Punchlee - Privacy Policy

Punchlee is a tool for construction teams to track punch-list items - photos of work that needs to be done, who is doing it, and whether it's finished. This page explains, in plain language, what information the app handles and why. We collect only what the app needs to work. We do not sell your information, and there are no ads.

What we collect

• Your account. Your email address or mobile phone number, plus a password, a sign-in link, or a one-time code we text you. Crew members join by signing in with the same email or phone number their invite was sent to.
• People you add to a project. The names, phone numbers, and email addresses you enter for your crew, so the app can send them their invite and show who's assigned to what. Please only add people who expect to be contacted about the project. If you use "Fill from my contacts", the app opens your phone's contact book (with your permission) and copies only the name, phone number, and email of the one person you pick. We never read, upload, or store the rest of your contact list.
• Photos, voice notes, and text. The punch-list content you create - photos (including any markup drawn on them), voice notes, item descriptions, and comments.
• Photo location. With your permission, the app saves where you were standing when you added an item, so items can be shown on the project map. You can decline location access and the app still works.
• Notifications. If you turn on notifications, your device gives us a delivery address (a "push subscription") used only to send you updates about your projects.
• How the app is used. To learn where the app is hard to use, we count a few moments: when the app is opened, when the sign-in screen or the PRO screen is shown, and how far someone gets when adding an item. Each count records the type of phone, the app's language and version, and your account if you are signed in. It never includes what you type, photograph or record. These counts stay in our own database. They are never sold, never shared with advertisers, and never used to track you in other apps or websites.
• "Seen" receipts and where work was finished. When someone opens their list, the person running the job can see when they first saw each item assigned to them. When an item is marked done, the app may save where the phone was (with your location permission), so the job's runner can see the work was finished on site.
• Morning reminder. To send your reminders at the times you pick, the app saves your phone's time zone and language. You can switch the reminder off in the Account menu.
• Company details and sign-offs. If you add your company name, contact line or logo, they are saved with your account and printed on the reports you make. If a client signs off a job on your phone, their name, signature and the time are saved with that job and shown on its report.
• Ideas and problems you post. If you use "Suggest an idea", your post, your first name and your votes are shown to other Punchlee users so they can vote on it. Only your first name is shown, never your email or phone number. You can delete your post at any time.

Services we rely on

Punchlee runs on a small number of trusted services. Each one only receives what it needs to do its job:

• Supabase stores the app's data (accounts, projects, photos) - Supabase privacy policy.
• Cloudflare Turnstile protects sign-in from bots, invisibly. It may process device and network signals to tell people from robots - Turnstile privacy notice and the Cloudflare Privacy Addendum.
• DeepL translates typed text (item titles and notes) when teammates use different languages. Only the text being translated is sent - DeepL privacy policy.
• Apple Maps draws the satellite map behind your photo pins. Apple may process map requests per the Apple privacy policy.
• OpenAI turns voice notes into text, so a recording can also be read (and translated) by the crew. Only the audio being transcribed is sent - OpenAI privacy policy.
• Anthropic (Claude) drafts the optional summary paragraph when you ask for one in an update or PDF. Only the punch-list text being summarized (item titles, notes, statuses, names of assignees) is sent, and you can edit or discard the result - Anthropic privacy policy.
• Twilio delivers the one-time sign-in codes we send by text message. It receives only the phone number and the code being sent - Twilio privacy policy.
• RevenueCat keeps track of Punchlee PRO subscriptions so your PRO status follows your account across devices. It receives an anonymous user identifier and the subscription's status from the store - never your name, card number, or project data - RevenueCat privacy policy.

Purchases and subscriptions

Punchlee PRO is an optional paid subscription. When you subscribe in the iPhone app, the payment is handled entirely by Apple; in the Android app, by Google. If we later offer subscriptions on punchlee.com, that payment would be handled by Stripe (Stripe privacy policy). We never see or store your card number. We keep only a record of whether your account has an active subscription and when it ends, so the app knows to unlock PRO features. You can cancel anytime in your App Store or Google Play subscription settings, and refunds are handled by the store you bought from.

Text messages (SMS)

If you sign in with your phone number, Punchlee sends you a one-time passcode by text message so we know the phone is really yours. That's the only kind of text we send - no marketing texts, ever. Message frequency varies (typically one text per sign-in), and message and data rates may apply depending on your carrier plan. You can stop these texts at any time by replying STOP, or get help by replying HELP or emailing us; note that after STOP you won't be able to sign in by phone until you opt back in.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers collected for SMS consent are never sold. Your number is used only to sign you in and to run the app as described on this page, and the service providers listed above act solely on our behalf to operate the app - never for their own marketing.

Who can see your project

Only people on a project can see that project. Invite links are personal - each link identifies one person, so treat a link like a key and share it only with the person it was made for. Field workers can see and complete their tasks; viewers can only watch progress.

How long we keep things

Your projects stay until you delete them. Deleting an item or project removes it from the app. If you want your whole account and its data removed, email us and we'll take care of it.

Security

Everything travels encrypted (HTTPS), and access rules on the database make sure each person can only reach the projects they belong to.

Children

Punchlee is a work tool and is not directed to children under 13.

Changes

If this policy changes in a meaningful way, we'll update this page and the date at the top.

Contact

Questions or requests: support@punchlee.com

See also the Terms of Use.