Privacy Policy

Last updated: November 9, 2026 · Applies to the Punchpay app for iPhone, iPad and Android.

In short: Punchpay keeps your shifts, jobs and pay on your phone. We do not run a server for your data, we have no accounts, and we do not collect, sell or share your personal data. There are no ads, no analytics and no tracking in the app.

Who we are

Punchpay is made by Anini (“we”, “us”), an independent developer based in Malaysia. Contact: aniniwtf@gmail.com.

Data the app stores on your phone

To work out your pay, the app stores what you enter, only on your device:

• Jobs and pay rules: name, hourly rate, breaks, rounding, pay period, overtime rules and shift extras.
• Shifts: start and end times, the time zone of your phone at clock-in, breaks, holiday marks and notes.
• Paycheck checks: the gross and deposit amounts you type from a pay stub.
• App settings: currency, 24-hour time, reminder preference, and whether Punchpay Pro is unlocked.

This data never leaves your phone through us. We cannot see it.

Backups you choose to make

• Phone backups. If your phone backs up apps (iCloud Backup on iOS, Google backup on Android), your Punchpay data is included under the terms of Apple or Google. You control this in your phone’s settings.
• Backup file. “Back up now” creates a file and opens your phone’s share sheet. The file goes only where you send it (for example Files, iCloud Drive or Google Drive).
• Timesheet export. A PDF or CSV timesheet goes only where you share it.

Purchases

Punchpay Pro is a one-time purchase handled by the App Store or Google Play. They process the payment under their own privacy policies. The app receives only a confirmation that Pro is unlocked; we never receive your name, email or payment details.

Notifications

The “Still clocked in?” reminder is a local notification scheduled on your phone. No push service or server is involved.

Emails you send us

The only personal data we receive is what you choose to send us. If you email support, we receive your email address and your message. We use them only to answer you, keep them for up to 12 months after the conversation ends, and delete them sooner if you ask. Our email runs on Gmail, so Google stores these messages under its own privacy policy, possibly outside your country.

Links

The privacy policy link opens in your browser and the contact link opens your email app. Websites have their own policies.

Security

Your data sits in the app’s private storage, protected by your phone’s lock and system security. Backup and timesheet files are not encrypted, so share them only with places you trust. No method of storage is perfectly secure, but we hold no copy of your app data that could leak from us.

What we do not do

• No account or sign-in.
• No analytics, crash reporting, advertising or tracking SDKs, and no advertising identifier.
• No sale or sharing of personal data with anyone.

Your choices and rights

Because your data stays on your device, you control it directly: edit or delete any shift or job in the app, or delete all of it by removing the app (and any backup files you made). Wherever you live — including under the GDPR (EU/UK), the CCPA/CPRA (California) and Malaysia’s PDPA — you have the right to access, correct, export or delete personal data we hold and to object to its use. Apart from support emails you sent us, we hold none. To use these rights or ask a privacy question, email aniniwtf@gmail.com and we will answer within 30 days. We do not sell or share personal information, as those words are defined by the CCPA. If a data breach ever affects personal data we hold, we will tell the people affected and the authorities as the law requires.

Children

Punchpay is made for working adults and is not directed at children under 13. We do not knowingly collect information from children.

Changes

If this policy changes, we will update this page and the date at the top. If the app ever starts to collect data, we will say so here and ask in the app before it does.

Dasar Privasi (Bahasa Malaysia)

Kemas kini terakhir: 9 November 2026. Jika ada perbezaan, kedua-dua versi mempunyai kesan yang sama.

Ringkasnya: Punchpay menyimpan syif, kerja dan gaji anda di telefon anda sahaja. Kami tiada pelayan untuk data anda, tiada akaun, dan kami tidak mengumpul, menjual atau berkongsi data peribadi anda. Tiada iklan, analitik atau penjejakan dalam aplikasi.

Siapa kami

Punchpay dibuat oleh Anini, pembangun bebas di Malaysia. Hubungi: aniniwtf@gmail.com.

Data di telefon anda

Aplikasi menyimpan apa yang anda masukkan, hanya di peranti anda: kerja dan peraturan gaji, syif (masa mula dan tamat, zon waktu, rehat, cuti umum, nota), semakan slip gaji, dan tetapan aplikasi. Data ini tidak sampai kepada kami.

Sandaran, eksport dan pembelian

Sandaran telefon (iCloud atau Google) tertakluk kepada Apple atau Google. Fail sandaran dan lembaran masa hanya pergi ke tempat yang anda pilih melalui menu kongsi. Punchpay Pro dibeli melalui App Store atau Google Play; kami tidak menerima nama, e-mel atau butiran pembayaran anda. Peringatan ialah pemberitahuan tempatan di telefon anda.

E-mel kepada kami

Jika anda menghantar e-mel sokongan, kami menerima alamat e-mel dan mesej anda. Kami menggunakannya hanya untuk membalas, menyimpannya sehingga 12 bulan selepas perbualan tamat, dan memadamnya lebih awal jika diminta. E-mel kami menggunakan Gmail, jadi Google menyimpan mesej ini di bawah dasar privasinya sendiri, mungkin di luar negara anda.

Hak dan pilihan anda

Anda boleh menyunting atau memadam sebarang data dalam aplikasi, atau memadam semuanya dengan membuang aplikasi. Di bawah Akta Perlindungan Data Peribadi 2010 dan undang-undang lain, anda berhak meminta akses kepada, pembetulan atau pemadaman data peribadi yang kami simpan (hanya e-mel sokongan). E-mel aniniwtf@gmail.com; kami akan membalas dalam masa 30 hari. Jika berlaku pelanggaran data yang melibatkan data yang kami simpan, kami akan memaklumkan pihak yang terjejas dan pihak berkuasa seperti yang dikehendaki undang-undang.

Kanak-kanak dan perubahan

Punchpay dibuat untuk orang dewasa yang bekerja dan tidak ditujukan kepada kanak-kanak bawah 13 tahun. Jika dasar ini berubah, kami akan mengemas kini halaman ini; jika aplikasi mula mengumpul data, kami akan memaklumkan dan meminta persetujuan dalam aplikasi terlebih dahulu.