← Back to Home
Privacy Statement

Our “No Creepy Stuff” Pledge

Last updated: June 2026

We believe business software should respect user privacy. We are committed to a strict No Location Tracking, No Ad Selling, and No Background Snooping policy.

What We Do NOT Collect

  • We do not track your GPS location in the background or foreground.
  • We do not access your device camera, photos, or contacts.
  • We do not use tracking cookies or sell your activity data to third-party ad networks.
  • We do not fingerprint your browser or track your search history.

What We DO Collect & Why

  • Clock-In/Out Timestamps: Exact times when you explicitly click clock in or out, representing your work session duration.
  • Profile Info: Your full name and email address provided by your manager to create your account.
  • Custom Fields: Any additional metadata required by your employer for business operations (such as shift notes or department tags).
Service Agreement

Terms of Service

Last updated: June 2026

1. Description of Service

Punch Charlie is a lightweight software application designed to help businesses log time tracking entries and manage timesheets. The software is provided as-is without warranty of any kind.

2. User Roster & Verification

Owners are responsible for the accuracy of employee listings, invited users, and payroll CSV exports. Employees are responsible for verifying that their own timesheets accurately reflect their hours worked.

3. Fair Use & SaaS Billing

Our SaaS pricing model is flat-rate based on active company size, offering unlimited entries and zero hidden charges. Abuse of system APIs or scraping is strictly prohibited.

Data Architecture

Data Storage & Handling

Last updated: June 2026

Supabase Secure Cloud Database

All user information, authentication credentials, and timesheet logs are safely stored in a secure cloud database provided by Supabase. Connections are fully encrypted using standard SSL protocols.

Row-Level Security (RLS)

We enforce Row-Level Security policies at the database layer. This ensures that:

  • Owners can only read/write profiles and timesheets linked directly to their company ID.
  • Employees can only view and insert timesheet logs linked to their own account.

No Financial Processing

Punch Charlie is strictly a time log logging engine. We do not store employee bank accounts, process paychecks, file tax returns, or handle direct deposit payments. Your timesheets are exported to CSV so you can run payroll via Gusto, QuickBooks, or other specialized engines.