Privacy policy

Last updated August 2026

What we collect

If you never sign in

Nothing. Profiles, readings, tags, reminders, and settings are written to a database on your device. The app makes no network request with your health data, and we have no way to see it.

If you turn on sync or family sharing

• Your email address, or the identifier Apple or Google gives us when you sign in with them. Apple's Hide My Email means we may only ever see a relay address.
• The readings you have recorded: values, the date and time you took them, the context you chose, tags, and any note you wrote.
• Your profiles: the name and date of birth you entered for each person, and which vitals they track.
• Sharing records: who you have shared a profile with and what access you gave them.
• A device token, if you enable caregiver alerts, so we can send the notification.

Advertising

The free version of Pulsekin shows ads supplied by Google AdMob. Buying Premium removes every one of them.

Your health readings are never part of an ad request. Nothing you enter — a blood pressure, a blood sugar, a pulse, a note, a tag, a medication check, or a profile name — is sent to Google or to any advertiser, and none of it is used to target an ad.

To serve an ad at all, Google receives what it needs to deliver and count one: your device type and operating system, a coarse idea of where the device is, an advertising identifier, and the fact that an ad was shown. We ask Google for non-personalised ads, which means ads are chosen from the page context rather than from a profile built about you. Google's own handling of that data is covered by Google's privacy policy, and you can reset or clear your advertising identifier in your phone's settings at any time.

What we never collect

• We do not sell, rent, or share your health data with advertisers or data brokers.
• We use no analytics tracker and build no profile of you.
• We ask for no medication names and no doses. A medicine reminder is a time and a label you write yourself, and marking one as taken records a timestamp and an optional note. Whatever you type in those fields is stored as you wrote it — so if you name a medicine there, that name is kept. Nothing prompts you for one, and nothing is ever sent to an advertiser.
• We do not require a password, so there is no password of yours for us to lose.

How it is protected

• All traffic between the app and our server uses TLS.
• Directly identifying fields — profile names, dates of birth, and the notes you attach to readings — are encrypted in our database.
• Access tokens are stored in the iOS Keychain or the Android Keystore on your device, not in ordinary app storage.
• You can add a lock to the app so it asks for Face ID, a fingerprint, or your device passcode before opening.
• Every request for a profile is checked against who owns it or who it has been shared with.

Family sharing

You can share a profile by generating an invite code. The code is single use and expires after seven days. Whoever redeems it gets either view-only or editing access, whichever you chose. Either of you can end the sharing at any time, and we keep a record of when access was granted and withdrawn.

Your choices

• Delete your account. Settings → Account and sync → Delete account removes your user record, profiles, readings, shares, and device tokens from our servers, permanently and straight away. If you no longer have the app installed, use the account deletion page.
• Erase this device. Separately, you can wipe everything stored locally.
• Stop syncing. Signing out leaves the app fully working offline.
• Export. You can produce a PDF or CSV of your readings at any time.

Children

Pulsekin is intended for adults. We do not knowingly collect data from children under 13.

Changes

If this policy changes in a way that affects how your data is handled, we will say so in the app rather than only updating this page.

Contact

Questions or a data request: support@cybexinnovation.com.