Pulse is a private journal that stores everything on your own device. This policy explains exactly what happens to your information when you use the app.
Your journal entries, moods, tags, photos and audio recordings never leave your phone. There is no account to create, no email address to give, and no server that receives your writing. The app contains no analytics software, no crash-reporting service, no advertising and no third-party tracking. The only thing the app ever sends out is a purchase token, used to confirm a Pulse Pro buy (section 3).
Everything you create is written to your device's private storage:
All of this is stored encrypted: the journal database with AES-256, and photos and audio with AES-256-GCM. The encryption key is generated on your device and held in the Android Keystore. Android's automatic cloud backup is turned off for Pulse's data.
| Data | When | Who receives it |
|---|---|---|
| Purchase confirmation | When you buy Pulse Pro (one-time lifetime unlock) | Google Play |
| Purchase token and product ID, plus a random app-generated ID | When you buy or restore Pulse Pro, so the purchase can be checked with Google | RevenueCat (receipt-verification service) |
| Audio of your dictation | Only if you dictate. Recognition is performed by your phone's own speech service, which works on-device or online depending on that service's own configuration | Your phone's speech recognition service (for example Google) |
No journal content, mood data, photo, audio recording, name or e-mail address is ever included in these requests. Pulse contains no advertising, and no advertising identifier is used — the app even removes the advertising-ID permission that some libraries request on its behalf.
Payment is handled by Google Play: card details are never seen by this app and never stored on your
device. To confirm that a purchase is real and not refunded, Pulse sends Google Play's purchase token,
the product ID, and a random identifier that the app generated on your phone to
RevenueCat (api.revenuecat.com) over HTTPS. RevenueCat checks that token
with Google and answers only whether the purchase is active. This identifier is random, contains nothing
about you, and is never joined to your journal data. No other app data is sent, and RevenueCat is used
for this verification only — it is not given your writing, your moods, or your identity. The verified
result is also stored in the phone's protected key storage so Pulse Pro keeps working after a restart.
If you delete the app, the random identifier goes with it; you can ask us to have a stored purchase
record removed as well (section 9).
Dictation is handed to the speech recogniser already installed on your phone, the same one your keyboard uses. Pulse does not run its own speech service: it asks the phone to listen, receives the words back, and stores them in your entry on your device. Whether that recogniser works offline or sends audio to its own provider is decided by your phone and its settings, not by Pulse. Turning off the microphone permission in your Android settings disables dictation completely.
We do not collect:
Pulse offers features that look at your writing and moods — for example mood patterns, sentiment scores, summaries and tag suggestions. This runs entirely on your device using built-in rules. It is not artificial intelligence hosted in the cloud, and your text is not transmitted to any external service to be analysed.
| Permission | Why |
|---|---|
| Camera | Not required — photos are chosen from your existing library |
| Photos and media | Attaching an existing photo to a journal entry |
| Microphone | Recording audio to attach to an entry, and voice dictation |
| Notifications | Your optional daily reminder, weekly review and future-letter unlocks, all scheduled on the phone |
| Run at startup | Re-scheduling your reminders after the phone restarts |
| Biometrics | Unlocking the app with your fingerprint or face |
| Internet | Verifying a Pulse Pro purchase only (see section 3). No journal data is ever sent. |
Every permission is optional. If you decline one, the corresponding feature is unavailable and the rest of the app continues to work.
Pulse is not directed at children under 13. Because the app requires no account and collects no personal information about who you are, it does not knowingly gather data from children. The purchase verification in section 3 carries a random identifier and a purchase token only — nothing that says who the buyer is.
Under the GDPR, CCPA and similar laws you have the right to access, correct, export, or delete your personal data. Because your journal is stored only on your device and is never transmitted to us, you can exercise every one of these rights directly from within the app without contacting us. The one exception is a purchase record: if you bought Pulse Pro, a minimal record (random identifier, purchase token, product) exists at RevenueCat. Mail us the address above and we will have that subscriber record deleted; no journal content is in it.
If this policy changes, the updated version will be published at this URL with a new effective date and noted in the app's release notes.
Questions about this policy can be sent to toufik.bendjeddah@gmail.com, the developer contact address shown on the app's Google Play store page.