How to request deletion
- Email support@punchless.app from the email address used for your Punchless account.
- Use the subject Punchless account deletion request.
- Tell us whether you are a business owner, staff user, member or guardian. If you own a workspace, tell us whether it should also be deleted or transferred to another owner.
- We may reply with a limited verification question to protect your account from an unauthorised deletion request.
You do not need the app installed to make a request. If you cannot email from the account address, contact support and explain why so we can offer another reasonable way to verify ownership.
Data we delete
Once the request is verified, we delete or anonymise the data associated with the account, including:
- The Punchless authentication account and sign-in credentials
- Account profile information, such as name, email address, phone number and account identifiers
- Organisation links, roles, invitations and registered notification tokens associated with the account
- Member-account links and personal settings associated with the account
- A sole-owner business workspace and its operational data when deletion of that workspace is requested and it has not been transferred
Data that may be retained
Limited records may be retained where reasonably necessary for legal, tax, accounting, payment dispute, fraud-prevention, security or enforcement purposes. These can include invoices and subscription transaction records, evidence of consent or deletion, and security or audit records. Where possible, retained records are minimised or disconnected from the deleted account and are not used for marketing.
If a business is responsible for membership, attendance, package or loyalty records, it may need to retain those business records under its own legal obligations. We will remove the deleted Punchless account's direct link and personal sign-in data, and we may refer the requester to the relevant business for records that business controls.
Residual encrypted copies may remain temporarily in routine backups until those backups are overwritten or expire.
Timing and subscriptions
We aim to complete verified deletion requests within 30 days. We will tell you if a legal requirement or unusually complex request requires more time.
If you are the sole owner of a paid Punchless workspace, state whether you want the workspace deleted or transferred. We will stop future Punchless renewal as part of a full workspace deletion, but payment providers may retain transaction records under their own legal obligations.
Deleting data without deleting your account
You may also use the same email address to request deletion or correction of particular personal data without deleting your entire Punchless account. Clearly identify the data concerned in your request.