Punchify
Privacy Policy
Last updated: 26 August 2026
In short
Punchify is attendance, payroll and workforce software used by employers. Almost everything in it is information your employer records about your work: when you punched in, what you are paid, the leave you have taken. Your employer decides what is collected and who inside their company can see it. Sagar Patel (Punchify) runs the software on their behalf.
We do not sell personal information, and we do not use it for advertising.
Who is responsible for your information
Your employer is the controller of the information in their Punchify account — they decide what is collected, who may see it, and how long it is kept, within the limits this policy describes. Sagar Patel (Punchify) is the processor: we store and process it to provide the service, and we act on your employer's instructions.
If you are an employee and you want your information corrected or removed, your employer is the right first contact — they can change or delete most of it themselves. You can also write to us at sagar280699@gmail.com and we will help.
What the app collects
| Account | Your name, mobile number and a password stored only as a one-way hash. Your employer creates this account. |
|---|---|
| Attendance | The time of every punch in and punch out, and whether it came from the app, a biometric device, an import, or an administrator. |
| Selfie at punch | A photo taken at the moment you punch, ONLY if your employer has switched this on for you. The camera is opened by you, when you punch, and never at any other time. |
| Location at punch | Where the phone was when you punched, ONLY if your employer has switched this on. It is used to record how far from your branch the punch was taken. |
| Location during your shift | See the section below. Collected only for employees an administrator has individually enabled, and only between punch in and punch out. |
| Device | A device name, the app version, and an installation identifier, so a lost phone can be signed out. If you allow notifications, a push token is stored so messages can reach the device. |
| Work records | Employment details, salary and payroll, leave, and any documents your employer uploads. These are entered by your employer, not by the app. |
Location while you are on shift
Punchify can record where a phone is while a shift is open, so an employer can see where field staff are and where they went during working hours. This is the only part of the app that collects location in the background, and it works under strict limits:
- It is off unless two switches are on. The company must enable Live Location, and an administrator must enable it for you individually. It is off by default for everybody.
- It runs only between punch in and punch out. It stops the moment you punch out — not at the end of the day, not when the app is closed. Outside your shift, and on days you do not punch in, no location is collected at all.
- You can see it running. While it is on, Android shows a permanent notification saying Punchify is recording your location. It cannot be hidden.
- What is recorded: position, its accuracy, speed and altitude where the phone reports them, the battery level, and whether the operating system reported a mock location. Also the moments tracking started, stopped, or could not run — so a gap in the record can be explained rather than guessed at.
- Position, not conversation. Nothing about calls, messages, contacts, photos, browsing or other apps is collected. Punchify cannot see any of it.
- You can refuse it. Android's location permission is yours to grant or withdraw at any time in your phone's settings. Withdrawing it stops the recording; your employer will see that the record stopped.
Why we collect it
- To record attendance and calculate pay, overtime, leave and deductions.
- To let an employer confirm a punch was taken at work, and to see where field staff are during their shift.
- To send you notifications about your leave and your salary.
- To keep accounts secure, and to sign out a device that is lost.
Who it is shared with
Your employer, and the people inside their company they have given access to. Nobody else — we do not sell personal information, we do not share it with advertisers, and we do not use it to train anything.
We use a small number of services to run the product:
| Amazon Web Services (Mumbai, India) | Hosting and the database. Your data stays in India. |
|---|---|
| Expo push notification service | Delivering notifications to your device. |
| Google Firebase Cloud Messaging | The Android side of delivering those notifications. |
| OpenStreetMap | Map images for the screens an administrator looks at. Positions are drawn in your employer's browser; they are not sent to OpenStreetMap. |
We may also disclose information where the law requires it, or to protect someone's safety.
How long it is kept
| Location trail | Your employer chooses 30, 90 or 180 days. Older points are deleted automatically. Keeping it for ever is not offered. |
|---|---|
| Punch selfies and punches | Kept while your employer's account is active, because they are the evidence behind attendance and pay. |
| Attendance, payroll and leave records | Kept while your employer's account is active. Employers may need to keep some of it to meet Indian labour and tax law. |
| Account and device records | Removed when your employer deletes the employee, or when the company's account is closed. |
How it is protected
- Everything travels over an encrypted connection (HTTPS/TLS).
- The database is encrypted, and its certificate is verified — not merely trusted.
- Passwords are stored as one-way hashes. Nobody, including us, can read them.
- Access inside a company is limited by the role your employer gives you. Signing in from a new device does not give access to anybody else's record.
- No system is perfectly secure. If a breach ever affects your information we will tell your employer without undue delay.
Your choices
- Permissions. Camera, location and notifications are each asked for separately and can be withdrawn at any time in your phone's settings.
- Access and correction. The app shows you your own attendance, leave and payslips. For anything else, ask your employer — they can correct it directly.
- Deletion. Ask your employer, who can delete your record — the app's Settings → Delete my account sends them the request. Write to sagar280699@gmail.com if you cannot reach them. How deletion works.
Children
Punchify is workplace software and is not intended for anyone under 18. We do not knowingly collect information from children.
Changes to this policy
If what we collect changes, this page changes with it and the date at the top is updated. Material changes will be notified to employers using Punchify.
Contact
Sagar Patel (Punchify)
Ahmedabad, Gujarat, India
sagar280699@gmail.com