Effective 27 August 2026 · Last updated 15 September 2026
Pulse measures and records cardiovascular wellness data — heart rate, blood pressure, blood oxygen, weight and breathing sessions. This is some of the most sensitive information a person has. This policy explains, in plain language, exactly what happens to it.
Pulse has no user accounts and no servers. Every measurement you take and every number you enter is written to storage on your phone and stays there. We — the developers — cannot see your data, because it is never sent to us. There is no analytics SDK, no advertising SDK, and no tracking of any kind in the app.
Your health data leaves your phone only when you make it: by exporting a CSV or PDF and choosing where to send it, or by turning on sync with Apple Health or Health Connect. Deleting the app deletes everything Pulse stored.
The one exception to “no network” is the optional Pulse Premium purchase. If you buy it, the App Store or Google Play and our subscription provider, RevenueCat, exchange the receipt that proves you paid — and nothing else. No health data is involved. See section 10.
Pulse (the “app”) is published by HTMedia (“we”, “us”). The app
is distributed on the App Store and Google Play under the identifier
com.htmedia.pulse.
Because Pulse stores your health information only on your own device and never transmits it to us, we do not hold, receive or process your personal data on any system of ours. In data-protection terms, you remain in control of your data throughout; our role is limited to providing the software that records it.
Everything below is stored on your device only. Fields are optional unless you choose to fill them in.
| Category | Specific data | Why |
|---|---|---|
| Heart measurements | Beats per minute, a signal-quality score and the measurement duration. Nothing else from the camera is kept: no pulse trace and no beat-by-beat timings | To show your reading, calculate trends, and let you re-examine or export a past measurement |
| Derived scores | Resting heart rate estimate and heart-rate zones | Calculated on your device from the measurements above |
| Other vitals | Blood pressure (systolic/diastolic), blood oxygen (SpO₂), weight, and completed breathing sessions | Entered by you or imported from your health app, to build a single history |
| Context you add | Tags (resting, workout, caffeine, sick, …), mood, and free-text notes | To give a reading context when you look back at it |
| Profile | A display name, birth year, biological sex, height, weight, preferred units, and optional manual overrides for maximum and resting heart rate | Age and sex change how heart-rate zones, resting-rate reference bands and BMI are calculated. Nothing here is verified or used to identify you. |
| Reminders | The times and weekdays you schedule, and which reminders are switched on | To deliver local notifications at the times you chose |
| App settings | Theme, units, and whether health-app sync is enabled | To keep the app configured the way you left it |
These are absences by design, not omissions from this document:
Pulse measures your pulse using photoplethysmography: you cover the rear camera with your fingertip, the flash illuminates the tissue, and the app measures the tiny colour changes caused by blood flowing under your skin.
No photo or video is ever recorded. Camera frames are analysed in memory, one at a time, entirely on your device. Each frame is reduced to a single brightness value and then discarded. Nothing is written to your photo library, to a file, or to any network.
Camera access is requested the first time you start a measurement, and can be revoked at any time in your device’s system settings. Pulse also keeps the screen awake during a measurement so the reading is not interrupted.
Health-app sync is off by default. If you turn it on, your operating system asks you separately which specific data types Pulse may read and write. You can grant some and deny others, and change your mind at any time in Apple Health (iOS) or Health Connect (Android).
Heart rate, resting heart rate, blood pressure, weight and blood oxygen — used only to display your existing measurements alongside the ones you take in Pulse, so your history is complete.
The measurements you take in Pulse, in the same categories, so that your other health apps can see them.
Data obtained from Apple Health or Health Connect is used solely to provide the app’s measurement, history and trend features on your device. It is never transmitted off your device by Pulse, never used for advertising or marketing, never sold, and never disclosed to any third party. It is not used for any purpose unrelated to the app’s health and fitness functionality.
Apple Health and Health Connect are on-device stores managed by Apple and Google. What happens to data once it is written there — including whether it is included in an encrypted iCloud backup, or read by other apps you have authorised — is governed by your operating system settings and by Apple’s and Google’s privacy policies, not by this one. Revoking Pulse’s permission stops future reads and writes; it does not remove entries Pulse has already written, which you can delete in the health app itself.
Reminders are scheduled and delivered entirely by your device. Pulse does not use push notifications, so no notification content ever passes through Apple’s, Google’s or our servers. Reminder notifications deliberately contain no health readings. Notification permission is optional; declining it disables reminders and nothing else. On Android, Pulse re-registers your scheduled reminders after a restart, which is why it requests permission to be notified when the device finishes booting.
Pulse writes to a private storage area inside the app’s own sandbox on your device. Your operating system prevents other apps from reading it, and the contents are covered by your device’s full-disk encryption when your device is locked with a passcode, PIN, pattern or biometric.
Pulse does not add a second layer of its own encryption on top of the operating system’s. This means the protection of your health history depends on your device being locked with a passcode or biometric. If your device has no lock screen, or is rooted, jailbroken, or compromised by other software, that protection is weakened. We state this plainly rather than implying stronger protection than the app provides.
If you have enabled encrypted device backups (iCloud Backup, iTunes/Finder backup, or Android Backup), your operating system may include Pulse’s stored data in those backups. Those backups are held by Apple or Google under their terms, not ours. You can exclude Pulse from backups in your device settings.
There are exactly three ways, and you initiate all three:
Pulse makes network requests for exactly one purpose: purchases. To show the price of Pulse Premium in your currency, to complete a purchase, and to check whether a subscription is still active, the app talks to the App Store or Google Play and to RevenueCat. That is described in section 10.
Nothing else in the app uses the network. Measuring, logging, charting, the health report, breathing sessions and export all run entirely offline, and every one of them keeps working with no connection at all. No reading, no profile field and no report is ever sent anywhere. If you inspect the app’s traffic while using it, the only requests you will see are the purchase ones — and none at all if you never open the Premium screen.
No third-party AI service. The health report is written on your device by rules that ship inside the app itself — thresholds, reference ranges and sentence templates applied to your own readings. It is not a machine-learning or language model, it does not call OpenAI, Anthropic, Google or any other AI provider, and no part of your health data is sent to anyone in order to produce it. It is generated in aeroplane mode exactly as it is otherwise.
Pulse Premium is an optional paid upgrade. Buying it is the only part of the app that involves anyone other than you and your phone.
The payment itself is handled entirely by Apple or Google. We never see your card, your billing address or your store account. To know whether to unlock the paid features, the app uses RevenueCat, Inc. (United States), a subscription-management service.
| Sent to RevenueCat | Why |
|---|---|
| A random anonymous identifier generated on your device | To match a purchase to the installation that made it. It is not linked to your name, email or store account, and there is no way to work back from it to you. |
| The store receipt for the purchase, and the product and price you bought | To verify with Apple or Google that the subscription is genuine and still active. |
| Basic device and app information (platform, app version, country, locale) | To show the right products at the right price, and to apply the correct store rules. |
No health data is sent — none, at any point. Not a heart rate, not a blood-pressure entry, not a breathing session, not your profile, not a report. The purchase path and your readings never touch each other.
Because there is no account, the anonymous identifier is the only thing tying a purchase to an installation. Deleting and reinstalling the app creates a new one; Restore purchases re-links your entitlement through your store account, not through anything we hold.
RevenueCat acts as our processor for this. It processes the data above only to provide the subscription service to us, and under its data-processing terms it must protect that data to a standard the same as or equal to the protection described in this policy. Apple and Google act as the sellers of record and process the payment under their own policies. If you never open the Premium screen and never buy anything, the app never contacts any of them.
To have purchase records deleted, write to us at the address in section 17 and we will pass the request to RevenueCat. Note that Apple and Google keep their own transaction records regardless — those are financial records we neither hold nor control.
Pulse keeps your readings indefinitely, on your device, until you delete them. There is no automatic expiry, because a long history is the point of a trend-tracking app. Since we never receive your data, there is no retention period on our side to describe.
You can delete data at any time:
Depending on where you live, data-protection law gives you rights over your personal data — including the right to access it, correct it, export it in a portable format, delete it, and object to or restrict its processing. This applies to residents of the European Economic Area and the United Kingdom under the GDPR, residents of California under the CCPA/CPRA, residents of Vietnam under Decree 13/2023/ND-CP on Personal Data Protection, and residents of other jurisdictions with comparable laws.
In Pulse, these rights are exercised directly and immediately, without asking us:
| Right | How to exercise it |
|---|---|
| Access your data | Open the app — it is all visible in the history and insights screens |
| Portability / obtain a copy | Settings → Data Management → Export CSV, a standard machine-readable format |
| Rectification | Edit or delete any individual entry, or correct your profile |
| Erasure | Delete all data, or uninstall the app |
| Restrict or object to processing | Revoke camera or health permissions in system settings, or stop using the feature |
| Withdraw consent | Turn off health sync, or revoke any permission at any time, without losing access to the rest of the app |
| Opt out of sale or sharing | Not applicable — there is no sale or sharing of personal information to opt out of |
| Purchase records | Email us and we will pass a deletion request to RevenueCat — see section 10 |
Where processing of your health data occurs on your device, it happens on the basis of your explicit consent, given through the operating system’s permission prompts and by choosing to record a measurement. You will never be charged more, shown ads, or given a degraded version of the app for exercising any of these rights.
We cannot fulfil an access or deletion request over your health data on your behalf, because we hold no copy of it to search or erase. The one record we can act on is a purchase — write to us and we will pass a deletion request to RevenueCat, as described in section 10. If you believe your data has been mishandled, you may lodge a complaint with your local data-protection authority.
Pulse is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect data from children — and, given that no data reaches us at all, we have no means of doing so. If you are a parent or guardian and a child has used the app on a device you control, uninstalling it removes everything the app stored.
Pulse is a wellness tool, not a medical device. Camera-based heart-rate estimates and blood-pressure classifications are for informational purposes only and must not be used to diagnose, treat, cure, prevent or monitor any medical condition. Do not make decisions about medication or treatment based on what this app shows you. If you feel unwell, contact a medical professional or your local emergency services.
The strongest security property of Pulse is architectural: data that is never transmitted cannot be intercepted in transit, and data that is never stored on a server cannot be exposed in a server breach. There is no database of ours to compromise.
What remains is the security of your own device, described honestly in section 7. To protect your health history, we recommend you use a passcode or biometric lock, keep your operating system updated, and be deliberate about where you send exported files.
Because we hold no user data and have no way to contact users from within the app, we could not notify you individually of a security incident. Any issue affecting the app would be disclosed in the app’s store listing release notes and on this page.
If this policy changes, the “last updated” date at the top of this page changes with it. If a future version of Pulse ever collects, transmits or shares data in a way this policy does not describe, we will update this page before that version is released, and describe the change in the app’s release notes. We will not retroactively apply a weaker policy to data recorded under this one.
Questions about this policy or about privacy in Pulse can be sent to tuonghttt52@gmail.com. Please do not include health readings or exported reports in a first email — we do not need them to answer a question, and email is not a secure channel for medical information.
This policy is governed by the laws of Vietnam.