Privacy Policy

What we collect and why

Account information. When you register, we collect your email address. We use it to authenticate you and, if needed, to contact you about your account.

Project and issue data. The projects, issues, notes, categories, dates, and status information you create are stored in your account so you can access them across devices. This data belongs to you.

Photos. Images you attach to projects or issues are uploaded to secure cloud storage linked to your account. They are not shared with other users or used for any purpose other than displaying them back to you and including them in your reports.

Subscription information. Punch Zero Pro is a single monthly subscription with a 7-day free trial. If you subscribe, your payment is processed by Stripe (web) or through the App Store/Google Play (mobile). We store your subscription status, renewal date, and (for web) your Stripe customer identifier so the app can confirm your access. We do not store card numbers or full payment details — these remain with Stripe, Apple, or Google.

Usage data. We do not run advertising analytics or sell usage data. Firebase may collect limited technical diagnostics (crash reports, performance data) as part of the infrastructure we use to operate the service.

Third-party services

We rely on the following services to operate Punch Zero. Each has its own privacy policy governing their handling of data.

Data storage and security

Your data is stored on Google Cloud infrastructure via Firebase. Access is protected by Firebase security rules so that only your authenticated account can read or write your data.

Photos are stored in Firebase Storage with access restricted to your account. Links to your photos are not publicly guessable.

We take reasonable technical precautions to protect your data, but no system is completely secure. We will notify you if we become aware of a breach that affects your data.

Data retention

Your data is retained for as long as your account is active. If you delete your account, your project data and photos are deleted within 30 days. Stripe retains transaction records for the period required by applicable financial regulations, which is typically 7 years.

Your rights

Depending on where you are located, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain uses of your data
• Receive a portable copy of your data

To exercise any of these rights, contact us using the details below, or delete your account directly — see our account deletion instructions. We will respond to other requests within 30 days.

Children

Punch Zero is not directed at children under 13 (or under 16 in the European Union). We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes to this policy, we will update the effective date above and, where practical, notify you via the email address on your account. Continued use of Punch Zero after a change takes effect constitutes acceptance of the revised policy.

Contact

Questions, requests, or concerns about your privacy: