Punch List: Inspection Report — Privacy Policy

Effective Date: November 7, 2026

This Privacy Policy covers Punch List: Inspection Report, which is available as an Android app on Google Play (package com.mobilegames.punchlist) and as an iOS app on the Apple App Store under the same name (together, "the App"), and the website punchlistapp.net. All are developed and operated by Mobile Card Games & Travel Apps, LLC ("we", "us"). This Privacy Policy explains what data we collect, how it is used, where it is stored, and the choices you have. Where the Android and iOS versions differ, the difference is called out explicitly.

The App has two ways of storing your work. The solo app (including the Pro subscription) keeps everything on your device and, on iOS, in your own private iCloud account; we operate no server that holds your projects. PunchList Business ("Teams") lets several people at one company share projects, on iOS and Android alike; team data is stored on servers we operate, as described in Section 4. Sections 1–3 apply to everyone; Section 4 applies only if you sign in to a team.

1. Data We Collect (Solo App)

Projects and snags: The project names, snag descriptions, statuses, and company settings you enter.
Snag photos: Photos you take with the camera or pick from your photo library to document construction issues, along with any annotations you draw on them. On Android, photos are taken with your device's camera app and picked with the Android photo picker, so the App needs no camera or storage permission.
Purchase information: Pro subscription transactions are processed by Apple (iOS) or by Google Play Billing (Android), together with RevenueCat; the App never sees your payment card details.
Usage analytics (iOS): Anonymous app-usage events collected via Firebase Analytics (see Section 6).
Install attribution (iOS): An anonymous Apple Search Ads attribution token (see Section 3).
No analytics on Android: The Android version contains no analytics or attribution SDK and sends no usage events to Firebase or anyone else. It does not read the Google Play install referrer, and the advertising-ID permission is removed from it.
Suggestions of our other apps (Android): The Android version downloads a small configuration file from mobilegames.cloud, our own website, to decide which of our other apps to suggest. The request contains no personal data; like any web request, it exposes your device's IP address and a standard user-agent string (Android version and device model) to the hosting provider, and we do not use it to identify you. When it suggests one of our apps, Google Play shows that app's install page.

2. How We Use Your Data

Your projects, snags, and photos exist solely so you can document site issues and generate reports. PDF reports are created on your device, and sharing or exporting a report happens only when you initiate it through the share sheet — you choose who receives it.
Camera and photo-library access are used only to attach photos to snags; annotations are stored non-destructively alongside the original image.
On iOS, analytics and attribution data help us understand, in aggregate, how the App is used and which Apple Search Ads campaigns lead to installs and purchases.
Team account data (Section 4) is used to sign you in, to show the right projects to the right people, to enforce the number of seats a team has paid for, and to bill the team.

3. Sync, Backup, and Install Attribution (Solo App)

iCloud sync (iOS): Your projects, snags, and photos are synced across your devices through CloudKit into your own private iCloud database, tied to your Apple ID. This data goes to Apple's iCloud servers under Apple's privacy policy (apple.com/legal/privacy) — not to any server we operate. We cannot access, read, or retrieve anything in your private iCloud database.

Apple Search Ads (iOS): On first launch, the App requests an attribution token from Apple's AdServices framework to measure which Apple Search Ads campaign, ad group, and keyword led to the install. The token is opaque, contains no personal information, does not use the advertising identifier (IDFA), and does not require tracking permission. The resulting campaign identifiers are used in aggregate to measure which ads are worth running.

Android Backup (Android): The Android version has no iCloud sync and does not sync personal projects to any cloud of ours. If Google's Android Backup is on, the App's projects database (project and snag details, including the local copy of any team projects, but not photo files) and its settings may be included in your device backup under your Google account; we cannot access those backups. The team sign-in session, team sync state, and RevenueCat's cached ID are left out. To move a project together with its photos, export it as a project file. The Android version performs no ad attribution.

4. PunchList Business (Teams)

This section applies only when you sign in to a team under Settings › Team. Team features are optional; the solo app works without any account. Teams work the same way in the iOS and Android versions, which use the same team service.

4.1 Account and membership data

Work email address: used to sign you in with a one-time 6-digit code sent by email. We never store a password.
Team membership: the team (organization) you belong to, your role (owner, admin, or member), an optional display name, and the time you joined. Invitations record the invite code, the inviting member, the email address an invite was sent to (if any), and when it was accepted.
Team record: the team name, seat limit, trial and subscription status, an 8-character billing code, and the Stripe customer and subscription identifiers once the team subscribes.
Language and time zone: while you are signed in, the App sends your app language and time zone so that team emails, such as trial reminders, are written in your language and dated in your time zone.

4.2 Team content

Projects, snags, and snag photos that belong to a team project are uploaded to servers we operate so that every member of the team can see and edit them, including from separate devices and separate Apple IDs. Each device also keeps a full local copy so the App keeps working offline. Content in your personal (non-team) projects is never uploaded to our servers.

Company branding: If a team owner or admin publishes the company branding for team reports (company name, address, phone, email, website, accent color, and logo), it is stored with the team and shown on every member's reports for team projects.

4.3 Where team data is stored and how it is protected

Hosting: Team data is stored on managed database and file-storage infrastructure provided by our cloud provider, Supabase, Inc. (supabase.com/privacy). Depending on where you live, your team data may be transferred to and processed in a different country.
Encryption: Data is encrypted in transit (TLS) and at rest.
Access control: Every table and every stored photo is protected by row-level access rules: a member can only read or change data belonging to their own team. Our staff access team content only when needed to provide support you have requested or to investigate abuse, security incidents, or legal obligations.
Sign-in email: One-time sign-in codes are delivered from noreply@punchlistapp.net through a transactional email provider that processes your email address solely to deliver that message.

4.4 Billing through Stripe

Business subscriptions are purchased on punchlistapp.net and billed by Stripe, Inc. (stripe.com/privacy). When you subscribe, Stripe collects your billing email, company name, billing address, VAT or tax ID (if provided), and payment card details. Card numbers never touch our servers. Stripe sends us the billing email, the team billing code you entered, the number of seats, and the subscription status so we can activate and size your team. Stripe sends invoices and receipts to the billing email. You can update billing details, change seats, or cancel through the Stripe customer portal linked from the Business page.

4.5 Retention and deletion of team data

While the team is active: Team content is kept as long as the team exists. Deleting a project, snag, or photo in the App marks it deleted for every member and the underlying files are removed by a cleanup process shortly afterwards.
When a trial or subscription ends: Team projects become read-only. Nothing is deleted automatically, so no one loses work.
Leaving or deleting your account: You can delete your team account from Settings › Team. This removes your membership and your sign-in identity. If you are the sole owner of a team with other members, transfer ownership first (or remove the other members) so the team is not left without an owner. Teams you alone own are deleted with your account, along with their content.
Deleting a whole team: A team owner can ask us to delete the team and all of its content by emailing the address in Section 12. We complete such requests within 30 days.
Billing records: Stripe retains invoices and transaction records for as long as tax and accounting law requires, independent of the team's data.

5. Website (punchlistapp.net)

Measurement: Our pages send a small first-party beacon to a server we operate recording the page viewed, the site, the referring website (domain only), your browser language, screen width, device type (iPhone, Android, or other), and a random identifier that changes on every page load. We use no cookies, and we do not store your IP address or full user-agent string. This data is used in aggregate to see which pages and languages are useful. Privacy and legal pages carry no beacon.
"Text me the link": If you enter a phone number to receive a download link by SMS, the number is sent to a server we operate and passed to Twilio, Inc. (twilio.com/legal/privacy) to send one message. We do not use the number for marketing or keep it after the message is sent, beyond Twilio's own delivery logs.
Business checkout: The subscription form on the Business page sends the billing email and team billing code you enter directly to Stripe's checkout page (Section 4.4). Nothing you type into that form is stored by this website.
Fonts: Pages load web fonts from Google Fonts, which receives your IP address as part of the request.

6. Third-Party Data Sharing

We share data only with the service providers listed below, only for the purposes described, and never sell, rent, or share it for advertising.

Provider	What it receives	Why
Apple (iCloud, App Store, AdServices) — iOS	Solo-app sync into your private iCloud database; Pro purchase transactions; Search Ads attribution token	Sync, purchases, ad measurement
Google Firebase Analytics (privacy policy) — iOS only	App opens, session duration, feature-usage events (including a purchase event when a subscription is bought or renewed), device information, a random app-instance identifier, and Search Ads campaign identifiers. No photos, project content, names, emails, or advertising identifiers (IDFA).	Aggregate usage analytics
RevenueCat (privacy policy)	Pro purchase and transaction data from Apple (iOS) or Google Play (Android) with a random anonymous app-user ID. Never your name, email, or project data.	Solo Pro subscription management
Google Play (privacy policy) — Android	Pro purchase transactions through Google Play Billing; the in-app review prompt; the install page of one of our other apps when the App suggests it	Purchases, ratings, app suggestions
Our website, mobilegames.cloud, and its hosting provider — Android	A request for a small configuration file, which exposes your IP address and a standard user-agent string (Android version and device model); no personal data	Choosing which of our other apps to suggest
Supabase	Team account data and team content described in Section 4	Hosting for PunchList Business
Transactional email provider	Your work email address and the one-time sign-in code	Delivering team sign-in codes
Stripe	Billing contact, company and tax details, payment card	Business subscription billing
Twilio	Phone number entered on the website	Sending one SMS download link
Google Fonts	IP address (font request)	Serving website fonts

Photos and project content from the solo app are never sent to any third party other than your own iCloud account (iOS) or, if Android Backup is on, your own Google backup without the photo files (Android). Team content is stored only with our hosting provider and shared only with the members of your team.

7. Data Storage and Retention Summary

On your device: All projects, snags, photos, and company settings are stored in the App's local database.
In your iCloud (iOS): Solo-app data is mirrored to your private iCloud database and remains under your Apple ID's control.
In your Google backup (Android): If Android Backup is on, the projects database and settings described in Section 3 (not photo files), under your Google account's control.
On our servers: Only team account data and team content (Section 4), and aggregate website measurement (Section 5). Website beacon data is deleted after 800 days.
Deletion: Deleting a project or snag in the App removes it locally, from your iCloud sync, and, for team projects, from our servers. Uninstalling the App removes local data; iCloud data can be managed through your device's iCloud settings (iOS); team data is removed as described in Section 4.5.

8. Data Security

On iOS, iCloud sync is handled by Apple's CloudKit over encrypted connections into your private database. Communication with our team servers, Firebase, RevenueCat, Stripe, and Apple's attribution service, and on Android with Google Play and our website, uses encrypted HTTPS. Team data is protected by row-level access rules and encryption at rest. Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your data.

9. Your Rights

You can:

Delete any project, snag, or photo in the App at any time.
Deny camera or photo-library permission and still use the App without photos (iOS; the Android version asks for neither).
Manage or delete the App's iCloud data via Settings → Apple ID → iCloud on your device (iOS).
Manage or cancel subscriptions at any time in your Apple ID settings (iOS) or in Google Play under Payments & subscriptions (Android).
Delete your team account from Settings › Team, or ask us to delete a team you own.
Export any project as a PDF report or a project file at any time.
Remove all local data by uninstalling the App.

Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR), the UK GDPR, Canada's PIPEDA, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, delete, and port it, and to object to or restrict certain processing. For the solo app there is typically nothing for us to access or delete on request, because we do not hold your data. For team accounts and website data, contact us at the email below and we will respond as required by applicable law, normally within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

Business customers: Where a company uses PunchList Business to process its employees' or clients' personal data, the company is the controller of that data and we process it on the company's behalf under this policy and our terms. Contact us if your organization requires a data-processing agreement.

10. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.

11. Data Breach Notification and Changes

In the event of a data breach affecting user data on any system we operate, we will notify affected users and, where required, the relevant authorities as applicable law requires. We may update this Privacy Policy from time to time; changes are reflected by updating the "Effective Date" at the top of this page, and material changes affecting team accounts will also be announced by email to team owners.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

v5cqpsj4e3u4@opayq.com

Business subscription and billing questions: support@punchlistapp.net