What we keep — and what we don't.

What we collect

• Account. When you sign in with Apple, we receive a stable user identifier and the name/email you choose to share (Apple lets you hide your real email). We use it only to create and secure your account.
• Mood signals. The mood you pick, an optional short note, and timestamps.
• Approximate location. Only when you tap to send a signal. Your coordinates are blurred on your device to roughly neighborhood level (e.g. "Kadıköy") before they ever leave your phone. We don't store precise GPS for standard signals. You can send with no location at all (ghost mode), or deny location permission entirely.
• Drawings & reactions. Hand-drawn notes you create, and the reactions and nudges you send.
• Friend graph. Who you've mutually added, and your block/mute list.
• Push token. A device token so we can deliver notifications you've opted into.
• Product analytics. We use Mixpanel (EU data region) to understand how the app is used — events such as app opens, onboarding completion, sending a signal, adding a friend, and viewing the upgrade screen, tied to your account identifier. It is never used for advertising or cross-app tracking, and we don't collect an advertising identifier (IDFA).
• Basic diagnostics. Minimal technical logs needed to operate the service.

What we never collect

• We never read your contacts, photo library, or browsing history.
• We don't build advertising profiles, run ads, or use cross-app advertising trackers (no IDFA). Our product analytics (above) is used only to improve Pulse, never for advertising.
• We never sell or rent your data, and never share it for anyone else's marketing.
• There's no public feed — your signals are never visible beyond the circle you choose.

How we use it

• To deliver your signals to the specific friends you've added — and no one else.
• To send notifications you've opted into (you control these per type).
• To keep the service secure and working.

Who can see your data

• Your close circle only. A signal is visible to the friends you've mutually added. There's no public feed and no friends-of-friends visibility.
• Location stays in-app. Your neighborhood is shown inside the app to your circle; it is deliberately not included in push notifications.
• Service providers. We use Supabase for hosting, database, and file storage, Mixpanel (EU data region) for product analytics, and Apple for Sign in with Apple and push delivery. They process data on our behalf under their terms.

How long we keep it

• Signals are ephemeral. Mood signals and drawings fade from your circle after a few hours and are automatically purged by a scheduled cleanup job shortly after they expire.
• Account data is kept while your account exists. Delete your account and we delete your associated data.

Your controls

• Ghost mode removes location from your active signals and keeps it off the map (permanently, for those signals).
• Block / mute stop notifications and — for block — hide a person.
• Permissions for location and notifications can be revoked anytime in iOS Settings.
• Delete your account — in the app, open the ••• menu → delete account and type "delete" to confirm. This permanently erases your account and all associated data. (Or email brnktl@gmail.com for help.)

Security

Data is encrypted in transit. Access is enforced row-by-row, so a user can only read content that was shared with them.

Children

Pulse is not directed to children under 13. We don't knowingly collect data from them.

Changes

We may update this policy; material changes will be noted in the app or here, with a new "last updated" date.

Contact

Questions or requests: brnktl@gmail.com. We read every one.