Punch List & Site Audit — Privacy Policy

Effective Date: September 17, 2026

Punch List & Site Audit ("the App") and the website punchlistapp.net are operated by Mobile Card Games & Travel Apps LLC ("we", "us"). This Privacy Policy explains what data we collect, how it is used, where it is stored, and the choices you have.

The App has two ways of storing your work. The solo app (including the Pro subscription) keeps everything on your device and in your own private iCloud account; we operate no server that holds your projects. PunchList Business ("Teams") lets several people at one company share projects; team data is stored on servers we operate, as described in Section 4. Sections 1–3 apply to everyone; Section 4 applies only if you sign in to a team.

1. Data We Collect (Solo App)

Projects and snags: The project names, snag descriptions, statuses, and company settings you enter.
Snag photos: Photos you take with the camera or pick from your photo library to document construction issues, along with any annotations you draw on them.
Purchase information: Pro subscription transactions are processed by Apple; the App never sees your payment card details.
Usage analytics: Anonymous app-usage events collected via Firebase Analytics (see Section 6).
Install attribution: An anonymous Apple Search Ads attribution token (see Section 3).

2. How We Use Your Data

Your projects, snags, and photos exist solely so you can document site issues and generate reports. PDF reports are created on your device, and sharing or exporting a report happens only when you initiate it through the share sheet — you choose who receives it.
Camera and photo-library access are used only to attach photos to snags; annotations are stored non-destructively alongside the original image.
Analytics and attribution data help us understand, in aggregate, how the App is used and which Apple Search Ads campaigns lead to installs and purchases.
Team account data (Section 4) is used to sign you in, to show the right projects to the right people, to enforce the number of seats a team has paid for, and to bill the team.

3. iCloud Sync and Apple Search Ads (Solo App)

Your projects, snags, and photos are synced across your devices through CloudKit into your own private iCloud database, tied to your Apple ID. This data goes to Apple's iCloud servers under Apple's privacy policy (apple.com/legal/privacy) — not to any server we operate. We cannot access, read, or retrieve anything in your private iCloud database.

On first launch, the App requests an attribution token from Apple's AdServices framework to measure which Apple Search Ads campaign, ad group, and keyword led to the install. The token is opaque, contains no personal information, does not use the advertising identifier (IDFA), and does not require tracking permission. The resulting campaign identifiers are used in aggregate to measure which ads are worth running.

4. PunchList Business (Teams)

This section applies only when you sign in to a team under Settings › Team. Team features are optional; the solo app works without any account.

4.1 Account and membership data

Work email address: used to sign you in with a one-time 6-digit code sent by email. We never store a password.
Team membership: the team (organization) you belong to, your role (owner, admin, or member), an optional display name, and the time you joined. Invitations record the invite code, the inviting member, the email address an invite was sent to (if any), and when it was accepted.
Team record: the team name, seat limit, trial and subscription status, an 8-character billing code, and the Stripe customer and subscription identifiers once the team subscribes.

4.2 Team content

Projects, snags, and snag photos that belong to a team project are uploaded to servers we operate so that every member of the team can see and edit them, including from separate devices and separate Apple IDs. Each device also keeps a full local copy so the App keeps working offline. Content in your personal (non-team) projects is never uploaded to our servers.

4.3 Where team data is stored and how it is protected

Hosting: Team data is stored on managed database and file-storage infrastructure provided by our cloud provider, Supabase, Inc. (supabase.com/privacy). Depending on where you live, your team data may be transferred to and processed in a different country.
Encryption: Data is encrypted in transit (TLS) and at rest.
Access control: Every table and every stored photo is protected by row-level access rules: a member can only read or change data belonging to their own team. Our staff access team content only when needed to provide support you have requested or to investigate abuse, security incidents, or legal obligations.
Sign-in email: One-time sign-in codes are delivered from noreply@punchlistapp.net through a transactional email provider that processes your email address solely to deliver that message.

4.4 Billing through Stripe

Business subscriptions are purchased on punchlistapp.net and billed by Stripe, Inc. (stripe.com/privacy). When you subscribe, Stripe collects your billing email, company name, billing address, VAT or tax ID (if provided), and payment card details. Card numbers never touch our servers. Stripe sends us the billing email, the team billing code you entered, the number of seats, and the subscription status so we can activate and size your team. Stripe sends invoices and receipts to the billing email. You can update billing details, change seats, or cancel through the Stripe customer portal linked from the Business page.

4.5 Retention and deletion of team data

While the team is active: Team content is kept as long as the team exists. Deleting a project, snag, or photo in the App marks it deleted for every member and the underlying files are removed by a cleanup process shortly afterwards.
When a trial or subscription ends: Team projects become read-only. Nothing is deleted automatically, so no one loses work.
Leaving or deleting your account: You can delete your team account from Settings › Team. This removes your membership and your sign-in identity. If you are the sole owner of a team with other members, transfer ownership first (or remove the other members) so the team is not left without an owner. Teams you alone own are deleted with your account, along with their content.
Deleting a whole team: A team owner can ask us to delete the team and all of its content by emailing the address in Section 12. We complete such requests within 30 days.
Billing records: Stripe retains invoices and transaction records for as long as tax and accounting law requires, independent of the team's data.

5. Website (punchlistapp.net)

Measurement: Our pages send a small first-party beacon to a server we operate recording the page viewed, the site, the referring website (domain only), your browser language, screen width, device type (iPhone, Android, or other), and a random identifier that changes on every page load. We use no cookies, and we do not store your IP address or full user-agent string. This data is used in aggregate to see which pages and languages are useful. Privacy and legal pages carry no beacon.
"Text me the link": If you enter a phone number to receive a download link by SMS, the number is sent to a server we operate and passed to Twilio, Inc. (twilio.com/legal/privacy) to send one message. We do not use the number for marketing or keep it after the message is sent, beyond Twilio's own delivery logs.
Business checkout: The subscription form on the Business page sends the billing email and team billing code you enter directly to Stripe's checkout page (Section 4.4). Nothing you type into that form is stored by this website.
Fonts: Pages load web fonts from Google Fonts, which receives your IP address as part of the request.

6. Third-Party Data Sharing

We share data only with the service providers listed below, only for the purposes described, and never sell, rent, or share it for advertising.

Provider	What it receives	Why
Apple (iCloud, App Store, AdServices)	Solo-app sync into your private iCloud database; Pro purchase transactions; Search Ads attribution token	Sync, purchases, ad measurement
Google Firebase Analytics (privacy policy)	App opens, session duration, feature-usage events (including a purchase event when a subscription is bought or renewed), device information, a random app-instance identifier, and Search Ads campaign identifiers. No photos, project content, names, emails, or advertising identifiers (IDFA).	Aggregate usage analytics
RevenueCat (privacy policy)	Pro purchase and transaction data from Apple with a random anonymous app-user ID. Never your name, email, or project data.	Solo Pro subscription management
Supabase	Team account data and team content described in Section 4	Hosting for PunchList Business
Transactional email provider	Your work email address and the one-time sign-in code	Delivering team sign-in codes
Stripe	Billing contact, company and tax details, payment card	Business subscription billing
Twilio	Phone number entered on the website	Sending one SMS download link
Google Fonts	IP address (font request)	Serving website fonts

Photos and project content from the solo app are never sent to any third party other than your own iCloud account. Team content is stored only with our hosting provider and shared only with the members of your team.

7. Data Storage and Retention Summary

On your device: All projects, snags, photos, and company settings are stored in the App's local database.
In your iCloud: Solo-app data is mirrored to your private iCloud database and remains under your Apple ID's control.
On our servers: Only team account data and team content (Section 4), and aggregate website measurement (Section 5). Website beacon data is deleted after 800 days.
Deletion: Deleting a project or snag in the App removes it locally, from your iCloud sync, and, for team projects, from our servers. Uninstalling the App removes local data; iCloud data can be managed through your device's iCloud settings; team data is removed as described in Section 4.5.

8. Data Security

iCloud sync is handled by Apple's CloudKit over encrypted connections into your private database. Communication with our team servers, Firebase, RevenueCat, Stripe, and Apple's attribution service uses encrypted HTTPS. Team data is protected by row-level access rules and encryption at rest. Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your data.

9. Your Rights

You can:

Delete any project, snag, or photo in the App at any time.
Deny camera or photo-library permission and still use the App without photos.
Manage or delete the App's iCloud data via Settings → Apple ID → iCloud on your device.
Delete your team account from Settings › Team, or ask us to delete a team you own.
Export any project as a PDF report or a project file at any time.
Remove all local data by uninstalling the App.

Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR), the UK GDPR, Canada's PIPEDA, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, delete, and port it, and to object to or restrict certain processing. For the solo app there is typically nothing for us to access or delete on request, because we do not hold your data. For team accounts and website data, contact us at the email below and we will respond as required by applicable law, normally within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

Business customers: Where a company uses PunchList Business to process its employees' or clients' personal data, the company is the controller of that data and we process it on the company's behalf under this policy and our terms. Contact us if your organization requires a data-processing agreement.

10. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.

11. Data Breach Notification and Changes

In the event of a data breach affecting user data on any system we operate, we will notify affected users and, where required, the relevant authorities as applicable law requires. We may update this Privacy Policy from time to time; changes are reflected by updating the "Effective Date" at the top of this page, and material changes affecting team accounts will also be announced by email to team owners.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

v5cqpsj4e3u4@opayq.com

Business subscription and billing questions: support@punchlistapp.net