Last updated: April 2026
Privacy Policy
Pnchy is built for your neighborhood, so we believe you have a right to know exactly how your information is handled. This policy is written to be read, not buried.
Who we are
Pnchy is a community loyalty platform that connects local businesses with the neighborhoods they serve. We are headquartered in Boston, Massachusetts. If you have any questions about this Privacy Policy or would like to exercise your rights, please contact us at pnchyapp@gmail.com. We will respond within 30 days.
Information we collect
We collect only what we need to operate Pnchy. The table below describes each category of information, why we collect it, and how we receive it.
We do not collect payment card numbers, government-issued identification, or any sensitive personal data as defined under applicable law.
How we use your information
Your information is used for the following purposes:
Analytics: We analyze how visitors navigate Pnchy so we can improve the experience. Analytics are only activated after you provide explicit consent through our cookie banner.
Marketing: We may contact you with updates about Pnchy features, launches, or announcements. You may unsubscribe from any marketing communication at any time, without penalty.
Personalization: We use information about whether you are a local business owner or a community member to tailor your Pnchy experience accordingly.
Service Delivery: When you submit a form or request early access, we use your information to process and respond to that request.
Legal Compliance: We may process or retain certain data to satisfy applicable legal, regulatory, or contractual obligations.
Google Analytics
We use Google Analytics 4 to understand how visitors use our website, including which pages are visited, how long visitors spend on them, and their approximate geographic region. Google Analytics collects only anonymized and aggregated data. We do not use it to collect names, email addresses, or payment information.
Analytics are activated only after you provide explicit consent through our cookie banner. If you decline, Google Analytics operates in cookieless mode and no tracking cookies are placed on your device. You may withdraw consent at any time by clearing the pnchy_cookie_consent value from your browser's local storage.
How we share your information
We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:
Google LLC: If you consent to analytics, anonymized usage data is processed by Google in accordance with their Privacy Policy at policies.google.com/privacy.
Legal or regulatory bodies: We may disclose information where required by law, court order, or to protect the rights, property, or safety of Pnchy or our users.
Your rights
Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal data:
To exercise any of these rights, please contact pnchyapp@gmail.com. We will respond within 30 days. If you are located in the EU or UK and believe your rights have not been respected, you have the right to lodge a complaint with your local supervisory authority.
Regulations we comply with
Pnchy is designed from the ground up to respect applicable privacy laws across multiple jurisdictions. Below is a summary of how each framework applies to us.
GDPR
European Union. We rely on explicit consent as the legal basis for analytics under Article 6(1)(a). All data subject rights apply.
UK GDPR
United Kingdom. The same framework as the EU GDPR applies following the UK's exit from the European Union.
CCPA / CPRA
California. We do not sell or share your personal data. You have the right to know, delete, and opt out.
LGPD
Brazil. Processing is based on consent and legitimate interest. You have the right to access, correct, and delete your data.
US State Laws
Virginia, Colorado, Connecticut, Texas, Oregon, and others. Opt-out rights are honored for all residents.
PIPEDA
Canada. We collect data only with your knowledge and consent. You may access and correct your data upon request.
POPIA
South Africa. We adhere to the principles of lawful processing and data minimization as required by the Act.
Our legal basis for processing analytics data under GDPR and UK GDPR is your explicit consent pursuant to Article 6(1)(a). Our legal basis for processing form submissions is the performance of a contract or pre-contractual steps pursuant to Article 6(1)(b).
Data retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Form submissions and early access registrations are retained for up to two years. Analytics data is subject to Google's own retention settings, which default to 14 months. You may request deletion of your data at any time by contacting us.
Security
We implement industry-standard technical and organizational measures to protect your personal data. Our website is hosted on Framer's infrastructure. No sensitive financial data is stored on Pnchy-controlled servers at this time. While no system is entirely immune to risk, we take appropriate steps to safeguard your information.
Changes to this policy
We may update this Privacy Policy from time to time as Pnchy evolves. When we do, the date at the top of this page will be revised. For material changes, we will notify you directly by email if we hold your address. Your continued use of Pnchy following any changes constitutes your acceptance of the revised policy.
Questions or concerns?
We are a small team building something real for your neighborhood. If you have any questions about this policy or would like to exercise your privacy rights, please reach out directly.
pnchyapp@gmail.com