Privacy Policy for PunchPoint
PinPoint Contact ("we", "us", or "our") operates the PunchPoint mobile application for Android and the web services at https://punchpoint.pinpointcontact.com. This Privacy Policy details how PunchPoint collects, processes, and protects your information when you use our mobile software.
1. Android Device Permissions & Data Collection
PunchPoint requests specific Android permissions strictly to provide jobsite time tracking and milestone punch list verification:
- GPS Location Verification (
ACCESS_FINE_LOCATION/ACCESS_COARSE_LOCATION): Used to verify coordinates during active punch events (clock-in, clock-out, rest breaks, foreman pin calibration). Continuous background GPS location tracking is not performed. - Camera (
CAMERA): Used to capture milestone photos (decking rot inspection, 360° magnetic nail sweeps). - Storage / Media Images (
READ_MEDIA_IMAGES): Used to select and downscale inspection photos on-device before upload. - Biometric Authentication (
USE_BIOMETRIC): Used exclusively on-device via Android's hardware security enclave to verify owner authorization for timesheet review and payroll export. Biometric data never leaves your device. - Internet & Network State (
INTERNET): Used to synchronize offline-cached punch logs and photos with Cloud Firestore upon network reconnection.
2. How We Use Your Information
We use the data collected to:
- Organize, index, and dispatch punch list tickets to designated subcontractors and project managers.
- Generate project audit reports and completion sign-off certificates.
- Sync project status with your PinPoint Contact web dashboard and CRM integrations.
- Provide technical support and diagnose crash reports.
3. No Selling or Commercial Sharing of Data
We do not sell, rent, or trade your personal data, jobsite photos, punch logs, or contractor contact lists to third-party data brokers or advertisers under any circumstances.
4. Data Storage and Security
All data transmitted between the PunchPoint Android app and our cloud backend is encrypted in transit using industry-standard TLS 1.3 encryption and stored in secure, SOC 2 compliant database facilities (Cloudflare Edge & Google Cloud Platform). Local device caches are secured through Android's application sandbox.
5. User Rights & Account / Data Deletion
You have the right to inspect, export, or delete your project records and account data at any time. To request complete deletion of your PunchPoint account and all associated jobsite media, email us at [email protected] with the subject line "PunchPoint Data Deletion Request".
6. Contact Us
If you have questions regarding this Privacy Policy or your data, contact us at:
PinPoint Contact / PunchPoint Team
Email: [email protected]
Website: https://www.pinpointcontact.com