Privacy policy

Last updated: October 23, 2026. This policy covers the website pulsecho.app and the Pulsecho iPhone app. It is a translation of the German privacy policy; the German version is legally binding.

In short

The website sets no cookies and uses no analytics or advertising services. The app stores your training and health data in a database on your iPhone. Data only goes to our server and to the AI service when you use AI features, and only to the extent you choose. Pulsecho shows no ads, sells no data and uses no tracking services.

1. Controller

Florian Stammler
Hintergasse 1
69221 Dossenheim
Germany
Email: support@pulsecho.app

2. Website pulsecho.app

Hosting and server logs

The website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: your IP address, date and time, the page requested, your browser type and the referring page. This is used to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, working website. Cloudflare may process data in the USA and is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Cloudflare.

No cookies, no tracking

The website sets no cookies and loads no third-party content, not even fonts. The only exception: if you dismiss the notice about another language version, your browser remembers this in local storage so the notice does not appear again. This stays on your device and is not sent to us.

Contact form and email

If you write to us using the contact form or by email, we process your email address, your name if you provide it, and your message in order to reply. The form is forwarded to our mailbox through Cloudflare. The legal basis is Art. 6(1)(b) GDPR where your message concerns the app or a contract, otherwise Art. 6(1)(f) GDPR. We delete your message once it has been dealt with and no statutory retention obligations apply.

3. The Pulsecho app

Data from Apple Health

With your permission, the app reads workouts and health data from Apple Health, for example distances, heart rate, sleep, resting heart rate, weight and, if you allow it, cycle data. You choose which data to share in Apple’s permission dialog and can change this at any time in your iPhone settings. The app stores this data in a database on your iPhone. Profile details, goals, saved analyses and notes also stay on your device only. They are part of your iPhone backup if you have backups turned on. Deleting the app deletes this data.

Data from Apple Health is never used for advertising, never sold and never shared with data brokers.

AI features

For the chat, the analysis of individual workouts, the texts of discoveries and the training plan, Pulsecho uses a language model from Anthropic (Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA). The app sends your question and the data needed to answer it to Anthropic through our server. In the settings under “How much should Pulsecho see?”, you decide which data is included:

This data may be health data. We only send it with your explicit consent, which the app asks for before you first use AI features. The legal basis is Art. 6(1)(a) and Art. 9(2)(a) GDPR. You can withdraw your consent at any time by no longer using the AI features or by lowering the data level; processing carried out before withdrawal remains lawful.

Anthropic processes the data on our behalf to generate the answer, does not use it to train its models and stores it only temporarily under its terms for commercial customers. Transfers to the USA are based on a data processing agreement that includes the European Commission’s standard contractual clauses. The app calculates every number in the answers itself, on your iPhone.

Our server

Requests to the AI pass through a server at Cloudflare (Cloudflare Workers, provider as above). It forwards the request, checks Apple’s purchase receipt to see whether you have a subscription, and counts how much of your AI allowance you have used. For this it stores a pseudonymous identifier of your purchase and your usage, but not the content of your questions and answers. The legal basis is Art. 6(1)(b) GDPR.

Purchases and subscriptions

Purchases are handled entirely by Apple. We receive no payment details, only the purchase receipt we use to unlock your subscription. The legal basis is Art. 6(1)(b) GDPR. Apple’s privacy policy applies to payment.

Weather

To show the weather for a workout, the app sends the location rounded to about 100 meters and the time to the weather service Open-Meteo (open-meteo.com). No other data is included. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is showing you the weather for your workout.

Icons of source apps

To show which app recorded a workout, Pulsecho asks Apple for that app’s icon. Only the identifier of the app concerned is sent to Apple, no information about you or your workouts.

No tracking

The app contains no third-party analytics, advertising or tracking services and does not track you across other apps or websites.

4. Your rights

You have the right to access the data we process about you, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. Since most data is stored only on your iPhone, you can view and delete it there yourself. For anything else, write to support@pulsecho.app.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Germany, or the authority in your country.

5. Changes

We update this policy when the website, the app or the law changes. The version published here applies.