Last updated: March 2026
PulseID ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use our mobile application.
PulseID is designed with privacy at its core. While some media processing may occur on secure remote servers, no data is ever stored—files are immediately deleted after processing.
We do NOT collect, store, or transmit your biometric or health data to any external servers.
When you create an account or purchase a subscription, we collect your email address and subscription status. Payment processing is handled entirely by Apple—we never receive your payment details.
With your explicit consent, PulseID accesses heart rate data from:
This data is accessed solely to display your heart rate on screen and overlay it on photos/videos. The data is processed entirely on your device and is never uploaded, stored, or transmitted externally.
We request access to:
Media you create stays on your device unless you choose to share it.
We collect device model, operating system version, app version, and platform. This data is used solely to diagnose crashes, reproduce bugs, and monitor app stability—it is never used for advertising or tracking.
City and country may be derived automatically by our hosting provider (Cloudflare) from your IP address for abuse prevention and service security. We do not collect GPS coordinates.
When you grant access to health data, we store the timestamp of your consent for legal compliance.
Your data is used solely to provide app functionality:
When remote processing is used, your media is transmitted securely, processed immediately, and permanently deleted—nothing is stored on our servers.
Account data: Stored securely on our servers while your account is active.
Health data: Processed on your device only—never stored on our servers.
Media: Videos processed on our servers are immediately deleted after processing.
If you are in the European Economic Area, we process your data under the following legal bases:
We do not sell, rent, or trade your personal data. We do not use your data for advertising.
Account data is stored securely on servers in the United States via Cloudflare (encrypted in transit and at rest). If you are located outside the United States, your data will be transferred to and processed in the United States. International transfers are conducted based on Standard Contractual Clauses (SCCs) as approved by the European Commission.
Health and biometric data is processed entirely on your device and is never stored on our servers. When remote media processing is used, files are transmitted securely, processed immediately, and permanently deleted—nothing is stored.
We retain your account data while your account is active. When you delete your account, all personal data is removed immediately. Accounts inactive for 12 months may be automatically deleted along with all associated data.
We use RevenueCat to manage subscriptions. RevenueCat receives your subscription status to validate purchases. See RevenueCat's privacy policy.
We do not use analytics, advertising, or tracking services. We do not sell your personal information.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to:
To exercise these rights, contact us at [email protected].
Washington's My Health My Data Act provides additional protections for health data. Under this law:
In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable law, including GDPR (72-hour notification to supervisory authorities) and applicable US state breach notification laws.
PulseID is not intended for children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children under this age.
We may update this Privacy Policy from time to time. Material changes will be communicated through the app. Continued use of the app after non-health-related changes constitutes acceptance of the updated policy. Material changes to how we process health and biometric data will require renewed consent.
If you have questions about this Privacy Policy or our privacy practices, please contact us:
[email protected]