Punchcard — Terms & Privacy

This page covers what is specific to Punchcard, the loyalty and rewards app. It sits on top of the terms and privacy notice common to every Keelhelm app; read them together.

What Punchcard reads and does

Punchcard requests read access to your orders and products, and read and write access to your customers, to award points, run referrals and VIP tiers, and issue rewards as native Shopify store credit. The write permission is used to issue store credit and to keep a fast-reading balance on the customer's own record; Punchcard does not modify your products, themes, or checkout.

Points and store-credit balances

Rewards are issued and redeemed as native Shopify store credit, so a customer's balance lives in their own Shopify account, not a third-party wallet. Punchcard keeps a points and store-credit ledger (issuance and redemption, tied to customer accounts) so balances stay accurate and reconcile against Shopify, which remains the source of truth for the credit itself. When Roundtrip or Refill are also installed, they issue and read credit through this same shared ledger.

Importing existing loyalty data

If you import balances from another loyalty tool, Punchcard processes the export file you upload only to complete that import; the uploaded file is transient and is deleted after the import finishes.

Referrals

Referral links are tracked to attribute two-sided rewards. Punchcard does not use third-party advertising pixels for this.

Plans

Punchcard offers Free, Starter, Growth, and Unlimited plans, billed through Shopify (monthly, or annually at a discount). Current prices and limits are on the pricing page.

Data retention and deletion

Points, referral, VIP-tier, and store-credit-ledger records are kept while Punchcard is installed and are deleted or anonymized on uninstall and on Shopify's customers/redact and shop/redact requests, as described in the common privacy notice.

Keelhelm company policies

Punchcard is operated by Keelhelm. Beyond this page, the common app terms and app privacy notice apply, and so do the company-wide Terms, Acceptable Use, Privacy, and Copyright / DMCA policies, incorporated by reference. To report a concern, use the Keelhelm reporting form. Questions: hello (at) keelhelm (dot) com.