Privacy policy

• We collect what PulseIn needs to work: your account, your cards, your connections and what you post.
• No advertising SDKs and no third-party analytics, in the app or on this website. We don't sell your data.
• Moderation runs on our own servers. Your posts and photos aren't sent to an outside AI company to be checked.
• Precise location is used only after you allow it: while Pulse Out runs, and when you save where you met someone, it's stored with that contact.
• This website uses no cookies and no trackers.
• You can delete your account at any time, in the app or on this website.

PULSE AND PIXEL CORP, S Orange St, Wilmington, DE 19801, USA, is responsible for your personal data (the “controller”). Write to us about privacy at [email protected].

Your account

Name, email address, password (stored only as a secure hash), whether your email is confirmed, and your settings. If you sign in with Apple or Google, the account identifier they give us and the email at the time you linked it; for Apple also a token we use to disconnect PulseIn from your Apple ID when you delete your account. If you use a passkey, its public key. Why: to create and secure your account (needed to provide PulseIn).

Your devices

A device identifier, the platform and app version, and the push token Apple gives your device so we can send you notifications. Why: to sign you in on the right device and send notifications (needed to provide PulseIn).

Your cards

What you put on your cards: names, handle, headline, job title, company, phone number, links and other details, photo, cover and colour, and whether a card is public or private. We remove location and camera details (metadata) from the photos you upload. Why: your cards are your profile and what you share (needed to provide PulseIn).

Connections and contacts

The people you connect with, and the contacts you add yourself: their name, work, phone, email, photo, tags, notes, reminders and how you met: a place name, the date, and the map position of where you met. Voice notes are turned into text on your phone; we receive only the text, never the recording. Why: to keep your connections and their context for you (needed to provide PulseIn).

Posts and activity

Your posts, replies, photos and videos, reposts, likes, bookmarks, follows, mutes, blocks, the communities you join and the reports you send. Why: to provide the social features (needed to provide PulseIn).

Location

Only when you use Pulse Out or Find people nearby, and only after you allow it. While Pulse Out runs, your phone sends us its precise location, and we pass it to the apps of PulseIn users within about a kilometre who are also visible, so each of you can see the other is nearby. Find people nearby uses Bluetooth to find PulseIn users right next to you; while it runs your phone broadcasts a PulseIn identifier. When you save where you met someone, the place name and its map position are stored with that contact (see Connections and contacts) until you change it, delete the contact or delete your account. We don't work out your location from your IP address. Why: these features can't work without it (needed to provide the feature you started).

For You activity

If “Personalise For You with my activity” is on (Settings › Privacy; it's on unless you turn it off), the app records which posts you saw in your feeds and on profiles, for how long, and whether you opened them, watched their media or tapped their author, plus your Not interested choices. It's stored under a pseudonym, not your name. We use it to build a profile of the topics you engage with for For You suggestions and to measure and improve For You. When the switch is off, nothing is recorded. Why: personalisation you can switch off.

Safety and moderation

When you post, our automated checks record their result (the decision, the category and the score, never your text). Reports, legal notices and appeals, and the decisions we take, are kept as a record. Why: to keep PulseIn safe and meet our legal duties (EU Digital Services Act).

Legal notices

If you send a notice about illegal content: your name and email (optional for notices about the protection of minors), your explanation and the link. Why: to handle the notice and tell you our decision, as the EU Digital Services Act requires.

Purchases

If you buy Pro, a subscription, a paid community or a tip, Apple tells us the transaction: the product, its identifiers, the period and the amount. We never see your card or payment details. We keep a ledger of the money creators earn. Why: to give you what you bought and pay creators (needed to provide the purchase; accounting).

Creator payouts and verification

If you set up payouts, Stripe collects your identity and bank details; we keep your Stripe account identifier, its status, your balance and your payouts. If you verify your identity, Stripe checks your document; we keep only the verification's identifier and its status. Why: to pay you and to verify you (needed to provide the feature; legal duties for payments).

Emails

We email you codes (to confirm your email, reset your password or change your email), security notices, and, if you send or receive one, legal notice and decision emails. No marketing emails. Why: needed to provide PulseIn securely.

IP addresses

We don't log your IP address. Our servers use it in memory to limit abuse (rate limits). When you post a photo or video, the address it was attached from is stored next to it only while it's being checked, at most 24 hours; if the check finds known child sexual abuse material, the address is kept with that record for the authorities. Why: security, and protecting children.

We don't collect your birth date, your phone's contacts list (the app only checks, on your phone, whether a contact already exists there, and adds contacts to it when you ask), or your search history (recent searches stay on your phone).

Text is checked by word lists, simple spam checks and open-source models (Detoxify, and IBM's granite-guardian-hap-38m for a second opinion); images and video frames by an open-source image model (Marqo nsfw-image-detection-384). All of them run on our own servers. No outside company receives your content to moderate it.

Our systems could also send content our own models can't judge to Microsoft's Azure AI Content Safety service. That fallback isn't used; if we ever switch it on, we'll update this policy first.

• Other people on PulseIn: what you choose to show. Public cards and posts can be seen by anyone with the link, including on pulsein.one; private cards only through the links you share.
• Service providers that run PulseIn for us, under contract: Microsoft Azure (servers, database, file storage and email sending), Apple (delivering notifications through the Apple Push Notification service, which processes your device's push token and the notification, and can include a contact's name in a reminder; Sign in with Apple; App Store purchases; Apple Wallet) and Stripe (payouts and identity verification). If you choose Sign in with Google, Google provides it.
• Authorities, when the law requires it. How we handle their requests is on our requests from authorities page.

We don't sell your data, we don't share it for advertising, and there are no advertising or analytics SDKs in the app or on this website.

Our servers are run by Microsoft Azure in the European Union (West Europe). PULSE AND PIXEL CORP is a US company, and some of our service providers (Apple, Google and Stripe) process data in the United States. When data leaves the EU, we rely on the safeguards the GDPR provides for that.

Your account, cards, contacts, posts and settings

Until you delete them or your account.

When you delete your account

Your cards, posts, replies, likes, contacts, connections, follows, blocks, devices, sign-ins, location and For You profile are deleted straight away, and so are your photos and videos. Other people's contacts made from your card keep the details they already had. Some records are kept without your name, as listed below.

Sign-in sessions

Up to 14 days after last use, then deleted 30 days after they expire.

Emails we send

The queued email (which can contain a code) is deleted 7 days after it's sent. Codes themselves are stored only as a hash.

Location for Pulse Out and nearby

Only your latest location is kept; each new one replaces it. It's deleted when you delete your account.

For You activity

Detailed records: 14 days. A pseudonymised copy used to measure and improve For You: 180 days. Your topic profile: until you delete your account. Deleting your account makes the pseudonymised records impossible to link back to you.

Not interested choices

A post: until you undo it. A person: 90 days. A topic: 30 days.

Moderation results

Results for content that was allowed: 30 days. Results that led to a decision are kept as evidence for reviews and appeals; your name is removed from them when you delete your account.

Legal notices

The sender's name and email: until 200 days after our decision. The notice: two years after the decision.

Reports from the app

Two years, unless the case is still open.

Decisions about content (statements of reasons) and appeals

Five years. The excerpt of your content in a decision: one year. When you delete your account, your name and the excerpt are removed.

Purchases and creator earnings

Kept as accounting records, also after an account is deleted.

Child sexual abuse material matches

The record, the evidence and the uploader's details are preserved for the authorities, at least one year.

Backups

Our database backups are kept for 7 days.

You can ask to access, correct, delete or receive a copy of your personal data, object to how we use it, or ask us to restrict it. Where we rely on your consent, you can withdraw it at any time. Many of these you can do yourself in the app: edit your cards and contacts, change your privacy settings, or delete your account (in the app or on this website). For anything else, including a copy of your data, write to [email protected] from your account's email address. We answer within one month.

You can also complain to a data protection authority, for example the one where you live or work.

PulseIn asks for permissions (location, Bluetooth, camera, photos, microphone, contacts, notifications) only when you use a feature that needs them, and you can change them at any time in your iPhone's Settings.

pulsein.one sets no cookies, uses no analytics, and loads nothing from other companies. When you use a form on it (confirming your email, resetting your password, deleting your account or sending a legal notice), your browser sends what you type straight to PulseIn's servers, and the page keeps nothing once you leave it.

Cards opened at pulsein.one/@name are shown by our servers, which use your IP address in memory to limit abuse.

We use your name and email only to handle your notice: to confirm it, tell you our decision and handle your request to look again. We don't tell the person whose content you reported who you are. We count notices per sender under a pseudonym to stop misuse. Your name and email are erased 200 days after our decision; the notice itself is kept for two years after the decision.

PulseIn isn't meant for anyone under 16. If you believe a child under 16 has given us personal data, write to [email protected] and we'll delete it.

Data travels encrypted, passwords and codes are stored only as hashes, and private-card links expire. No system is perfectly secure; if you find a weakness, please tell [email protected].

If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect. The date at the top shows the last change.