DRAFT FOR LEGAL REVIEW · AUGUST 21, 2026

Privacy notice

This pre-launch notice describes the intended PunchLyf data practices. PunchLyf is a NoobLyf brand. This notice is not final legal advice and must be reviewed before public launch.

Data we expect to process

Account and company details, employee directory information, clock and break timestamps, correction and approval records, subscription state, security events, and limited delivery and audit records needed to operate the service.

Why we process it

To provide time tracking, secure accounts, create payroll exports, administer subscriptions, prevent abuse, answer support and privacy requests, and improve the product using limited milestone analytics.

Service providers

The planned providers are Microsoft 365 for company communications, Supabase for authentication and data hosting, Stripe for hosted billing, Resend for transactional email, Sentry for filtered error diagnostics, PostHog for limited product milestones, and the selected web host.

Analytics and monitoring

Product analytics use pseudonymous identifiers and approved milestone names. Names, emails, punch timestamps, correction reasons, card data, and message bodies are prohibited from analytics. Error events are filtered before delivery and default personal-information capture is disabled.

Your choices

Company owners can export company data and submit a reviewed closure request in Settings. Employees should contact their company owner for employment-record questions. Privacy questions can be sent to support@nooblyf.com.

Retention

Retention periods are defined in the internal retention schedule and remain subject to legal review. Cancellation does not silently delete records.