Privacy Policy
Effective 2026.06.11 · Haii Inc. ("we", "us") protects the personal data of Pulse users in line with the EU/UK GDPR, California CCPA/CPRA, Canada PIPEDA & Québec Law 25, Australia Privacy Act (APPs), and Korea's PIPA.
1. Information we collect
| Category | Examples |
|---|---|
| Account (required) | Email, phone number, date of birth (age check) |
| Profile | Name/handle, photos, bio, gender, sexual orientation (sensitive), work/education |
| Location | Approximate location / distance display |
| Biometric / health (sensitive) | rPPG heart rate, heart-rate variability (HRV), inferred emotion (Heartnote), Sparks & Affinity scores |
| Usage | Device & advertising identifiers, logs, activity, content |
| Payment | Subscription records (via app stores) — card data is handled by Apple/Google |
2. ★ Heart-rate (health) data — scope
(1) Video used for heart-rate (rPPG): we analyze
subtle skin-color changes in your front-camera feed in
real time to estimate your heart rate.
The video frames used for heart-rate measurement
never leave your device
— they are processed in memory and discarded
immediately, with no storage or upload. Only numeric
samples of the form {time, BPM} are sent to
our servers.
(2) Glance (video calls) are a separate flow: in a video Glance, the call video is transmitted to the other person in real time (the nature of a call, via 【LiveKit/Daily etc.】). The heart-rate numbers (BPM) measured during a Glance are stored to show both parties a post-call trend graph (we store the numbers, not the video).
(3) Common: heart rate, HRV, emotion and scores are treated as sensitive/special-category data. We collect them only with your explicit opt-in consent, which you may withdraw or delete at any time. We do not use them for advertising or sell them. See the Consumer Health Data Policy.
3. Purposes & legal bases
Account management, identity/age verification, matching & recommendations, core heart-rate features, safety & fraud prevention, support, payments, legal compliance. GDPR bases: performance of a contract, explicit consent, legitimate interests, legal obligation.
4. Sharing, processors & international transfers
We use processors for cloud, messaging, analytics, payments and support (list published). We disclose to authorities only where legally required. Sensitive data (heart rate, sexual orientation) is not sold or shared for ads. Where data is transferred internationally, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and disclose the recipient, country, purpose and retention.
5. Retention · 6. Your rights · 7. Children
We delete data on account closure (subject to legal retention obligations). Account deletion is available inside the app. You may access, correct, delete, restrict, port your data and withdraw consent; US residents may opt out of sale/sharing (Your Privacy Choices). Pulse is for adults only — no one under 18 (19 in Korea).
8. Contact & complaints
Data Protection Officer 【name/contact】; EU representative (GDPR Art. 27) 【to be appointed】. You may lodge a complaint with your supervisory authority (e.g., EU DPA, UK ICO, US state AG, Canada OPC, Australia OAIC, Korea PIPC).
Consumer Health Data Policy
Pulse processes rPPG heart rate, HRV, inferred emotion (Heartnote) and Sparks/Affinity scores. We publish this policy in line with US state consumer-health laws (e.g., Washington MHMDA) and dating-industry practice.
Video vs. numbers
- Heart-rate video frames — processed only in memory on your device and discarded immediately; no storage or upload. Facial imagery never reaches our servers.
-
What is stored — numeric heart-rate samples
(
{time, BPM}) and baselines, plus BPM numbers measured during a Glance (for the post-call trend graph; numbers only). - Glance video itself is transmitted to the other party for the call (separate from the rPPG promise above).
Purpose: matching & core features. Not used for advertising, profiling or sale. Collected only with explicit opt-in; withdraw or delete anytime. Encrypted in transit and at rest. Contact 【privacy@pulse.app】.
Terms of Use & EULA
Effective 2026.06.11. By using Pulse you agree to these Terms.
Eligibility & account
You must be 18+ (19+ in Korea) and able to form a binding contract. One account per person.
Prohibited conduct
No minors, impersonation, sex work, harassment, hate, spam, unlawful ads, scraping or bots. We may moderate, remove content and suspend accounts.
★ Safety disclaimer
We do not conduct criminal-background or identity checks on users. Meeting people offline is at your own risk. See the safety guidelines.
★ Paid subscriptions, auto-renewal & cancellation
- Payments are processed through the Apple App Store / Google Play. We disclose price, renewal frequency and renewal amount clearly and conspicuously before purchase, and obtain your express consent.
- Auto-renewal: subscriptions renew and are charged automatically unless cancelled at least 24 hours before the period ends.
- Click to cancel: you can cancel through the same channel you used to subscribe (the app store's subscription management) without obstruction.
- Free-trial conversion timing, amount and cancellation deadline are disclosed in advance. (California ARL compliant.)
Refunds, liability & disputes
EU 14-day withdrawal right, Australian Consumer Law guarantees and Korean withdrawal rights apply where required. Service is provided "as is" with liability limited to the extent permitted by law; mandatory consumer rights prevail. Apple is a third-party beneficiary entitled to enforce these Terms; product support and liability rest with us, not Apple.
Community Guidelines & Safety
- Prohibited: minors, sexual exploitation, sex work, harassment, hate, threats, romance scams, spam, impersonation, stolen photos.
- Report and block from any profile or message. We aim to respond to reports within 24 hours.
- Enforcement: warning → restriction → permanent ban; repeat offenders are blocked from re-registering.
- Safety tips: meet in public, beware requests for money or personal data, share your plans with a friend.
Your Privacy Choices
Residents of California and other US states may request that we do not sell or share their personal information and may limit the use of sensitive personal information. Pulse honors Global Privacy Control (GPC) signals. To exercise your choices, use in-app settings or email 【privacy@pulse.app】. Marketing messages are opt-in and can be withdrawn at any time for free (GDPR, CASL, CAN-SPAM, Spam Act).
Contact & Business Information
Representative: Kim Jinwoo
Business registration no.: 603-88-00597
Mail-order sales registration no.: 【to be filed】
Address: 5F-501, 428 Samil-daero, Nagwon Arcade, Jongno-gu, Seoul, Republic of Korea
Support: 【support@pulse.app】
Data Protection Officer: 【name / privacy@pulse.app】
EU representative (GDPR Art. 27): 【to be appointed】
Hosting provider: 【provider】
※ The Korean business-information block is required for the Korean market; confirm the registration number, emails and officer name.