Privacy Policy

Puuunch (“we”) is operated by Dominic Martineau, an independent contractor based in Quebec, and provides the time-tracking application at puuun.ch.

The person responsible for the protection of personal information, as defined by Quebec’s Law 25, is Dominic Martineau, owner. You can reach them at prp@puuun.ch.

We collect only the information needed to provide the service:

We do not monitor employees and we do not collect data the service does not require.

We use your information to create and manage your account, provide and secure the service, generate your reports and timesheets, communicate with you about the service, and meet our legal obligations. We never sell your personal information.

We process your information based on the consent you give by creating an account and using the service, and to perform our agreement with you.

We use only strictly necessary cookies to run the site (session, security); these do not require consent.

For audience measurement we use Umami, a privacy-first analytics tool that stores no cookies and collects no personal data — so it needs no consent either.

We rely on a small number of trusted providers that process data on our behalf:

We may also disclose information where required by law. We do not sell or rent your personal information.

Your data is hosted on AWS infrastructure located in Canada. Your account, your timesheets, your projects and your receipts stay there.

Some of our providers do process information outside Quebec, mainly in the United States: Stripe (billing), Resend (transactional email), Cloudflare (delivery and firewall), Laravel Nightwatch (technical monitoring) and Google (only if you use Google sign-in). What reaches each of them is limited to what that service needs — an email address to deliver a message, for instance, or an IP address to route a request.

We keep these transfers to what the service requires, and choose providers that publish a data processing agreement. If you have a question about the measures that apply to a particular provider, write to us at prp@puuun.ch.

We keep your information while your account is active and as long as needed to provide the service and meet our legal obligations. When you close your account, we delete or anonymize your information within a reasonable period, subject to any legal retention requirements.

Under Quebec’s Law 25 and applicable Canadian law, you have the right to access your information, have it corrected, withdraw your consent, request its deletion, and obtain a copy of your data (portability).

Access and portability, self-serve: from Account → Your data in the app you can download, at any time and whatever your role, a file containing everything we hold about you (profile, time entries, expenses, submitted weeks). You may also request it at prp@puuun.ch, which we answer within 30 days at the latest. Managers additionally have a full export of the organization’s records from Settings → Export, as well as reports to CSV.

Correction and deletion: write to us and we will respond within 30 days at most. Note that your time entries and expenses are also part of your employer’s business records, and your employer remains responsible for them — so we cannot always delete them unilaterally. We will explain what can be deleted, anonymized, or must be kept, and why.

To exercise these rights, contact us at prp@puuun.ch. If you are not satisfied with our response, you may file a complaint with Quebec’s Commission d’accès à l’information.

We protect your information with encrypted connections, access controls, and modern security practices. No system is perfectly secure, but we work to protect your data in a manner appropriate to its sensitivity.

A confidentiality incident is unauthorized access to, use of, or disclosure of personal information — or its loss.

We keep a register of every confidentiality incident, as Law 25 requires. Where an incident presents a risk of serious injury, we promptly notify Quebec’s Commission d’accès à l’information and the individuals concerned, take reasonable measures to reduce the risk of injury, and act to prevent the incident from recurring.

If you believe an incident affecting your information has occurred, write to us immediately at prp@puuun.ch.

We may update this policy. If we make a material change, we will notify you by reasonable means. The last-updated date appears at the top of this page.

For any question about this policy or your personal information, contact us at prp@puuun.ch.