Mobile privacy policy
OCM connects your device directly to the server your organization selects.
This policy applies to the Open Case Management mobile apps published by Metatheria, LLC for iPhone, iPad, and Android.
Effective August 6, 2026 · Last updated August 6, 2026
Roles
The mobile app and the connected organization
Your organization—not the app—creates your OCM account and decides what case information that account may access.
The app connects to the OCM server address you enter. The organization operating that server controls its accounts, permissions, case records, contacts, activities, retention rules, and responses to requests concerning server-held data.
Metatheria may host or support a connected server under an agreement with that organization. When it does, server-side information is handled for the organization to provide, secure, maintain, and support the service. A self-hosted or separately hosted server sends its data to that operator, not to a central mobile-app service.
Information handled
What the app uses to provide its features
The exact records visible in the app depend on your organization’s server and your account permissions.
Server and account information
The selected server address, OAuth registration details, account identifiers, and protected OAuth credentials needed to connect and remain signed in.
OCM work information
Case and matter details, client and contact information, calendar activities, notes, and other records the connected server makes available. The app can submit supported notes and activities back to that server.
Device preferences
Settings such as optional app lock and reminder preferences. On Android, optional local reminders are derived from assigned calendar activities.
Support information
If you contact us, we use the contact details and diagnostic information you choose to provide to investigate and respond. Do not include confidential case information unless an authorized support process specifically requires it.
Storage and security
Protected locally and in transit
The app accepts HTTPS server addresses. OAuth credentials are protected by Apple Keychain on iOS and iPadOS or Android Keystore-backed encryption on Android. Optional device authentication can protect access when the app reopens.
The app may maintain an on-device cache so previously viewed information remains available when connectivity is unreliable. Android cloud backup is disabled. On Apple devices, the case-cache database is excluded from device backup.
Sharing and tracking
No ads and no behavioral tracking
The mobile app contains no advertising, behavioral-tracking, analytics, or third-party crash-reporting SDK. It does not sell personal or case information or use it for targeted advertising.
Information is sent to the selected OCM server and to operating-system services needed for actions you request, such as opening the browser for OAuth or the dialer for a telephone number. Service providers may process limited information when needed to host, secure, maintain, or support a Metatheria-hosted server, subject to the connected organization’s agreement.
The app does not request access to device location, the address book, photos, camera, microphone, phone calls, SMS, advertising identifiers, or broad device storage.
Retention and choices
You can remove what is stored on the device
Local cached information remains until it is replaced, wiped by signing out or forgetting the server, removed at the server’s direction, or removed when the app is uninstalled. Server-side retention is set by the organization operating the connected server and applicable agreements and law.
You may refuse optional notifications without losing other app functions. For access, correction, export, or deletion of an account or server-held record, contact the organization that supplied your OCM account.
OCM is a professional case-management client and is not directed to children.
See the data-deletion instructions for the difference between removing local app data and requesting removal of server-held information.
Contact
Privacy questions
Contact Metatheria, LLC, doing business as Clark Management Consulting, at alex@clarkmanagementconsulting.com. For a request about records held on a connected server, contact the organization that provided your account.