Privacy policy

This Privacy Policy explains how PulseOS (the "app"), published on Google Play by Uppercrust Tradecom LLP ("we", "our", "us"), collects, uses, shares, protects, keeps and deletes your personal and health data. It applies to the PulseOS mobile app and related services.

Developer: Uppercrust Tradecom LLP, MG-108, Siddhatown Madhyamgram, Near APC College, Sodepur Barasat Road, PO: Jugberia, PS: New Barrackpore, District: North 24 Parganas, West Bengal 700110, India.
Contact: contact@uppercrustlabs.com

In short: We use your health data only to show you your own health and wellness insights inside PulseOS. We never sell it, never use it for advertising, and you can delete it at any time.

PulseOS is a wellness app, not a medical device. Please read the medical disclaimer in our Terms of service.

1. Information we collect

Information you give us

  • Account details: your name and email address, used to create and secure your account.
  • Profile details: age or date of birth, biological sex, height and weight, used to calibrate fitness, basal metabolic and recovery baselines.
  • Support messages: anything you send us when you contact us.

Health and fitness data

With your permission, PulseOS collects activity logs, step counts, workout intensity and strain, heart rate, heart rate variability (HRV), physiological stress indicators, and sleep duration and quality.

Data from Google Health Connect and connected devices

If you choose to connect Google Health Connect, a wearable or a fitness tracker, PulseOS reads only the data types you approve on the Health Connect permission screen. These can include steps, exercise sessions, heart rate, heart rate variability and sleep. You can see and change these permissions at any time in the Health Connect app or your phone's settings.

Information collected automatically

  • Device and diagnostics: device model, operating system version, app version and crash logs, used to keep the app stable.
  • Usage information: anonymised information about how features are used, used to improve the app. It is never used for advertising.

Purchases

If you buy a subscription, payment is handled entirely by Google Play. We never see or store your card or bank details. We only receive whether your subscription is active and when it renews.

What we do not collect

We do not collect your precise location, contacts, call logs, SMS messages or advertising ID, and we do not use advertising or tracking services in the app.

2. How we use your information

We use your data only to:

  • Provide health monitoring, physiological stress tracking, sleep analysis and recovery scores.
  • Generate personalised AI wellness insights based on your own baseline metrics.
  • Manage your account and subscription.
  • Keep the app secure, fix errors and improve performance.
  • Send important service updates, security alerts and replies to your support requests.

We do not use your data for advertising, profiling for marketing, credit scoring, insurance decisions or any purpose unrelated to the features you use.

3. Google Health Connect and sensitive health data

  • Data received from Google Health Connect is used only to provide and improve the user-facing health and wellness features of PulseOS that you can see in the app.
  • PulseOS's use and transfer of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
  • We never sell, rent or trade your personal or health data to anyone, including data brokers and advertising networks.
  • Health data is never used for targeted advertising, credit scoring, insurance underwriting, or to train general-purpose AI models.
  • Health data is only transferred to the service providers listed below where this is needed to provide PulseOS features to you, to comply with the law, or as part of a merger or acquisition with your notice.
  • People at Uppercrust Tradecom LLP cannot read your health data unless you ask us to for support, it is needed for security purposes, or the law requires it.

4. Who we share data with

We share data only with service providers who process it on our behalf, under contracts that require them to keep it confidential and secure:

  • Cloud hosting and database provider: stores your account and health data in encrypted form and runs the app's processing.
  • AI processing provider: generates your personalised wellness summaries. Your data is sent without your name or email address and is not used to train the provider's models.
  • Google Play: processes subscription payments.
  • Crash reporting provider: receives technical crash details to help us fix problems.

We may also disclose information if required by a valid court order or law, or to protect the safety of our users. If our business is merged or sold, your data would remain protected by this policy, and we would tell you before it is handled under a different policy.

5. How we protect your data

  • All data is encrypted in transit using TLS/HTTPS and at rest using AES-256 encryption.
  • Access to production systems is limited to authorised staff and protected by role-based access controls.
  • We review our security regularly.

No system is perfectly secure, but we work hard to protect your information and will notify you and the authorities of a data breach where the law requires it.

6. How long we keep your data

We keep your data only while your account is active and for the short periods listed in our Data retention policy. For example, crash logs are kept for up to 90 days, and encrypted backups are purged within 30 days of deletion.

7. Deleting your data

You can delete your account and all associated data at any time, inside the app or by email. Step-by-step instructions, and what is deleted or kept, are on our Delete your account and data page.

8. Your rights

Depending on where you live (including under India's Digital Personal Data Protection Act, 2023, the GDPR and the CCPA), you have the right to:

  • Access and get a copy of your personal and health data.
  • Correct inaccurate information.
  • Withdraw consent for health data syncing at any time, by turning off permissions in Health Connect or your phone's settings. This does not affect processing done before you withdrew consent.
  • Delete your account and data.
  • Complain to us, or to your local data protection authority.

To make a request, email contact@uppercrustlabs.com with the subject "PulseOS privacy request". We respond within 30 days.

9. Children

PulseOS is intended only for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

10. International transfers

Our service providers may store or process data outside India. When they do, we make sure appropriate safeguards are in place to protect it.

11. Changes to this policy

If we make important changes, we will tell you in the app or by email before they take effect. The "Last updated" date at the top shows the latest version.

12. Contact and grievance officer

For privacy questions, requests or complaints, contact our Grievance Officer:

Grievance Officer: Rashmi Chatterjee
Uppercrust Tradecom LLP, MG-108, Siddhatown Madhyamgram, Near APC College, Sodepur Barasat Road, PO: Jugberia, PS: New Barrackpore, District: North 24 Parganas, West Bengal 700110, India
Email: contact@uppercrustlabs.com

See also our Terms of service.