Home › Privacy

Privacy Policy

Last updated: October 6, 2026

Pulse is built and operated by Tundra Industries (Hawaii, USA). We respect your privacy. This policy explains what we collect, why, how we use it, and what choices you have.

What we collect

On-device data. Your answers from onboarding, any logs you keep in the app, and your purchase status. This data lives ONLY on your device. We do not transmit it to our servers.

Anonymous account. The app creates an anonymous account in our backend to associate your purchase across reinstalls. This account contains a random ID and your purchase status. It does NOT contain your name, email, location, health data, or any personally identifying information.

Anonymous usage counts (from version 1.4.1). Pulse sends anonymous usage events to our own server (growth.tundra.industries, run by Tundra Industries on Cloudflare) so we can see which features are used. No third-party analytics service is involved. Each event is one of these:

• the app was opened, a session started or ended (with its length in seconds), and the first launch after install
• which screen was opened (Timers, interval or flow setup, Library, timer editor, a saved timer, the running timer, Stats, History, Settings, Palettes)
• an interval workout or flow session started or finished, whether it was started from a Shortcut or the Control Center button, and which built-in template (for example Tabata or Pomodoro) a new timer was made from
• a Live Activity started, the Start Flow control is in Control Center, and whether notifications were allowed when iOS asked
• the share button on a finished workout or flow session was tapped, and the App Store rating dialog was requested (from version 1.5.0; whether you rated, and what you wrote, is never known to the app)
• onboarding steps reached, including which of the fixed choices you picked for “What will you mostly use Pulse for?”
• the unlock screen was shown and closed (and for how long), which unlock was selected, and whether a purchase or restore succeeded, was cancelled, is pending or failed (with the error number)

Each batch of events also carries: a random install ID created by the app (not your Apple ID, not the advertising identifier), the app version and build, iOS version, device model (for example iPhone17,1), language and region setting, time zone setting, the App Store country, and whether the app is a release, TestFlight or development build. Our server records the approximate country, region and city that Cloudflare derives from the connection; the IP address itself is not stored. On first launch on a real device the app also sends Apple’s AdServices attribution token, which tells us only whether the install came from an Apple Search Ads campaign.

Usage counts never include your timer names, labels, session history, or anything you type. They are not linked to your identity and are not used for advertising or tracking. Raw events are kept for up to 400 days.

Live Activity updates. When a timer runs with a Live Activity, the app sends the timer’s name, its schedule and a temporary Live Activity push token to our relay (pulse-push, on Cloudflare) so the Lock Screen timer can update on time. The token stops working when the activity ends.

Crash reports. Pulse sends no crash reports of its own. If you share analytics with app developers in iOS Settings, Apple passes crash reports to us.

Payment data. All payments are processed by Apple via the App Store. We do not see or store your credit card or Apple ID. We receive only a confirmation that you purchased.

What we DO NOT collect

• Your name, email, or phone number (unless you contact support)
• Your precise location (usage counts carry only the approximate country, region and city described above)
• Your contacts, photos, microphone, or camera
• Any health data through Apple HealthKit
• The advertising identifier (IDFA) or any tracking across other companies’ apps and websites
• Any biometric data

How we use what we collect

We use the data we collect only to provide and improve the app: to verify your purchase across devices, to update the Live Activity on time, to diagnose crashes, and to count which features are used. We never use it for advertising or sell it to third parties.

Third-party services

RevenueCat handles purchase verification. They receive only your anonymous app user ID and your purchase status. See their privacy policy at revenuecat.com/privacy.

Supabase stores our anonymous backend accounts. See their privacy policy at supabase.com/privacy.

Cloudflare hosts our usage-count server and the Live Activity relay. See cloudflare.com/privacypolicy.

Apple App Store processes payments. See apple.com/legal/privacy/.

Data retention

On-device data stays until you uninstall the app. Usage events are deleted after 400 days. Anonymous backend accounts persist indefinitely so we can restore your purchase if you reinstall. You can request deletion of your anonymous backend account at any time by emailing support@trypulsetimer.com.

Your rights

You can delete your local data by uninstalling the app. You can delete your anonymous backend account by emailing us at support@trypulsetimer.com. Under GDPR, CCPA, and similar regulations, you have the right to access, correct, port, and erase your data — even though we collect very little of it. Contact us with any request and we will respond within 30 days.

Children

Pulse is intended for adults. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, please contact us at support@trypulsetimer.com.

Changes

We may update this policy. When we do, we update the “Last updated” date above and describe material changes in the app’s release notes.

Contact

Questions about this policy: support@trypulsetimer.com
Operator: Tundra Industries, Hawaii, USA