Consumer Health Data Privacy Policy

1. What health data we collect

• Heart-rate readings taken while you record an answer to a Pulse: each value in beats per minute and the time it was taken.
• Your live heart rate during the recording, and your highest reading.
• Whether any heart rate came through (a "flatline" if none did).
• What the App works out from those readings: your biggest jump in heart rate, which question it happened on, and playful verdicts like "nervous", "sus" or "ice cold".
• That a workout session ran. The App starts a short workout while you record so your Apple Watch or AirPods measure heart rate every few seconds, and discards it when you finish.

We don't collect any other health information: no medical history, no other Health data types, and no past workouts.

2. Where it comes from

Only from Apple Health on your iPhone, which gets it from your Apple Watch, AirPods or other heart-rate sensor, and only after you give the App permission. The App reads heart rate only while you are recording an answer (and, to show a reading straight away, your most recent one from the past few minutes).

3. Why we collect it

For one purpose: to show your heart rate on the video of your answer, live and afterwards, which is how the game works. We also use it to fix problems with that feature.

We don't use it for advertising, sell it, send it to analytics, use it for medical or research purposes, or use it to make any decision about you. The verdicts the App shows are entertainment, not a medical reading or a lie detector.

4. Who we share it with

Showing your heart rate to the person who sent you the Pulse is the point of the game, so when you record an answer with heart rate on, your data goes to:

• The person who sent you the Pulse. They see your heart rate live while you record (in the App, on their Lock Screen and in the Dynamic Island), your highest reading on their Home Screen widget, and the full recording afterwards. Anyone who can see their screen can see it too.
• Your friends, only if you pin that Pulse to your profile.
• People you or the sender share a copy with. A saved or shared video has the heart rate burned into it, with a short summary at the end. The sender can only save or share a copy after you approve.
• The public, only if you are 18 or older and submit that Pulse as a Featured Pulse, and we post it on our TikTok, Instagram or YouTube accounts.

And to the companies that run the App for us, which process data only on our instructions:

• Google (Firebase and Google Cloud): stores the Pulse and its heart-rate readings, and runs the server code that sends live updates. Our server logs can include heart-rate values and are deleted after 30 days.
• Apple: delivers the live updates to the sender's Lock Screen through its push notification service.

We don't have any affiliates. We don't sell health data, and we would ask for your separate consent before sharing it with anyone not listed here.

5. How long we keep it

Heart-rate data is stored with its Pulse, and is deleted when either person deletes that Pulse or their account. Server logs containing heart-rate values are deleted after 30 days. A Featured Pulse you submitted is kept as described in the Privacy Policy. Readings your device saved in Apple Health are controlled by you in the Health app, not by us.

6. Your choices

• Don't give permission. You can play without heart rate. Your answers are then recorded as a "flatline".
• Withdraw permission any time in iPhone Settings → Privacy & Security → Health → Truth or Pulse. Nothing new is collected after that.
• Delete a Pulse in the App to delete its video and heart-rate data for both people.
• Revoke permission to save or share a Pulse you answered. This stops new copies. It can't recall copies already made.
• Delete your account in the App (Settings → Danger Zone → Delete Account) to delete all of it.

7. Your rights

You have the right to:

• confirm whether we hold your health data, and get a copy of it;
• get a list of every company and person we have shared or sold it to (we have sold it to nobody), with contact details;
• withdraw your consent to us collecting and sharing it;
• have it deleted, including by the companies that process it for us.

To use any of these rights, email privacy@truthorpulse.com from any address and tell us the phone number on your account. We'll confirm the request comes from you, for example by asking for a code sent to that number, and reply within 45 days. If we need longer, we'll tell you why, and it won't be more than another 45 days. It's free, up to twice a year.

If we say no

You can appeal by replying to our answer with "Appeal" in the subject line. We'll give you a written decision, with our reasons, within 45 days. If you're still unhappy and you live in Washington, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint. Elsewhere, you can contact your local privacy or consumer protection authority.

8. Changes

If we want to collect, use or share heart-rate data in a way this page doesn't describe, we'll ask for your consent first.

9. Contact

privacy@truthorpulse.com