How Pulse protects your data
A simple rule: the most sensitive data stays on your phone, and everything else reaches the server only if you've turned on a feature that needs it — and only with consent for that type of data.
The most sensitive data stays with you
Precise coordinates and voice recordings never leave your phone. Server processing is switched on separately for specific signals.
What may leave your phone and what never does
The server gets only what the features you've turned on need: sync, the AI assistant, account security and support.
May be processed on DuoHuman servers — with your consent
- Place names, time spent and trips — without precise coordinates
- Time by app category — without the list of installed apps
- Mood, energy and stress as numbers
- Health metrics from Health Connect, Apple Health and Oura: sleep, steps, heart rate, HRV
- Tasks, goals and notes — for sync and assistant suggestions
- Your chat with the assistant and its memory of you
- Account email, consent records and technical logs
Never sent to DuoHuman servers
- Precise GPS coordinates
- Voice recordings and audio files
- The list of installed apps
- Advertising identifiers
- Direct device identifiers
- Names and contacts in AI requests — stripped before sending
- Data for sale, advertising or marketing transfer
Sensitive access is explained first
Before sensitive Android or iOS permissions, Pulse explains what it needs, why, and how to turn it off.
Background location
For place names and day context. Turn it off in system settings or in Pulse privacy settings.
Screen time
For screen-time categories — without sending the list of apps.
Health data
For Energy Score and recovery. Health Connect, Apple Health and wearables connect only with your explicit permission.
Microphone and calendar
Voice notes and calendar are optional. Voice recordings aren't uploaded to the server.
The assistant sees only what you allow
The Pulse assistant works only with data you've consented to. Long-term memory is short facts about you, not a copy of your life.
Without your identifiers
AI requests go through our server; names and contacts are stripped from notes and chat before sending.
Memory in plain sight
Everything Pulse remembers about you is on the "What Pulse knows about me" screen: correct it or make it forget.
History improves suggestions, and you can always delete it
Pulse keeps your history while your account is active, because patterns take time. You can export or delete your data.
| Data | Period | Control |
|---|---|---|
| Events, mood, activity and plans | While the account is active | Export or delete |
| Assistant memory and suggestions | Until memory or the account is deleted | Memory screen and account deletion |
| Technical logs | Limited period | Only for running and securing the service |
| AI request log | Limited period | Abuse protection |
| Payment records | As long as the law requires | Legal retention only |
Deleting your account deletes your data, except what the law requires us to keep. Exact periods are in the Privacy Policy.
Sync is end-to-end encrypted
Data between your devices travels over an encrypted channel. The key is created on your phone — our server never sees it and can't read the contents.
Our boundaries
Pulse is designed around these rules.
- We don't sell personal data.
- We don't use data for advertising.
- We don't upload precise coordinates or voice recordings.
- We don't share the list of installed apps.
- Pulse is not a medical device and doesn't give medical advice.
All the legal details
The Privacy Policy covers the controller's details, retention periods, your rights, regional notices and contacts.