Pulse

Privacy Policy

Last updated: 18 July 2026

Pulse is a private, end-to-end-encrypted app for couples. The messages you send ("pulses") are sealed on your device and can only be opened on your partner's device. We never see your pulse content — not what you sent, not which pulse it was, not your partner nicknames or custom decks. Our server is a "coat-check": it holds only sealed, unreadable envelopes on your behalf.

1. Who we are

Pulse ("we", "us", "the app") is an independent app operated from India. If you have any question about this policy or your data, email us at pulseldrapp@gmail.com.

2. Our core promise: end-to-end encryption

Every pulse you send is encrypted on your device before it leaves it, using an X25519 key exchange (set up during the one-time QR pairing ceremony with your partner) and AES-256-GCM encryption. The encryption keys live only on you and your partner's devices — they are never uploaded to us.

As a result, when a pulse passes through our server it is a sealed envelope we cannot open. We do not — and technically cannot — see:

the content of any pulse, or even which preset pulse was sent;
the nickname you set for your partner;
any custom pulses or custom decks you create;
your private keys or any plaintext.

Because we never hold your keys, we cannot recover your encrypted history for you, and we cannot hand your content to anyone else — because we do not have it.

3. What the server actually stores

Our server ("coat-check") holds only:

Sealed envelopes — the encrypted pulses in transit, which we cannot read.
Public keys — the non-secret half of your keys, used to route sealed pulses to your partner.
Peppered hashes — irreversible one-way values (e.g. for lookups), not the underlying data.
Opaque tokens — random session/authentication tokens.

4. Personal data we collect

Beyond the sealed data above, we collect a minimal amount of personal data:

Data	Why
Email address	Used only for passwordless sign-in (a one-time code) and as your account identity. We do not send marketing email.
Device push token	Used only to deliver "you got a pulse" notifications. The notification text is generic and never contains your pulse content.
Product analytics	Screen views and app-lifecycle events, via PostHog (EU region). No personal identifiers, no pulse content, and session replay is disabled.

5. Device permissions

Camera — used only to scan your partner's pairing QR code. We do not take or upload photos.
Microphone — used only if you choose to record a custom pulse sound. That recording stays on your device.
Notifications — used only to alert you that you received a pulse.

6. Service providers (sub-processors)

We rely on a small number of trusted providers to run Pulse:

Provider	Role
Resend	Sends the one-time sign-in code emails (from the domain ai-generated-checker.com).
PostHog (EU)	Privacy-preserving product analytics, with no personal identifiers.
Firebase Cloud Messaging (Google)	Delivers push notifications — generic copy only, never pulse content.
Google Play	App distribution.

7. No advertising, no selling your data

Pulse contains no advertising. We do not sell your personal data, and we do not share it for anyone's marketing purposes.

8. Data retention and account deletion

You can delete your account at any time from within the app. Deleting your account removes your associated data from our systems. Sealed pulses are transient and are not retained indefinitely.

9. Children

Pulse is not directed to children under 13, and we do not knowingly collect personal data from them.

10. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you in the app.

11. Contact

Questions, requests, or concerns? Email pulseldrapp@gmail.com.