Privacy policy
Last updated 15 October 2026. PULSELINK is currently in pre-launch testing; this policy describes the app as it works today and will be updated before public release.
Who we are
PULSELINK is a heart-rate alert app for iPhone and Apple Watch, operated from Ontario, Canada. Contact: [email protected].
What PULSELINK does
Your Apple Watch measures your heart rate while you are monitoring. If it goes above the rule you set for the time you set, the app starts an alert. If you don't cancel it with I'M OK, the people you chose ("supporters") are notified. PULSELINK is not a medical device and does not interpret your heart rate.
What we collect, and why
- Your account: the name you give, and the anonymous identifier Apple provides when you Sign in with Apple. We don't receive your Apple password. If you choose to share your email with Apple's sign-in, we don't store it.
- Heart rate: readings are processed on your Watch and iPhone. Only alert information is sent to our server: when an alert started and ended, and the heart-rate values during it (first, highest, lowest, average and latest). Heart rate outside alerts stays on your devices. PULSELINK does not write to Apple Health.
- Location: only if you turn on Location sharing, and only during an active alert. It is encrypted, shown to supporters you allowed to see it, and deleted when the alert ends.
- Your supporters: who you invited, what each may see (alerts, heart rate during an alert, location during an alert), and when they checked in on an alert.
- Devices: a notification token for each device so we can send alerts, the app version, and when the device last connected.
- Early access sign-up on this website: your email and which option you chose, used only to contact you about PULSELINK early access and launch.
What we don't do
- We don't sell your data or use it for advertising.
- The apps contain no third-party analytics or advertising SDKs.
- We don't contact emergency services.
Who can see your data
Only supporters you invited and approved, and only what you allowed, while an alert is open. Service providers that run PULSELINK for us process data on our behalf: Render (the PULSELINK server and database), Apple (sign-in and push notifications) and Cloudflare (this website and the early-access list).
Where your data is stored
The PULSELINK server and database are hosted by Render in the United States (Ohio). That means your account and alert information, including location during an alert, is stored and processed outside Canada, and may be accessible to US courts and authorities under US law. The website and early-access list run on Cloudflare's global network. Our providers process this information only to run PULSELINK for us.
How long we keep it
- Location: deleted when the alert ends.
- Your account and alert history: until you delete your account.
- Early-access email: until launch communications end, or sooner if you ask.
Your choices and rights
You can turn off Location sharing, remove a supporter, or delete your account in the app (Settings). Deleting your account removes your data from our server, keeping only a record that an account was deleted, and revokes PULSELINK's Sign in with Apple access. You can also email us to access, correct or delete your information, or to be removed from the early-access list. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Security
Data is sent over encrypted connections in production. Location and Apple sign-in tokens are encrypted on our server. Session tokens are stored only as hashes.
Children
PULSELINK is for people 18 or over and is not directed at children.
Changes
We'll update this page when PULSELINK changes, and tell you in the app about significant changes.