Privacy Policy

Last updated: October 23, 2026

This page explains, in plain words, what Easy Punch In keeps about you, why, and who else sees it. We only keep what the app needs to work. We don't show ads, we don't sell your information, and we don't use tracking or analytics tools.

What we keep

Your account: your email address and your password. The password is stored scrambled, so nobody can read it, not even us.
If you log in with Google: your email address, name and profile picture link that Google shares, kept with your login. We never see your Google password.
Your account settings: your name, your language and your time zone.
Your jobs: each job's name, employer, pay rates, regular hours, weekly hours goal and email settings, including your manager's name and email address, and any other email addresses you add, if you set up automatic emails.
Your work: your shifts and breaks (when they started and ended, and when you pressed the button), your notes, which days are marked paid, and the payments you or your manager recorded.
A list of the timesheet emails that were sent for you, and whether they worked.
If you turn on reminders on a device: an address the browser gives us so we can send that device a notification.
If you send feedback: your message, your email address and when you sent it.
If you use the app without signing in: your jobs, hours, breaks and notes are kept only in your browser on that device, and we never receive them. If you sign in or sign up later, they're moved into your account.
Anonymous visit counts: once a day, each browser that opens the site adds one to a counter (noting only whether it's the browser's first visit), and once if it uses the app without signing in. No names, email addresses or internet addresses are saved with these counts.

Your browser also remembers a few small things on your device, like your login and your language, so you don't have to enter them again.

Why we keep it

Only to run the app for you: to log you in, show your hours and pay on all your devices, make your PDFs, send the emails you set up, send the reminders you turned on, and read your feedback to improve the app.

Who can see it

You. Each person can only see their own data. The database itself enforces this.
Your manager, and any other email addresses you add (up to 3 in all), only if you set up automatic emails: they get the timesheets you chose to send them, with your name, the job, your hours, notes and pay.
Anyone with your manager's payment link, only if you turn it on: they can see your name, the job, the employer, your balance owed and the payments recorded with that link, and they can record a payment.
The person who runs Easy Punch In, only when needed to keep the app working, fix a problem or answer your feedback.

Services we use

Like most websites, Easy Punch In uses a few outside companies to work. They only get what they need to do their part.

Supabase stores your data and handles logging in.
Google confirms who you are, if you log in with Google.
Resend sends our emails: timesheets, account emails and password reset links.
Netlify hosts the website.
jsDelivr and cdnjs deliver some of the code the website uses, so they see your internet address when the page loads.
If you turn on reminders, your browser's notification service (for example Google, Apple or Mozilla) delivers them.

These companies may store information on servers in other countries.

The Chrome extension

If you use the Easy Punch In Chrome extension, it only looks at the websites you add to it. To tell whether you're logged in to one of them, it checks which cookies that website has, never what's in them, and whether the website is open in a tab.

The extension doesn't read the pages you visit, your browsing history or any other website. Only your clock-ins, clock-outs and breaks are saved to your account, like in the app. The list of your websites stays in your browser.

The Android app

If you use the Easy Punch In app for Android, it keeps your login on your phone (in the app's private storage, which other apps can't read) so its home-screen widget can clock you in and out. It also keeps your job names and open shifts there to show them on the widget.

The app's "Forgot to clock out?" reminders are made on your phone, so nothing extra is sent anywhere. "Continue with Google" in the app uses your phone's own Google sign-in.

Keeping it safe

Everything between your device and our servers is sent over a secure, encrypted connection. No system is perfectly safe, so please use a strong password and don't share it.

Deleting your data

You can change or delete your shifts, breaks, payments and notes at any time. Deleting a job deletes all of its shifts, breaks, payments and email history. To delete your whole account, send us a request with "Send feedback" in the app, and we will delete it and everything in it. We keep your data until you delete it.

Children

Easy Punch In is not meant for children under 13, and we don't knowingly keep information about them.

Changes to this policy

If we change this policy, we will update this page and the date at the top.

Questions

Use "Send feedback" at the bottom of the app to ask us anything about your privacy.