Privacy
Last updated:
Puntets keeps just enough for your family's points card to work. It's all here, no fine print hiding anywhere: the print is only small because this is a legal page.
Who is responsible
The data controller is Santi Corrales. For anything about your data, write to hola@puntets.app.
What data we process
Your account. Your email, your name and how you sign in (email link, Apple or Google). If you sign in with Apple or Google, we only get the name and email those accounts share.
Your family. What the adults at home write:
- each child's (or pet's) name or nickname, avatar, colour and, if you set it, gender;
- the points, the reason for each change, who made it and when, and any photos you attach to a change;
- each child's focus note, school menus, dinners and the family's settings;
- the adults in the family and their invite codes.
Your devices. The token used to send you notifications, the platform and the phone's language.
The e-ink display, if you have one: its identifier, status, battery, firmware version and which page it shows.
Talk to Puntets, only if an adult turns it on. The display records while its button is held down. That audio is transcribed on the spot and never stored. We keep the conversation as text so the adults can read it, and how much it is used, to apply the daily limits.
This website. Visit statistics (pages viewed, language, clicks on the download buttons) with no cookies and nothing that identifies you.
What for, and on what basis
- Providing the service: storing the card, syncing it between the adults, notifying you of changes, showing it on the display. Necessary for the contract you accept by using the app (GDPR art. 6.1.b).
- Talk to Puntets: with the consent of the adult who turns it on, on behalf of their children (GDPR art. 6.1.a and 8). You can withdraw it any time by turning the feature off.
- Security and abuse: preventing fraudulent use and keeping the service running, on legitimate interest (GDPR art. 6.1.f).
- Website statistics: knowing what works on the page, on legitimate interest and without data that identifies you.
We don't sell data, we don't run ads and we don't profile anyone, least of all children.
Children
Accounts are for adults only. Children don't sign up or have accounts: their data is entered by an adult with parental responsibility for them, or with that adult's permission. Their real name isn't needed; a nickname works just as well.
Their data is only used so the family can see their card. It is not used for advertising, profiling or training artificial intelligence models.
Who we share it with
With providers that run part of the service for us, under contract and only for that. Among them, OpenAI and Anthropic, which process what is said to Puntets to prepare its answer and read the photo of a school menu. By contract, neither uses this data to train its models.
Some are in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
We would only disclose data to an authority if the law required it.
How long
For as long as you have an account. You can delete it from the app (Family → Account → Delete account) and it goes right away, along with all of the family's data if you are its last adult. If you ask us by email, we do it within 30 days at most. Backups roll over on their own and disappear shortly after.
Talk to Puntets audio is never stored: it is processed and discarded.
Your rights
You can ask to access, correct, delete (your account, straight from the app) or take away your data, object to or restrict its processing, and withdraw a consent. Write to hola@puntets.app from your account's email and we'll answer within a month.
If you think we got it wrong, you can complain to the Spanish Data Protection Agency (AEPD) or to the data protection authority where you live.
Security
Connections are encrypted, each family can only read its own data (the database enforces it, not just the app) and photos sit in private storage. The e-ink display never gets your credentials: it uses its own token, which you can revoke.
Changes
If we change anything important in this policy, we'll tell you in the app before it applies. The date at the top marks the latest version.