token is not used for marketing blasts.

Onboarding voice

The welcome walkthrough can play spoken audio generated by ElevenLabs. When personalized audio is turned on, the script includes your first name and that script is sent to ElevenLabs to synthesize the file. When it is off, one shared voiceover is used and your name is not sent. The audio file is stored privately for your account. We do not send your phone number, email, contacts, or payout details to ElevenLabs.

Analytics and crash reporting

The iOS app and this web app do not include a third-party analytics SDK or a third-party crash-reporting SDK. There is no PostHog, Amplitude, Mixpanel, Firebase, Sentry, or Crashlytics package in the product. Apple can still collect diagnostics if you allow that in iOS Settings. Vercel, which hosts the site, and Supabase, which hosts the database and sign-in, keep their own operational logs of requests.

How we use this

To sign you in and keep the session on your device.
To show your offers, links, referrals, commissions, and payouts.
To credit an introduction to the affiliate who shared the link.
To send a payout to the method you saved.
To send push alerts you can act on.
To play the welcome walkthrough.
To limit abuse, including code requests and public form submissions.

We do not sell personal information. We do not use it to train a public model.

Supabase, for the database, file storage, and sign-in codes.
Apple Push Notification service, for the device token and the alert.
ElevenLabs, for onboarding audio, and only the script described above.
Cal.com, when a call is booked through a link.
The payout destination you chose, when a payout is actually sent.
The offer site a link redirects to, which receives the tracking token on that URL, not your contact book.

How long we keep it

Account, contact, and card data stay while the account is active. Share events, visit records, commission ledger rows, invoices, and payout versions are kept as the financial record. Device tokens stay until they are revoked. Onboarding audio stays until the account is closed or the file is replaced.

Delete your account

In the app

On iPhone, open Home, open the Account menu (the person icon at the top right), and choose Delete account, then confirm. The account is suspended at once and you are signed out. Staff complete the deletion from the operations queue. Signing out from that menu, without choosing Delete account, only ends the session on that device. It does not delete the account.

By email

You can also email support from the phone number or email on the account and ask us to delete it. Email help@thesimpleapp.io.

Payout and commission records are kept as required for tax and accounting. Contacts you imported, your card, device tokens, and onboarding audio are removed when staff complete the deletion.

Contact

Questions about this policy go to The Simple App Inc.. Email help@thesimpleapp.io.