Last updated: December 31, 2025
Summary: We collect only what's necessary to provide our time tracking service. We never sell your data. We use industry-standard security practices to protect your information.
Punch'd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our time and attendance tracking service ("Service").
By using Punch'd, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
| Data Type | Purpose |
|---|---|
| Account Information | Name, email, phone number, company name - to create and manage your account |
| Employee Information | Names, email addresses, job roles of employees you add to the system |
| Payment Information | Credit card details (processed by Stripe) - to process subscription payments |
| Communication Data | Messages you send us via support channels |
| Data Type | Purpose |
|---|---|
| Time Entry Data | Clock in/out times, duration - core functionality of the Service |
| GPS Location Data | Location coordinates when clocking in/out - to verify job site presence |
| Device Information | Device type, OS version, app version - for troubleshooting and compatibility |
| Usage Data | Features used, pages visited - to improve our Service |
Important: If you enable facial verification, we collect and process biometric data (facial geometry). This is sensitive personal information subject to special protections under laws like BIPA, CCPA, and GDPR.
Our facial verification feature:
Employer Responsibilities: If you use facial verification, you are responsible for:
We use collected information to:
For users in the European Economic Area (EEA), we process personal data based on:
We do not sell your personal information. We may share information with:
We work with trusted third parties who help us operate our Service:
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
If Punch'd is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.
We may disclose information if required by law or in response to valid legal requests (e.g., court orders, subpoenas).
We may share information with third parties when you explicitly consent to such sharing.
We retain your information for as long as necessary to:
Retention Periods:
We implement robust security measures to protect your data:
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Depending on your location, you may have the following rights:
If facial verification is enabled, Illinois residents have rights under the Biometric Information Privacy Act, including the right to:
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or as required by applicable law).
Punch'd is based in the United States. If you access our Service from outside the US, your information may be transferred to and processed in the US, where data protection laws may differ from your jurisdiction.
For EEA/UK users, we ensure appropriate safeguards through:
Our Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
We use cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may affect Service functionality.
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
For GDPR inquiries, you may also contact our Data Protection Officer at [email protected].
Under the California Consumer Privacy Act (CCPA), California residents have additional rights as described in Section 8.3 above. In the past 12 months, we have collecte