Skip to content
Pulse Back to site

Legal

Privacy Policy

Last updated: 27 July 2026

In short: Pulse collects only what it needs to show you nearby events and run your account, we don’t sell your data, and you can access or delete it at any time. The full detail is below.

Where we are today: Pulse has not launched yet, and this website is a waitlist. The only personal data it collects is what you type into the waitlist form — your email address, city, and stated interest — plus the cookieless analytics described in §7. Sections covering accounts, location, and content you create describe the Pulse app and take effect when it launches.

1. Overview

Pulse (“Pulse,” “we,” “us”) operates the Pulse app and website (the “Service”). This Privacy Policy explains what personal data we collect, why, how we use and share it, and the rights you have. The data controller is Pulse, reachable at support@pulse-map.app. Pulse is an early-stage service in the process of being incorporated; once incorporated, our registered company name and postal address will be published here.

2. Data we collect

We collect the following categories of data:

  • Account & profile data — name or username, email address, password (hashed), profile photo, and interests.
  • Waitlist data — email address, city, and stated interest, when you join the waitlist.
  • Content you create — events, messages, photos, videos, RSVPs, and follows.
  • Location data — approximate or precise location, if you grant permission (see §3).
  • Usage & device data — app interactions, device type, operating system, IP address, and identifiers.
  • Communications — messages you send to support and your notification preferences.

3. Location data

Location is central to Pulse: we use it to show events near you and to place events on the map. We request location permission through your device; you can grant precise or approximate location, or deny it, and change this at any time in your device settings. If you deny location, you can still browse by searching a city manually, but some features will be limited.

4. Authentication

We use Supabase Auth to create and secure your account. Depending on the sign-in method you choose, we process your email and a hashed password, or a token from a third-party identity provider such as Apple or Google (where offered). We never receive your third-party password. Authentication cookies or tokens keep you signed in.

5. How we use your data

We use personal data to:

  • provide, personalize, and improve the Service, including nearby-event discovery;
  • create and secure your account and authenticate you;
  • enable events, chat, follows, and ephemeral stories;
  • send transactional messages and, with your consent, product updates and your waitlist invite;
  • maintain safety, prevent fraud and abuse, and enforce our Terms;
  • comply with legal obligations.

Where required by law, our legal bases are your consent, performance of our contract with you, our legitimate interests in operating and securing the Service, and compliance with legal obligations.

6. Cookies & similar technologies

This website sets no cookies. It stores nothing on your device, and the analytics we use are cookieless (see §7) — so there is no cookie banner here, because there is nothing to consent to.

When the Pulse app and the signed-in parts of the website launch, we expect to use cookies and similar technologies in these categories:

  • Essential — required for the Service to work, such as keeping you signed in, securing forms, and remembering your cookie choices. These are always active.
  • Preferences — remember settings like your city or display choices.
  • Analytics — help us understand how the Service is used. Where these rely on cookies or similar device storage, we will set them only with your consent.

At that point you will be able to control non-essential cookies through our cookie banner and your browser settings. Blocking essential cookies may stop parts of the Service from working.

7. Analytics

We use Vercel Web Analytics and Vercel Speed Insights, provided by our hosting partner Vercel, to understand how the Service is used and how quickly its pages load for you.

Both are cookieless. They set no cookies, write nothing to your device’s storage, and do not assign you a persistent identifier that could be used to follow you across websites or over time. Web Analytics records page views together with coarse signals such as referrer, country, browser, operating system, and device type. To count returning visits within a single day without identifying you, it derives a short-lived, non-reversible hash from your request — including your IP address and browser signals — which is rotated at least every 24 hours. Speed Insights records page-performance measurements, such as how quickly a page renders and responds, alongside the same coarse device and connection signals. Your IP address is used to derive that hash and to infer your country; we do not store it and we cannot use any of this to identify you.

Because neither product stores or reads information on your device, they fall outside the consent requirement that applies to cookies, and we do not show a banner for them. Our legal basis is our legitimate interest in understanding and improving the Service, weighed against the limited and non-identifying nature of the data. You can object to this processing at any time by contacting us (see §15), and browser extensions or privacy settings that block requests to /_vercel/ will stop the collection entirely.

If we adopt or change an analytics provider, we will update this section and, where required, ask for your consent before the new analytics run.

8. How we share data

We do not sell your personal data. We share it only:

  • With other users, as inherent to the Service — for example, your profile, events you host, RSVPs, chat messages, and stories are visible to the relevant audience you choose (public, city, or private).
  • With service providers (“processors”) who host and operate the Service on our behalf, such as Supabase (database, storage, and authentication), Vercel (website hosting, analytics, and performance measurement), our maps and geolocation provider, and our email-delivery provider, under contracts that require them to protect your data.
  • For legal reasons, when required by law or to protect rights, safety, and the integrity of the Service.
  • In a business transfer, such as a merger or acquisition, subject to this policy.

9. Data retention

We keep personal data only as long as needed for the purposes described here. Ephemeral stories are designed to be removed from public view after 24 hours; backups and logs may persist for a limited period. Account data is kept while your account is active and deleted or anonymized within 90 days of account deletion, except where we must retain it to meet legal obligations.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. Residents of the EEA/UK have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any right, contact us at support@pulse-map.app. You may also lodge a complaint with your local data-protection authority.

11. Security

We use technical and organizational measures — including encryption in transit, hashed passwords, and access controls — to protect your data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you as required by law.

12. Children’s privacy

The Service is not directed to children under 15, and we do not knowingly collect their data. If you believe someone under 15 has provided us personal data, contact us and we will delete it.

13. International transfers

We aim to store personal data within the European Union / European Economic Area (EU/EEA). Some of our service providers process data in other countries — for example Vercel, which hosts this website and is based in the United States. Where we transfer data outside the EU/EEA, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or transfers to countries covered by an adequacy decision.

14. Changes to this policy

We may update this policy from time to time. We will post the new version with an updated date and, for material changes, provide additional notice through the Service or by email.

15. Contact us

For privacy questions or to exercise your rights, contact our privacy team at support@pulse-map.app. We have not appointed a dedicated Data Protection Officer; privacy matters are handled by our team at that address. Once Pulse is incorporated, our registered company details and postal address will be published here.

Back to Pulse