Privacy Policy for PunchPic
Last Updated: 12 October 2026
1. About this Policy
PunchPic is a workforce app made by DryThing Technology ("we", "us", "our"). It helps labour contractors keep attendance, manage sites and work out wages. This Policy explains what information we collect, why we collect it, who can see it, how long we keep it and what choices you have. By creating an account or using PunchPic you agree to this Policy.
In this Policy, a "Contractor" is a user who manages workers, sites and payroll. A "Worker" is a user who marks attendance under a Contractor. "Premium" is the paid plan available to Contractors.
2. Information We Collect
Information you give us
- Your name, email address and role (Contractor or Worker). A profile photo is optional.
- Your designation and the ID of your Contractor. For Workers, the daily wage set by the Contractor and the date it was last changed.
Attendance and work data
- Photos: a live photo taken at the work site when you mark attendance, used only to confirm who is present. We do not use face recognition or create face templates.
- Location: your GPS position and address, read only at the moment you mark attendance, to check that you are at the site. We do not track you in the background.
- Attendance records: date, punch-in and punch-out time, site name, payment status (unpaid, marked or approved) and related notes.
- Sites: site names, addresses and location radius added by Contractors.
Corrections
- A Worker can send a correction request to their Contractor. We keep the request, the reason, the status, the date and time, and the Contractor's reply.
- A Contractor can add or correct attendance for their Workers. These entries are marked as manual and linked to the Contractor who made them.
Pay records
- Wage details, overtime, advances, deductions and PF settings entered by the Contractor, and the pay figures worked out from them.
- PDF and Excel reports and salary slips you create. They are saved on your device. We do not upload them unless you share them yourself.
- We do not collect bank account numbers, card details, UPI IDs or UPI PINs. Wages are paid outside the app.
Subscription data
When a Contractor buys Premium, the payment is handled by Google Play. We receive only the purchase token, plan, status, start and end dates and renewal state, and we check them with Google on our server. We never see your card or UPI details.
Device and usage data
- Device model, Android version, app version, language, IP address and network status.
- Crash reports and performance data (Firebase Crashlytics) and basic usage events (Firebase Analytics).
- A notification token (Firebase Cloud Messaging) and login session details, such as last active time, used to keep one active login per account.
- The Android advertising ID and ad interaction data, collected by Google AdMob where ads are shown (see Section 5).
What we do not collect
We do not read your contacts, messages or call history, and we do not record audio. Voice alerts are spoken by your phone's text-to-speech and nothing is recorded.
3. How We Use Your Information
- To create and secure your account and log you in.
- To check your presence at a site with a photo and location before attendance is saved.
- To send service notifications such as attendance confirmations, payment updates, correction updates and billing or security alerts.
- To handle correction requests and manual corrections.
- To apply app rules, including the 6-month lock on wage changes and the limits of each plan.
- To work out pay and produce reports and salary slips.
- To provide Premium, check subscriptions and prevent fraud.
- To show ads on the Free plan and on Worker accounts.
- To send offers and update notifications, unless you have turned them off.
- To find and fix crashes, improve the app and give support.
- To meet legal duties and enforce our Terms.
4. Your Consent
We process your information with your consent, which you give when you register and when you allow each device permission. You can withdraw consent at any time, for example by turning off camera or location permission in your phone settings or by deleting your account. If you withdraw something the app needs to work, such as camera or location for attendance, that feature will stop working. You will not be penalised in any other way.
5. Advertising
- Who sees ads: Contractors on the Free plan and all Worker accounts. Premium removes ads from the Contractor's own account only. It does not remove ads from the accounts of that Contractor's Workers.
- Who provides them: Google AdMob. Google and its partners may use your advertising ID, IP address, device details and ad interaction data to show, measure and, where allowed, personalise ads. See policies.google.com/technologies/ads.
- What ads look like: banner ads and full-screen ads, which may be video, for example before a report is downloaded. We do not show ads while you are marking attendance, taking the attendance photo or while your location is being checked.
- Your choices: in Android settings (Settings > Privacy > Ads) you can reset your advertising ID or turn off ad personalisation. In places where consent is required for ads, we ask for it first. Turning off personalisation does not remove ads.
- We do not give advertisers your name, email, attendance, photos, location records or pay data.
6. Notifications
Service notifications
These keep the app working properly: attendance confirmations, payment and correction updates, and subscription, billing and security alerts. They cannot be turned off inside the app. You can change how your phone shows them in system settings, but you may then miss important information.
Offers and updates
We may send notifications about offers, new features and app updates. These are optional. Turn them off any time in the app under Settings > Notifications (or in your phone's notification settings) and we will stop. Turning them off does not affect service notifications or your use of the app.
7. Who Can See Your Information
- Your Contractor and site administrators: your attendance, photos, location checks, times, corrections and pay figures are visible to your assigned Contractor and authorised site administrators.
- Workers: each Worker can see their own attendance, correction requests and the finance records (such as advances and deductions) recorded for them.
- Our service providers: we use Google (Firebase, Google Play and AdMob) for hosting, login, database and file storage, notifications, analytics, crash reports, subscription billing and ads. They process data only to provide these services under their own terms: Google Privacy Policy and Firebase privacy information.
- Legal reasons: we may share information if the law, a court or a public authority requires it, or to protect the safety and rights of our users, the public or ourselves.
- Change of ownership: if our business is sold or merged, your information may move to the new owner, and we will tell you if that changes who is responsible for it.
- We do not sell your personal data. The only sharing for advertising is the processing by Google described in Section 5.
8. Where Your Data Is Stored
Your data is stored on Google's cloud systems, which may be in a different country from yours. Your data is protected by the safeguards our providers apply, and we only transfer it where the law of your country permits.
9. How Long We Keep Data
The periods below are the longest we keep each type of data. It may be deleted earlier.
| Data | How long we keep it |
|---|
| Attendance photos | Deleted from our storage after 15 days. The written attendance record stays for the period below. |
| Attendance records marked as paid and approved | Deleted 7 days after the payment is approved, on every plan. |
| Other attendance records on the Free plan | Deleted after 45 days. |
| Other attendance records of a Premium Contractor's Workers | Deleted after 90 days. |
| Correction requests and finance records | Kept only as long as needed for the purposes in Section 3, and deleted when the account is deleted, unless the law requires us to keep them longer. |
| Subscription and billing records | Kept for as long as tax and accounting rules require. |
| Backups and logs | Removed or overwritten in the normal backup cycle after the main data is deleted. |
If a Contractor's Premium plan ends, the account goes back to the Free plan and the 45-day period applies. Records older than that may then be deleted automatically. Please download the reports you need before your plan ends. Reports saved on your device stay under your control.
10. Security
We protect your data with encryption in transit, access rules on our database and storage, server-side checking of purchases and limited staff access. No system is completely secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires. Please keep your login details and your phone secure.
11. Device Permissions
- Camera: only for the live attendance photo and, if you choose, your profile photo.
- Precise location: only at the moment you mark attendance.
- Storage: only to save the PDF and Excel reports you create. We do not scan or change your other files.
- Notifications: to deliver the notifications in Section 6.
- Network: to sync with our cloud services and load ads.
You can turn off any permission in your phone settings at any time.
12. Your Rights
You can ask us to tell you what personal data we hold about you, to correct or update it, to delete it, or to stop using it. You can also withdraw your consent, make a complaint, and name someone to act for you if you cannot. You can edit some details in the app and manage notification choices in Settings. For anything else, email us at the address in Section 15. We may need to confirm your identity first, and we will reply within the time the law gives us.
13. Deleting Your Account
You can delete your account from the app settings or by emailing us from your registered email address. Once we have confirmed the request, your personal data, logs and profile are removed from our live systems within 30 days. We may keep records we are legally required to keep, such as billing records. Reports you already exported are outside our control.
Deleting your account does not cancel a Google Play subscription. Cancel it in Google Play to stop future charges. If a Contractor deletes their account, the link to that Contractor's Workers ends.
14. Children
PunchPic is for people aged 18 and over. We do not knowingly collect information from anyone younger. If we find that we have, we will delete it.
15. Changes and Contact
We may update this Policy when the app or the law changes. We will tell you in the app about important changes and update the date at the top. If you keep using PunchPic after a change takes effect, you accept the updated Policy. If you do not agree, stop using the app and ask us to delete your account.
Company: DryThing Technology
Email: drythingtechnology@gmail.com
Write to us about any privacy question, complaint or request. We will acknowledge it and respond within the time the law requires. If you are not satisfied with our answer, you can contact the data protection authority in your country.