punchspire

Privacy Policy

Effective October 7, 2026

Punchspire is a workforce scheduling, timeclock, communication, and labor-management platform used by employers to manage staffing at their facilities. This policy explains what information the Punchspire applications (web and mobile) process and how it is protected.

Who operates Punchspire

Punchspire is operated and published by Reward Talks LLC. “Punchspire”, “we” and “us” in this policy refer to Reward Talks LLC acting as the operator of the Punchspire service. Privacy questions may be sent to support@punchspire.com.

Who controls your data

Punchspire accounts are provisioned by your employer. Your employer is the controller of the workforce records in Punchspire. Those records include your employee profile, schedules, timeclock entries, and requests. Punchspire processes that data on your employer's behalf to provide the service. Questions about how your employer uses your workforce data should be directed to your employer's administrator.

Information we process

  • Account information: name, work email address, phone number, and the role your employer assigns to you.
  • Workforce records: schedules and shift assignments, timeclock and hours data, open-shift requests, time-off and availability requests, and related approvals. These are created by you or by your employer's scheduling staff.
  • Messages and notifications: messages you send and receive within your organization, and in-app notification records (for example, schedule changes and request decisions).
  • Device information: if you enable push notifications on the mobile app, a push notification token is associated with your account so notifications can be delivered to your device.
  • Usage and diagnostics: sign-in events and audit records of significant actions (kept for security and compliance), technical logs needed to operate the service reliably, and error/crash reports. Crash reports contain the technical details of a failure (error message, code location, app version, device model and operating-system version) and an opaque account identifier so a fault can be traced; they are configured not to attach personal details, screenshots, or session recordings.

How information is used

Information is used only to provide the Punchspire service: publishing and displaying schedules, recording hours, delivering messages and notifications, processing requests, and maintaining the security and audit integrity of the platform. Punchspire does not sell personal information, does not use it for advertising, and does not use third-party advertising or cross-app tracking technologies.

Service providers

We use a small number of service providers to operate Punchspire. They process data only to provide their service to us, and none of them is permitted to use it for their own purposes:

  • Cloud hosting and database (Supabase): stores the workforce records, accounts and messages described above, and provides authentication.
  • Push notification delivery (Expo, and Apple or Google notification services): receives your device's push token and the notification content needed to deliver an alert to your device. Used only if you enable notifications.
  • Error and crash diagnostics (Sentry): receives the crash and error reports described above.
  • Email delivery (Resend): sends account and password-recovery emails to your work email address.
  • Product analytics (PostHog) — website only:measures feature usage in the Punchspire web application. The Punchspire mobile app contains no analytics or advertising software and performs no cross-app or cross-site tracking.

How information is protected

Data is transmitted over encrypted connections (TLS) and stored in access-controlled infrastructure. Access to records is restricted by role- and facility-based authorization enforced at the database layer: you can see your own records, and your employer's authorized staff can see records within their assigned scope. Significant actions are audit-logged.

Data retention

Workforce records are retained according to your employer's policies and applicable legal requirements (for example, payroll and labor-law record-keeping obligations). Audit records of significant actions are retained for compliance purposes.

Your choices and rights

  • You can control push notification permissions in your device settings at any time.
  • You can request correction of your profile information from your employer's administrator.
  • You can request deactivation or deletion of your account. See Account Deletion. Records your employer must lawfully retain may be kept in accordance with those obligations.

Children

Punchspire is a workplace application for employees of participating organizations and is not directed to children.

Changes to this policy

If this policy changes materially, the effective date above will be updated and notice will be provided through the application.

Contact

For privacy questions, or to request information about the data Punchspire holds about you, email support@punchspire.com. To understand how account deletion works, see Account Deletion.

You can also visit Support or contact your employer's administrator.