pulse — privacy policy

Last updated: May 27, 2026

This policy describes how Pulse — a macOS app developed by Utropia (José Antonio Neto Suárez, sole proprietor, Spain) — handles information about your typing. It is specific to Pulse and supplements the general Utropia Privacy Policy.

1. Summary

Pulse is designed to be local-first. The content of what you type is never recorded, stored, or transmitted. Aggregated typing metrics (speed, accuracy, time, app/keyboard/layout breakdowns) live on your Mac and stay there unless you explicitly opt into the optional features described below.

2. Data controller

The data controller is Utropia (José Antonio Neto Suárez), based in Spain. Contact details are at the end of this document.

3. What Pulse observes on your Mac

To compute typing metrics Pulse requests the macOS Input Monitoring permission. While running, Pulse observes:

• Keyboard events (key down/up timing). Pulse never records the characters you type as text. Events are processed in memory and reduced to counters and timing intervals.
• The name of the frontmost application and (when available) its window title, used to attribute typing to apps and to detect URLs for filtering. This information is stored locally only.
• The active keyboard layout and connected keyboard hardware, used to attribute typing to layouts/keyboards.

Pulse does not capture passwords, messages, document contents, clipboard data, or any other text content. The Input Monitoring permission is used solely to derive the aggregate metrics described in this policy.

4. Data stored on your device

All of the following lives only on your Mac, inside the app's sandboxed container:

• Typing sessions (start/end time, keystroke counts, words, accuracy, dominant character/script).
• Per-app, per-keyboard and per-layout aggregates.
• Personal records, streaks, daily/weekly summaries.
• Practice-mode results.
• App preferences and filters.

This data is not transmitted to Utropia or any third party. You can erase it at any time from Settings → General → Reset All Statistics, or by uninstalling Pulse.

5. Data transmitted off your device

Pulse only sends data off your Mac in the following situations:

5.1 In-app purchases and subscriptions

When you purchase Pulse Premium or manage a subscription, your purchase is processed by Apple through the App Store. Pulse uses RevenueCat as a subprocessor to validate receipts and track entitlement state. RevenueCat receives an anonymous app user ID generated for your installation and the App Store transaction metadata. It does not receive your name, email, or typing data.

5.2 Global Leaderboard (optional, opt-in)

Pulse offers an opt-in Global Leaderboard. It is off by default. If you join it, Pulse generates a pseudonymous UUID on your device and submits, at most once per day, the following fields:

• The anonymous UUID generated on your device.
• Sustained typing speed (WPM), accuracy, sustained minutes for the day.
• Keystroke count.
• Dominant input language (e.g. en, es).
• Split between code / writing / chat / other apps, expressed as four percentages.
• Current daily streak.
• Your timezone offset.
• Pulse app version.
• Optional share handle, if you choose to display one.

Never sent: app names, window titles, file names, or anything you typed. Submissions are hosted by Utropia on infrastructure located in the European Union.

You can stop submissions at any time from Settings → General and erase every row your UUID ever sent with Delete my leaderboard data.

6. Subprocessors and third parties

• Apple Inc. — App Store delivery and purchase processing. See Apple's Privacy Policy.
• RevenueCat, Inc. — subscription management and receipt validation. See their Privacy Policy.
• Utropia — hosts the optional Global Leaderboard backend in the EU.

7. Legal basis and retention (EEA/UK)

Where the GDPR applies, processing is based on: performance of a contract (delivering the app you bought), legitimate interests (security, fraud prevention, abuse prevention on the leaderboard), and your consent (for the optional Global Leaderboard).

• Local data is kept until you reset stats or uninstall.
• Leaderboard submissions are kept while your UUID is active and for up to 90 days after the last submission; explicit deletion is immediate.
• Purchase and subscription records are kept by Apple and RevenueCat per their own retention policies and applicable tax/accounting law.

8. Your rights

You can access, rectify, erase, restrict or object to processing, and request data portability. The fastest path:

• Settings → General → Export Data (CSV) exports your full local session history.
• Settings → General → Reset All Statistics wipes local statistics.
• Settings → General → Delete my leaderboard data removes every row your UUID ever submitted.
• For anything else, contact us at the address below. EEA residents may also lodge a complaint with their local supervisory authority (in Spain, the AEPD).

9. Children

Pulse is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has used Pulse and submitted data to the optional leaderboard, contact us and we will delete it.

10. International transfers

The Global Leaderboard backend is hosted in the EU. Apple and RevenueCat may transfer purchase-related data to the United States and other countries under their own Standard Contractual Clauses or equivalent safeguards.

11. Security

Pulse runs inside the macOS App Sandbox. Local data lives in the app's container. Leaderboard submissions are sent over HTTPS. No system is perfectly secure; please report any issue to the contact address.

12. Changes

If we materially change this policy we will post the new version on this page and update the "last updated" date. The version of Pulse you installed will continue to behave the same; you can review the new policy and uninstall if you disagree.

13. Contact

This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Apple's App Store Review Guidelines.