Privacy Policy
Last updated: August 19, 2026
1. About this policy
This Privacy Policy explains how PulseUp ("PulseUp", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use our mobile application and website (together, the "Service"). By using the Service, you acknowledge the practices described in this Privacy Policy. Where required by applicable law, we will obtain your consent before processing information that requires consent.
2. Account information
When you create a PulseUp account directly, we may collect your name, email address, username, profile photo, and password, stored in hashed form.
3. Google Sign-In
If you choose to sign in with Google, Google may provide us with your name, email address, profile picture, and a unique account identifier necessary to create and authenticate your PulseUp account. We do not receive your Google password and do not access other Google services on your behalf unless separately authorized by you. You can review or revoke PulseUp's access through your Google Account settings.
4. Sign in with Apple
If you choose to sign in with Apple, Apple may provide us with your name, when available and authorized, and your email address or an Apple private relay email address if you choose to hide your email. We do not receive your Apple ID password.
5. Fitness and activity data
When you use PulseUp fitness features, we may collect and process information related to your activities, including: workouts and exercises; sets, repetitions, weights, duration, and other workout metrics; cardio sessions; distance, pace, speed, duration, and elevation; training history; streaks, XP, achievements, and other gamification data; activity information generated during live-tracked sessions; and route information associated with supported outdoor activities.
6. Route and location data
When you activate a feature that requires location, such as Live Cardio, PulseUp may collect precise location information during that activity. Depending on the feature and permissions granted, route information may include latitude and longitude, the timestamp associated with route points, distance, speed, altitude or elevation, route geometry, and other technical information necessary to calculate activity metrics. PulseUp collects location for these purposes only when the relevant feature is active and does not continuously track your location outside an active feature that requires location.
7. Apple HealthKit and connected health data
If you choose to connect Apple HealthKit or another supported fitness or wearable service and grant the requested permissions, PulseUp may access only the categories of health and fitness information that you authorize and that are required for the features you use. Depending on your permissions and the available integrations, this may include workouts, heart rate, active energy, distance, exercise duration, body measurements, and other authorized fitness or health metrics. Health and fitness information obtained through connected services is used to provide and improve the fitness functionality you request. We do not sell health information or use HealthKit data for advertising, advertising measurement, or other purposes unrelated to providing the requested fitness functionality.
8. Pulse AI
When you use Pulse AI, we collect the messages and information you provide to the assistant. Depending on the feature you use, Pulse AI may also process relevant fitness information needed to generate personalized responses, such as workout history, exercise information, cardio performance, training metrics, body measurements, nutrition-related information provided by you, and other information you explicitly provide within the relevant workspace.
9. Social content
If you choose to use PulseUp's social features, we may collect and store posts and Moments, photos and other media, reactions, comments, Crew memberships, Party Workout participation, and other content and interactions you choose to share.
10. Device and usage information
We may automatically collect technical and usage information, including device model, operating system, app version, IP address, crash information, diagnostics, performance information, analytics events, and information about how you interact with the Service. We may use analytics technologies, such as Google Analytics or other supported analytics services, to understand how the Service is used and to improve its functionality.
11. How we use your information
We use information we collect to: create and maintain your PulseUp account; provide, operate, and maintain the Service; record and display your workouts and activities; calculate fitness metrics such as distance, pace, speed, duration, and elevation; track training history, streaks, XP, achievements, and other gamification features; provide Live Cardio and other activity-tracking functionality; personalize your fitness experience and recommendations; generate responses, workout plans, and nutrition-related plans through Pulse AI where applicable; provide social and community features; detect, prevent, and investigate fraud, abuse, security incidents, and technical problems; monitor performance and improve the Service; understand aggregated and de-identified fitness activity trends; comply with applicable legal obligations; communicate with you about your account, the Service, security, updates, and other service-related matters; and send marketing communications where permitted by applicable law and, where required, with your consent or subject to an available opt-out mechanism.
12. Activity and training pattern analysis
PulseUp may analyze information generated during your workouts to provide personalized fitness functionality. For example, we may use your activity history to understand patterns such as typical workout duration, training frequency, activity type, running or cycling performance, distance and pace trends, frequently used workout routes, changes in training performance over time, and training consistency. This analysis is focused on your fitness activity and is intended to improve your experience, provide useful insights, and support personalized fitness features. PulseUp does not continuously monitor your behavior or location outside the activities and features for which you have enabled the relevant functionality.
13. Aggregated activity data and heatmaps
PulseUp may create aggregated and de-identified insights from activity and route information generated by multiple users. These insights may include general information such as areas with higher concentrations of outdoor activity, popular activity types in a region, general activity volume, activity trends over time, general peak activity periods, and changes in activity levels across geographic areas. PulseUp may use these aggregated insights for internal analytics, product development, service improvement, and business intelligence. Heatmaps and similar visualizations are designed to represent aggregated activity rather than individual users. PulseUp will not intentionally display an individual user's identity, account information, or individual route as part of an aggregated activity heatmap. Where appropriate, PulseUp may apply aggregation or minimum-activity thresholds before displaying geographic activity information to reduce the risk that an individual user can be identified from the visualization.
14. Location data
Certain PulseUp features require precise location information. When you activate Live Cardio or another location-based activity feature, PulseUp may use your device's location services to record your route and calculate activity metrics such as distance, pace, speed, and elevation. Location collection is limited to the period and functionality for which the relevant feature is active. You can disable location permissions through your device settings. If you do so, features that require location may no longer function correctly. PulseUp does not use location services to continuously track your movements outside an active feature that requires location.
15. How we share information
We do not sell your personal information. We may disclose information to the following categories of recipients when necessary to operate the Service, fulfill the purposes described in this Privacy Policy, or comply with applicable law: service providers that process information on our behalf, including providers for cloud hosting and infrastructure, authentication, analytics, crash reporting, artificial intelligence services, storage and media delivery, security and fraud prevention, and other technical services required to operate PulseUp (examples may include Google Cloud, Firebase, Google Sign-In, Sign in with Apple, Google Analytics, and Anthropic, depending on the specific feature and implementation); our Pulse AI providers, since relevant information may be processed by our artificial intelligence service providers to generate the requested responses or plans -- for example, Anthropic may process Pulse AI messages and relevant information provided to the coach or nutritionist functionality for the purpose of generating responses, and we do not provide health or fitness information to AI providers for advertising purposes; other users, since information and content that you intentionally share through PulseUp's social features may be visible to other users according to the visibility settings and functionality of the Service; recipients required by law, since we may disclose information when reasonably necessary to comply with applicable laws or legal processes, respond to valid legal requests, protect the rights, safety, and property of PulseUp, our users, or others, or detect or prevent fraud, abuse, or security threats; and a successor entity, since information may be transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable law.
16. Health and fitness data restrictions
We treat health and fitness information with particular care. Health information obtained through HealthKit or other connected services is used only for purposes permitted by the applicable platform, your permissions, and applicable law. PulseUp does not sell health information. We do not use HealthKit data for advertising, targeted advertising, advertising measurement, or data brokerage. We do not use health information obtained through HealthKit to build advertising profiles about you.
17. Data retention
We retain information for as long as reasonably necessary to provide the Service, maintain your account, provide your requested features, comply with legal obligations, resolve disputes, enforce agreements, and protect the security of the Service. Activity and route information may be retained as part of your workout history while your account remains active so that you can access historical activity, performance metrics, routes, and related features. We may retain aggregated and appropriately de-identified information for longer periods where it is no longer reasonably associated with an identifiable individual and is used for legitimate analytics, product improvement, or business intelligence purposes. Retention periods may vary depending on the type of information and the purpose for which it is processed.
18. Account deletion and data deletion
You can request deletion of your PulseUp account through Settings → Account → Delete Account. When you delete your account, we will initiate the deletion or de-identification of information associated with your account, subject to information that we are required or legally permitted to retain. This may include certain records necessary for legal compliance, security, fraud prevention, dispute resolution, enforcement of agreements, and operational integrity. Where activity or route information has already been transformed into aggregated and de-identified statistics that cannot reasonably be associated with you, those aggregated statistics may continue to be retained. You may contact us at privacy@pulseup.io to request additional information regarding deletion or remaining data.
19. Data security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction. These measures may include access controls, authentication mechanisms, encryption where appropriate, secure infrastructure, monitoring, and other security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
20. Your privacy rights
Depending on where you live and applicable law, including Brazil's LGPD, the European Union's GDPR, the United Kingdom's applicable data protection laws, or applicable United States privacy laws, you may have rights concerning your personal information, including the right to access your personal information, correct inaccurate information, request deletion, request data portability or export, object to or restrict certain processing, withdraw consent where processing is based on consent, request information about how your information is processed, and lodge a complaint with the applicable data protection authority. You can manage certain information and permissions directly through the PulseUp app. You can also contact us at privacy@pulseup.io. We may need to verify your identity before completing certain requests.
21. Children's privacy
PulseUp is not directed to children under 13 years of age, or the minimum age required in the applicable jurisdiction. We do not knowingly collect personal information from children below the applicable minimum age. If you believe that a child has provided personal information to PulseUp, please contact us at privacy@pulseup.io so that we can investigate and take appropriate action.
22. International data transfers
PulseUp and its service providers may process and store information in countries other than the country where you live. For example, certain service providers may operate infrastructure in the United States or other countries. Where required by applicable law, we take appropriate measures to provide an adequate level of protection for personal information transferred internationally.
23. Cookies and similar technologies
Our website and certain parts of the Service may use cookies, SDKs, analytics technologies, and similar technologies to maintain functionality, understand usage, improve performance, and, where applicable and permitted, support communications and marketing. Where required by applicable law, we will request the necessary consent before using non-essential technologies.
24. Third-party services
The Service may integrate with or rely on third-party services, including authentication providers, health and fitness platforms, cloud infrastructure providers, analytics providers, artificial intelligence providers, and other technology providers. Your use of a third-party service may also be subject to that provider's own privacy policy and terms. Examples include Google, Apple, Firebase, Google Cloud, Google Analytics, and Anthropic. We encourage you to review the privacy practices of third-party services that you choose to connect to PulseUp.
25. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, technology, or applicable legal requirements. When we make material changes, we may notify you through the Service, by email, or through another appropriate method where required. The "Last updated" date at the beginning of this Privacy Policy indicates when the policy was most recently revised.
26. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us at privacy@pulseup.io. We will make reasonable efforts to respond to privacy-related requests in accordance with applicable law.