PUNCH privacy policy
In short. PUNCH has no email, password or phone number. Your account is a random ID made on your phone. We store your workouts and the profile details you enter. Other users see your name, photo, points, workout count and streak on the leaderboard. Free users see ads. On iPhone, ads are personalised only if you allow tracking. Profile photos have no public address: the app gets signed links that stop working after some hours, and anyone who holds a link can open the photo until then. You can hide yourself from the global leaderboard, and you can delete your account and all its data from Settings.
1. Who runs PUNCH
PUNCH is run by Shlomi Badarak ("we"). For privacy questions, write to support@punchapp.co.il.
2. What we collect and why
| Data | Why |
|---|---|
| Account ID. The app makes a random device ID (kept in the iPhone Keychain) and swaps it for sign-in tokens. We store this ID and the time you last used the app. We do not ask for an email or a password. | To give you an account without a sign-up form. |
| Profile. Display name, gender, age (13 or older), weight, height, goal, training experience and weekly exercise hours. You enter these yourself. A short friend code is made for you. | To calculate workout volume, points and scores, and to let friends add you. |
| Profile photo. If you add one, we store it in private storage. Your phone's camera or photo library is used only when you pick a photo. | To show your photo on your profile and the leaderboard. |
| Workouts. Exercise names, sets, weights, reps, duration, total volume, and the bodyweight your profile had at that time. From these we work out points, streak, skill score, muscle scores and your leaderboard row. | To run the app: history, progress and rankings. |
| Friends, blocks and reports. Who you added by friend code, who you blocked, and reports you sent (see section 6). | To run friends and boards, and to keep the community safe. |
| Purchases. Whether you have Premium, and your purchase records, held by Apple and Adapty (section 5). We never see your card details. | To unlock Premium and remove ads. |
| Ads and device data. Collected by Google when free users watch an ad (section 4). | To show ads that pay for the free version. |
| Technical data. Our host, Cloudflare, sees your IP address and request details when the app talks to our server. | To deliver the service and block abuse. |
The app has no analytics SDK. We look at counts from our own server data, such as workouts logged, to see how the app is used. We do not collect your contacts, precise location, or health data from Apple Health.
3. What other users can see
By default, when you log a workout, you appear on the global leaderboard. Every signed-in PUNCH user can see, for you:
- your display name,
- your profile photo,
- your points, workout count and streak, and whether you have Premium.
Friends can see the same, and your friend code lets people add you. Your weight, height, age, gender and workout details are not shown to other users.
The global leaderboard is your choice. In Settings, under "Privacy and Social", a switch controls whether you are shown on the global leaderboard. It is on by default. When it is off, you are left off the global leaderboard, but your friends still see you on the friends board and the weekly board.
Profile photos are private. A photo has no public web address. When a signed-in user opens a board, our server gives their app signed links to the photos on that board, and each link stops working after some hours. Anyone who holds a link can open the photo until it expires, whether or not they are signed in, so a link that is shared or leaked works until then. A signed-in user who can see your photo can also save it or take a screenshot. Use a display name and photo you are happy to show to strangers. You can change both at any time, or remove the photo.
4. Ads, tracking and your choices
Free users watch rewarded ads from Google AdMob to log a workout. Premium users see no ads.
- iPhone. Before the first ad, iOS asks if PUNCH may track you across other companies' apps and sites. If you allow it, Google can use your advertising ID (IDFA) to show personalised ads and measure them. If you refuse, we ask Google for non-personalised ads only, and the advertising ID is not used. Change your answer any time in iOS Settings, under Privacy & Security, Tracking.
- Android. You can reset or delete your advertising ID in Android Settings, under Privacy, Ads.
- Europe and the UK. Google's consent form (Google UMP) asks for your consent where the law requires it. You can reopen your choices in PUNCH Settings, under "Ad privacy choices". The row appears only where the law requires it.
Even without personalisation, Google receives technical data needed to serve an ad: for example your IP address (which gives an approximate location), device and app information, which ads were shown, how you interacted with them, and crash and performance data. See Google's policies in section 5. We do not give Google your profile, photo, workouts or display name.
5. Other companies that handle data
- Google (AdMob and the User Messaging Platform) shows ads and asks for consent. Google privacy policy and how Google uses data in ads.
- Adapty handles Premium purchases and subscription status. It receives your account ID, your purchase records and device details. Adapty privacy policy.
- Apple runs the App Store, payments and the tracking prompt. Apple privacy policy.
- Cloudflare hosts our server, database and photo storage (Workers, D1 and R2), and sends our team an email alert for each new report (Email Routing). Cloudflare privacy policy.
These companies may process data outside Israel and the European Economic Area. We do not sell your personal data.
6. Reports and blocks
On another user's profile you can report their photo or name, or block them.
- A report stores: your account ID, the reported account ID, the reason you chose, the reported person's display name, and a copy of their photo as it was when you reported. We keep the copy so a person can review the report even if the photo changes later.
- Each new report sends a short email alert to the PUNCH team, so a person reviews it. The alert contains only the report number, the reason, the time and the environment, and whether a photo copy was saved. It holds no names, details or account IDs, so our team looks the rest up in the database. Cloudflare runs the email service (section 5).
- A person on our team reviews reports. A photo reported by several different users is hidden from other users until it is reviewed.
- Blocking ends any friendship, hides you from each other on the leaderboards, and stops you adding each other. The other person is not told.
- If you are reported, we do not tell you who reported you.
7. How long we keep data, and deleting your account
We keep your data while your account exists. We do not delete accounts for inactivity at this time.
To delete everything, open Settings in the app and choose Delete account. This removes your profile, photo, workouts, stats, leaderboard row, friendships, blocks and reports (those you sent and those about you), including photo copies kept for reports. Report alert emails hold only the report number and reason, no names or account details, and we delete them from the PUNCH support mailbox within 30 days. Account deletion cannot be undone. Your sign-in stops working at once, and opening the app again starts a new, empty account.
Cloudflare's database keeps up to 30 days of restore history, so deleted rows may stay in it for up to 30 days before they are gone for good. Purchase records held by Apple and Adapty follow their own rules and are not deleted by us. If you only delete the app, your data on our server stays until you delete the account.
8. Children
PUNCH is not aimed at children under 13, and we do not knowingly collect data from them. If you think a child under 13 has an account, write to us at support@punchapp.co.il and we will delete it.
9. Your rights
Under the Israeli Protection of Privacy Law, 5741-1981, you can ask to see the data we hold about you, and ask us to correct or delete it. If the GDPR applies to you, you also have the right to receive a copy of your data in a common format, to restrict or object to its use, to withdraw consent at any time (for example by refusing tracking), and to complain to your data protection authority. In Israel, that is the Privacy Protection Authority.
Most of this you can do yourself: edit your profile and photo in the app, and delete your account in Settings. For anything else, write to support@punchapp.co.il and include the friend code from your profile, because we have no email or name on file to look you up. We answer within 30 days.
Our legal bases under the GDPR: running the service you asked for (account, workouts, boards), your consent (tracking and personalised ads), and our interest in keeping PUNCH safe (reports, blocks, abuse prevention).
10. Security and changes
Data travels over HTTPS and is stored on Cloudflare's infrastructure. No system is perfectly secure, and we cannot promise it is. If we change this policy in a way that matters, we will update the date above.
11. Contact
Shlomi Badarak
support@punchapp.co.il