Puntualia Privacy Policy
Effective November 5, 2026
Puntualia (“the app”) is a time clock for the phone: the people of a company clock in and out from their own phones, and the people who run it see attendance, resolve corrections and export the records. It is published by Reverb Technology LLC, a Texas company (“Reverb”, “we”). This privacy policy explains what data the app processes, why, who is responsible for each part and how you can exercise your rights. The app’s screens are in Spanish; this policy quotes their labels with a translation. For any question, write to developer@reverbt.com.
1. In short
- Location is read only at the moment you clock in or out, and only if you gave permission. The app never asks for your location in the background and does not record your movements.
- The official time of every punch is the server’s, not your phone’s.
- Your company decides who gets into Puntualia and is responsible for its staff’s records. Reverb processes them on your company’s behalf.
- No advertising and no third-party analytics or tracking tools, and we do not sell your data.
- You can delete your account from inside the app.
2. Who is responsible for your data
Puntualia processes two groups of data, and each group has a different controller:
- Data about the people who work at a client company (staff, admins, and the owner too when they clock in): the controller is the company that uses Puntualia. Reverb acts as a processor (“persona encargada” under Mexican law): it processes that data only on the company’s behalf, to provide the service. Your company can give you its identity, its address and its own privacy notice, and it is your first contact for any question about your attendance records.
- Data about the person who creates a company in Puntualia and buys the subscription (the owner), as far as their account and the purchase are concerned: the controller is Reverb Technology LLC.
Reverb’s identity and address for this policy: Reverb Technology LLC, c/o Northwest Registered Agent, LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731, USA. Email: developer@reverbt.com.
3. What data we process
- Account and sign-in: your name and email address; your password, if you create one (it is stored transformed with a one-way algorithm, never in readable form); and, if you sign in with Apple or Google, the identifier, the email and the basic profile data that account shares with the app, such as your name and, with Google, the link to your profile photo. The Apple email may be a hidden one. To sign in or create your account we send codes to your email.
- Your place in the company: the company you belong to, your roles (employee, admin or owner), the work sites assigned to you, your weekly schedules and the invitation you joined with (email, name, roles and site).
- Clock-in and clock-out punches: the type of punch, the server time, your phone’s time and time zone at that moment, the site and, only if you gave permission, the latitude, longitude and GPS accuracy at that instant, the distance to the site and whether the punch fell inside or outside its perimeter. If you clocked in with no connection, the punch is flagged as having arrived later. Also the reason, if you type one.
- Corrections and adjustments: correction requests with their reason, the admin’s answer, the adjustments an admin makes with their reason (the original punch is always kept) and a log of admin actions, with who did them and when.
- Work sites: the name, address, map point and radius of each of the company’s work sites.
- Subscription (the owner only): the store (App Store or Google Play), the plan, the period, the transaction identifiers assigned by Apple or Google, the status, the expiry date and whether it renews automatically. Payments are processed by the store: we do not receive your card details or your Apple or Google password. If the company has a contract plan, contracted directly with Reverb, we also receive its billing details (legal name, RFC or tax identifier, contact and the agreed payment method) to issue invoices and collect payment; we still receive no card details from store purchases.
- Error reports: when the app has a fault, it sends the error message and its technical location, its severity, the platform (iOS or Android), the app version and your user identifier. Before sending, the app strips emails and coordinates.
- Technical connection data: like any internet service, our providers may log data about each connection, such as the IP address, to operate and protect the service.
- On your own phone: the app keeps your session in the system’s secure storage and, in its local storage, punches waiting to be sent (with the location of that instant, if you gave it), the company you chose and a copy of your status and of the guide so the app opens quickly.
Puntualia does not ask for sensitive personal data. It does not use your camera, microphone, contacts, photos or biometric data.
4. What we use your data for
We use your data only for these purposes, which are necessary to provide the service and for the relationship with the company or with the owner:
- Creating and protecting your account, verifying your email and letting you sign in.
- Recording each punch with the server time and comparing the location of that instant with the site’s perimeter.
- Showing your company’s admins the day’s attendance, lateness against the schedule, punches away from the site and correction requests.
- Producing the reports and CSV files the company exports for its payroll.
- Activating and confirming the company’s subscription and applying its plan’s people limit.
- Sending the sign-in emails with your code.
- Handling support and rights requests, detecting and fixing faults, preventing abuse and meeting legal obligations.
We do not use your data for secondary purposes: no advertising, marketing, commercial profiling or training of artificial intelligence models. If we ever wanted to use it for something else, we would ask for your consent first.
5. Location, in detail
Before asking for permission, the app explains what it is for; you choose “Continuar” (continue) or “Ahora no” (not now). The permission applies only while you are using the app. When you clock in or out, the app takes one location reading to work out your distance to the site and warn you beforehand if you are outside it. If you run a company and choose “Usar mi ubicación actual” (use my current location) when creating a site, the app uses that reading to save the site’s point. Outside those moments the app does not check your location.
If you do not give permission, you can still clock in: the punch is saved without a location and shows up for review by an admin. Your punches are seen by you and by your company’s admins.
6. Who it is shared with
- Your company: its admins see their staff’s data inside the app. The CSV files they export leave Puntualia and are under the company’s control.
- Supabase: database, sign-in system and server functions. It stores the app’s data in the United States (Supabase region us-east-1, in Virginia).
- Resend: sends the emails with your sign-in codes.
- Vercel: hosts this website and may log technical data about each visit, such as the IP address and the browser.
- Apple and Google: if you sign in with your Apple or Google account, or if your company pays through the App Store or Google Play, that part is governed by Apple’s or Google’s policies. If you run a company and use “Buscar la dirección en el mapa” (find the address on the map), the address you type is looked up with your phone’s system map service.
- Authorities: only when a law or a reasoned order from a competent authority requires it.
We do not sell your data or hand it to third parties to use for their own purposes. The data is stored and processed in the United States and in other countries where these providers operate.
7. How to limit the use of your data
- You can deny or withdraw location permission in your phone’s settings at any time. You will still be able to clock in, without a location.
- We do not send you advertising emails: the only emails are the sign-in ones.
- You can delete your account from inside the app (see section 9).
- You can write to developer@reverbt.com to ask us to limit the use or disclosure of the data Reverb is responsible for.
8. How long it is kept
- Attendance records (punches, corrections, adjustments, schedules and the action log): kept for as long as the company uses Puntualia, because the company has to keep them. They stay even if a person leaves the company or deletes their account. If a company stops using Puntualia, it can write to us to ask for a copy or for its data to be deleted.
- Your account: until you delete it from the app or ask us by email to delete it.
- Subscription data: for as long as it is needed to confirm purchases, handle disputes and meet tax and legal obligations.
- Error reports: for as long as they are needed to fix faults.
9. Deleting your account
In “Mi cuenta” (my account), tap “Borrar mi cuenta” (delete my account). Your account is removed from the sign-in system and you will no longer be able to sign in; your email is removed from your profile and from invitations, your password is deleted and your memberships are deactivated. Your name and your attendance records are kept, because the company has to keep them, but they are no longer linked to your email.
If you are the only owner of a company with active people, first make someone else an owner. Deleting your account does not cancel the store subscription: cancel it separately in the App Store or Google Play. Deletion cannot be undone.
10. Your ARCO rights and how to withdraw consent
You have the right to access your data, rectify it, cancel it and object to its processing (the ARCO rights under Mexican law), and to withdraw your consent.
- Data from your work at a company: the controller is your company, so address your request to it. If you write to us instead, we will pass it on and help the company answer you.
- Data Reverb is responsible for: write to developer@reverbt.com with your name and a way to reach you, your account email, the right you want to exercise, the data it refers to and a document that proves your identity or that of your representative.
We will give you our answer within 20 business days of receiving your request and, if it applies, carry it out within the following 15 business days. Those periods may be extended once, by the same length, when the case justifies it. Exercising your rights is free; only reproduction or shipping costs could be charged. If you believe your request was not handled properly, you may go to Mexico’s Secretaría Anticorrupción y Buen Gobierno.
11. Security
Each company sees only its own data: the database enforces it with row-level access rules, not just the app. Connections are encrypted, every write from the app goes through server functions that check who is asking, and a punch is never modified: an adjustment creates a new punch and the original stays visible. No system is infallible; if a breach occurred that significantly affected your rights, we would inform whoever is responsible so they can protect their rights.
12. Minors
Puntualia is a work tool for companies and is not directed at children. If a company registers people under 18 who work in accordance with the law, the company is responsible for meeting the rules that apply to its case.
13. This website
The app does not use cookies or tracking technologies. For this website, see the reverbt.com privacy policy.
14. Changes to this policy
We may update this policy. We will post each version on this page with its effective date and, if the change is significant, we will tell each company’s owners by email. If the app starts processing new data, we will update this policy before that feature becomes available.
15. Language that prevails
This policy exists in Spanish and in English. If there is any difference between the two versions, the Spanish version prevails.
16. Contact
Reverb Technology LLC, c/o Northwest Registered Agent, LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731, USA, developer@reverbt.com.
Reverb Technology LLC, c/o Northwest Registered Agent, LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731, USA