Privacy

Privacy Policy

Last updated: 2026-06-10

Pulse Commit has no servers. No developer collects, stores, or sees your data.

Short version: the app collects nothing — it writes your Apple Health data directly from your phone to destinations you configure. The only personal data this website holds is the email you choose to give the launch waitlist.

1.What the app collects

Nothing. The app reads selected Apple Health data on your device and writes it directly to destinations you configure. The developer operates no backend, no analytics, no telemetry, no crash reporter, no advertising SDK. Its App Store privacy label is Data Not Collected.

2.Where your data goes

Only to destinations you set up yourself:

The GitHub repository you connect (via api.github.com and the GitHub Device Flow endpoints https://github.com/login/device/code and https://github.com/login/oauth/access_token).
The Telegram chat you connect (via api.telegram.org).

The full list of outbound hosts in the production build:

api.github.com
github.com (Device Flow only)
api.telegram.org

No other host is contacted.

3.How to revoke

In Pulse Commit, open Destinations → GitHub and sign out. This deletes the OAuth token from the iOS Keychain.
In Telegram, talk to @BotFather and revoke (or delete) the bot you created. Then open Destinations → Telegram in Pulse Commit and clear the bot token field.
In iOS Settings → Privacy & Security → Health → Pulse Commit, turn off any category you no longer want the app to read.

4.How to delete data

The developer holds no copy of your data, so there is nothing for us to delete.

To delete what was exported: delete the GitHub repository (or specific commits) and delete the Telegram chat history.
To delete local state: open Pulse Commit → Settings → Reset all data. This wipes the history database, the export cursor, and the Keychain tokens on this device. It does not touch your GitHub repo or Telegram chat.

5.Third-party services we depend on

Apple — HealthKit (data source), App Store (distribution and payment).
GitHub — the repository you choose to commit to. Their privacy policy applies to your repo.
Telegram — the chat you choose to send messages to. Their privacy policy applies to that chat.

The app embeds one open-source library: ZIPFoundation (MIT). It runs on-device only and makes no network calls.

6.No advertising / no data brokers / no analytics

The app contains no advertising SDKs, no data broker integrations, and no analytics. There is no event log to share, sell, or hand over.

7.HealthKit-specific notice

In accordance with Apple App Review Guideline 5.1.3, Pulse Commit does not use HealthKit data for advertising or for any purpose other than the export you explicitly trigger. HealthKit data is never transmitted to the developer. It is written only to the destinations you configure and authorize.

8.This website and the waitlist

If you submit the waitlist form on pulsecommit.app, we collect the email address you enter — nothing else.

It is stored in a Cloudflare D1 database and used for one purpose: to notify you when Pulse Commit launches.
We do not sell, rent, or share it. Email us anytime and we delete it.
The form is protected by Cloudflare Turnstile, which does not use tracking cookies and is not used for advertising.
The site is hosted on Cloudflare; as any host does, Cloudflare processes standard request data (IP address, user-agent) to serve the site and protect it from abuse. This site uses no analytics and no tracking cookies.

9.Contact

Questions or deletion requests: hi@pulsecommit.app.