PUNCH

Punch helps you market the books, music, apps and other work you make. It's built so that your information stays yours.

What Punch collects

Punch has no sign-up, no analytics, no ads and no tracking. Your products, posts, notes and sales stay on your iPhone and in your own iCloud.

The only time anything goes to Pauram's server, Punch Cloud, is when you use Auto-post, the reply coach, link pages (and emailing your fans), a sparring partner or Trends, described below.

Where your data lives

On your iPhone. Your products, cover images, post history and sales are stored on your device.
In your iCloud (optional). If you're signed in to iCloud, Punch syncs that data to your private iCloud database so it's backed up and available on your other devices. It's protected by your Apple Account, and the developer can't access it.
Widgets. Your streak and today's product are shared with Punch's own widgets on your device.

AI captions

Captions are written by Apple's on-device model (Apple Intelligence). Your product details are processed on your iPhone and are not sent to the developer or any third party.

Sharing and posting

When you tap Share, Copy or Open, the text and images go to the app you choose (for example TikTok, Instagram or X). That app's own privacy policy then applies.

Auto-post (optional, Punch Pro)

If you connect TikTok, Instagram, Facebook, Threads, YouTube, X or Bluesky, Punch can post for you through Punch Cloud. Here's exactly what that involves:

Checking your subscription. Auto-post is part of Punch Pro. To confirm you have it, the app sends Punch Cloud Apple's signed record of your subscription (its product, dates and transaction IDs, but not your name, email or Apple Account). Punch Cloud checks Apple's signature and remembers only the product, expiry date and original transaction ID, so one subscription can't unlock unlimited accounts.
No sign-up. Punch makes a random key for your Punch Cloud account and keeps it in your iCloud Keychain. Punch Cloud stores only a scrambled (hashed) copy of it. Punch Cloud doesn't know your name, email or Apple Account.
Platform access. When you connect an account, you sign in on that platform's own page; Punch never sees your password. The platform gives Punch Cloud a key that lets it post for you. Punch Cloud stores that key encrypted, along with your handle or Page name, and uses it only to publish posts you send and to keep the connection working. For Facebook, it keeps a key for each Page you allowed, so you can choose which Page Punch posts to. Each profile's connections (up to 3 on Punch Pro, a whole roster on Punch Label) are stored the same way, under a random profile ID; profile and artist names stay on your iPhone and in your iCloud. Removing a profile deletes its connections.
Bluesky. Bluesky connects with an app password you create in Bluesky's settings, not your real password. Punch Cloud checks it by signing in once, then stores it encrypted with your handle and uses it only to post for you. You can revoke it in Bluesky (Settings → Privacy and security → App passwords) at any time, and disconnecting in Punch deletes it.
Post results. For posts Punch made on Bluesky and YouTube, Punch Cloud reads the post's public likes, reposts, replies and views so the app can show which posts did best. It keeps those numbers for up to an hour and reads nothing else from your account.
Reply coach (Bluesky). If you open the reply coach, Punch Cloud reads your Bluesky notifications to list replies, mentions and quotes of your posts (the fan's handle, name and text), sends them to the app and doesn't keep them. When you tap Reply, it posts your reply in that thread, and it marks notifications as read when you've seen them.
Posts. When you tap "Post it for me" or schedule a post, Punch Cloud receives the caption and the image or video, sends them to the platform you picked, and keeps a record of the post (its text, time and result) for 60 days so the app can show whether it went out.
Media. Videos and images (including carousel slides and your own videos) are kept on Punch Cloud only so the platform can fetch them, and are deleted automatically after 7 days.
Your own videos. When you attach a video, Apple's photo picker gives Punch only the video you pick, never the rest of your library. Punch keeps a copy on your iPhone so you can post it again, and sends it to Punch Cloud only when you ask Punch to post it for you. Removing the video in Punch deletes the copy.
What Punch Cloud never does. It doesn't read your feed, direct messages, followers or analytics (only the Bluesky replies and mentions above, when you open the reply coach), doesn't post anything you didn't ask it to, and doesn't sell or share your data.
Disconnect any time. In Punch, go to Settings → Your accounts and tap Connected → Disconnect. Punch Cloud deletes that platform's key. You can also remove Punch's access from the platform's own settings.

Punch Cloud runs on Cloudflare. Each platform's own privacy policy applies to what you post there.

Link pages (optional, Punch Pro)

When you publish a link page, Punch Cloud stores what's on it: your drop's name, description, cover image, buttons, release date and the handles you chose to show. The page is public at its address, like any link-in-bio page.

Visitors. Punch Cloud counts views and button clicks by source label only (such as "tiktok"). It doesn't store visitors' IP addresses or use cookies or trackers on link pages, and the pages run no scripts. To stop abuse, it briefly keeps a rate-limit counter keyed to the visitor's network, which expires within two hours.
Fan emails. If you turn on the fan email list, the emails visitors type in are stored encrypted on Punch Cloud and only you can export them, from the app. Pauram doesn't share them or use them for anything else, and only emails them when you send an update (below). You are responsible for using them in line with the law where you and your fans live.
Emailing your fans. When you tap "Email your fans", Punch Cloud sends your subject and message to the fans on that page's list through our email provider, Resend, from a Punch address with replies going to the email you give. Every email includes the mailing address you enter (email law requires it) and a one-tap unsubscribe link. When a fan unsubscribes, Punch Cloud deletes their email and keeps only a scrambled (hashed) copy so they're never emailed from that page again unless they sign up again. Punch Cloud keeps the subject, date and number sent for each email (the last 20); your mailing address and reply email aren't stored by Punch Cloud, though Resend keeps delivery logs under its own policy. One email per page per day.
Removing pages. Deleting your Punch Cloud data (Settings → Security) deletes your link pages, their counts, their fan emails and their email history.

Sparring partner (optional)

If you pair with a sparring partner, Punch Cloud stores a six-letter invite code (until it's used, or for 7 days), which two Punch Cloud accounts are paired, and for each of you: your fighter name, streak, the days you posted (the last 120, in your time zone), and, only if you leave "Share my handle and drop" on, a handle and the name of your current drop. Your partner sees those and nothing else: no posts, sales or notes. This expires 45 days after your app last checks in. A nudge is kept until your partner's app shows it, at most 2 days. Unpairing removes the pairing for both of you; deleting your Punch Cloud data deletes all of it. To check on your partner while Punch is closed, the app uses iOS background refresh.

Trends

The Trends tab loads a list of trending formats, searches and charts from Punch Cloud. Punch Cloud builds that list from public sources (Google Trends, Apple's public charts and YouTube) and doesn't receive anything about you except the request itself. Trends you save stay on your iPhone and in your iCloud.

Your handles

Handles you type in Settings → Your accounts are stored on your iPhone. Punch adds them to your posts, your fighter card and, if you use Punch Links, your own link pages.

Optional connections you set up

Sales sync. If you connect Gumroad, App Store Connect, Stripe, Shopify, Etsy, Lemon Squeezy or Buy Me a Coffee, your token or key is stored in your iPhone's Keychain and sent only to that service to read your own sales. Ko-fi sales arrive at your own Punch Links server, which keeps only the amount, date and item name. The developer never receives it.
Your own Punch Links server. If you deploy your own Punch Links server instead of using the hosted pages, link pages, click counts and fan emails are stored on your server (for example your Cloudflare account). The developer has no access. Click counts record only the source label (such as "tiktok"), never IP addresses or cookies. If you collect fans' emails, you are responsible for using them in line with the law where you and your fans live.
Sharing to Punch. When you share a link to Punch, it reads that page's public title and preview image to fill in your product.

Voice notes

When you dictate a Punch note, speech is turned into text on your iPhone when your device supports it (otherwise by Apple's speech service). Punch keeps only the text, never the audio.

Punch Your Taxes (optional)

If you turn on tax tracking, the expenses you log and any receipt photos you add are stored on your iPhone and in your private iCloud, like the rest of your Punch data. Receipts are read on your iPhone; they're never uploaded to the developer or anyone else. Exports (PDF, spreadsheet and receipt photos) are created on your iPhone and go only where you share them. Punch isn't a tax advisor and doesn't file anything for you.

Sales reports

Reports you import (for example from Amazon KDP) are read on your iPhone. Only each sale's title, amount and date are saved, in your own iCloud.

Calendar

If you turn on "Add to Apple Calendar", Punch asks for write-only access so it can add your punch dates and release days. It cannot read, change or delete any of your existing events.

Notifications

Daily reminders are scheduled locally on your iPhone. You can turn them off in Punch's Settings or in iOS Settings.

Purchases

Punch Pro subscriptions are handled by Apple through the App Store. The developer doesn't receive your payment details.

Launch email (website)

Before Punch is on the App Store, Punch's website (pauram.com/punch) lets you leave your email address to hear when it launches. We store only the address and the date you signed up, in a file outside the public website (no IP address, no tracking). We send one email on launch day and then delete the whole list. To be removed sooner, email support@pauram.com.

The website

Punch's website doesn't use cookies, analytics or ads. If your browser is set to Spanish or Japanese, the site may offer that language; closing the offer is remembered only in your browser.

Children

Punch isn't directed to children under 13 and doesn't knowingly collect information from anyone.

Security

App Lock. You can lock Punch with Face ID, Touch ID or your passcode, and hide it in the app switcher. Face ID is handled by iOS; Punch never sees your face data.
Keys stay on your iPhone. Keys for your stores and your Punch Links server are kept in your iPhone's Keychain, aren't included in backups and don't move to a new phone. Settings → Security → Remove saved store keys clears them.
Encrypted connections. Everything Punch sends goes over HTTPS. Punch Cloud stores platform keys encrypted, rate-limits requests, checks that uploads are real videos or images, and deletes uploads after 7 days.
Tax exports. Files you export are created on your iPhone and deleted as soon as you're done sharing them.
Reporting a problem. If you find a security issue, contact us through the support page. See our security.txt.

Deleting your data

To remove everything Punch Cloud holds about you, go to Settings → Security → Delete my Punch Cloud data. It disconnects every account, cancels scheduled posts, unpairs your sparring partner and deletes your uploads, your link pages and their fan emails. Scheduled posts can be canceled by deleting their punch date. Post records expire after 60 days and media after 7 days.

Delete products, posts or sales inside the app, or delete the app to remove everything stored on your device. To remove iCloud data, go to Settings → [your name] → iCloud → Manage Storage → Punch.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions? Email support@pauram.com. Punch is published by Pauram LLC.