Where your data goes
- Moods, diaries, running routes and chats are primarily stored on your device. The app does not provide its own cloud diary sync.
- AI is optional. Only after explicit consent does necessary request content go through the developer's backend to DeepSeek.
- Online services process necessary device verification, subscription and allowance data. They do not upload your entire journal.
- The current app does not upload product usage analytics. This website has no advertising, analytics scripts or tracking cookies set by us; the hosting platform may process access logs.
Introduction
Pulse Diary (心跳日记, “we”) respects your personal information. This policy explains how information is collected, used, stored and protected. AI transmission requires separate, explicit consent in the app. Declining AI does not prevent local recording.
Information handled by the app
Content you enter or save
- Mood check-ins, notes and calendar records.
- Diary entries.
- Runs, including distance, duration, post-run mood, notes and routes.
- Chats, diary drafts and summaries generated from chats.
- Long-term memories you add and local context derived from moods, diaries or runs.
- Profile and companion settings, such as nickname, age, gender and chosen avatars.
- Reminder times and backup or restore settings.
Optional system permissions
Photo avatars, saving mood cards, voice input and reminders may request photo, microphone, speech recognition and notification permissions respectively. Temporary voice audio is used for the current transcription and removed when completed or cancelled. The system speech recognition service processes speech to produce text.
Running maps and live route recording request location permission. Location is used to show your position and save the route locally; the app does not upload raw route coordinates to its server.
Home Screen widgets and paired Apple Watch receive only today's recording status, mood word and expression, and expressions from the last 7 days. They do not receive diary text, notes, routes or nicknames.
App lock uses Face ID, Touch ID or the device passcode. iOS verifies biometrics; we do not receive facial or fingerprint images. App-lock settings do not transfer through diary backups.
How information is used
- To display moods, calendar entries, diaries, runs, weekly reviews, chats and memories.
- To generate AI replies, diary drafts or chat summaries using necessary, authorized context. Mood weekly reviews are calculated locally.
- To schedule optional local reminders.
- To export or import a local backup when you request it.
- To place selected chat or supportive text on the system clipboard when you copy it.
- We do not use your personal information for advertising or commercial monetization.
- The current version does not upload product usage analytics or send diary, chat or mood content for that purpose.
Storage and transmission
- Moods, diaries, runs, chats, memories and settings are primarily stored in the local app sandbox.
- Photo avatars are stored as local image files in Application Support.
- Exported backups contain sensitive content and are not automatically encrypted. Keep them in a trusted location.
- AI request content is sent by HTTPS through the developer-controlled backend to the DeepSeek API. Model API keys are not stored in the app.
The developer's backend does not save diary or chat bodies as records. The upstream model service processes requests under its own terms; we do not claim zero retention by that service.
Sharing
We do not actively share personal information except when necessary for the following purposes:
- Sending necessary content through the secure backend to DeepSeek when you use AI replies, diary drafts or chat summaries.
- System speech recognition when you use voice input.
- With your explicit consent.
- Where required by applicable law.
Security and device verification
Data transmission uses TLS/SSL and local data is protected by the iOS sandbox. Cleared chats remain on the device for 7 days for recovery. You control exports and are responsible for managing exported files.
Online services use Apple's DeviceCheck and App Attest to verify the device and app installation for authentication, replay prevention and abuse prevention. A key identifier is kept in the device Keychain; the private key is protected by device security hardware. The backend stores the installation key's public key, attestation receipt, replay counter and short-lived challenges.
Verification data does not contain diary or chat bodies and is not sent to DeepSeek. Authorized model context is sent separately according to AI permissions.
Your choices and rights
- Delete or clear local diaries, chats, memories, mood records, runs and imported content in the app.
- Revoke notification, photo, microphone, speech recognition and location permissions in system settings.
- Export your data or import a backup to replace current local data.
- Contact us about how information is handled.
You may request access, copies, correction or deletion of personal information. We will respond according to applicable requirements and coordinate with the AI provider where needed. Turning off AI cannot recall content already sent.
Send a personal information request
Third-party AI service
DeepSeek API provides AI chat, diary drafts and summaries through the developer's HTTPS backend. We aim to send only content necessary for the requested feature. Mood weekly reviews stay local.
Model inputs and outputs are processed under the provider's open-platform terms. We do not promise zero retention by the upstream provider. Read the DeepSeek Open Platform terms.
AI content permissions
Requests are sent only after explicit consent. In More, Privacy & Security, AI content permissions, you can disable AI or separately control optional moods, diary entries, memories and profile context. These optional additions are off by default.
The current message, necessary chat history and companion settings are used for replies; diary drafts and summaries use selected chat content. If memory access is enabled, written running summaries may be included as context; raw GPS route coordinates are not automatically added. Revoking a permission stops future automatic additions but does not recall previous requests. App lock and AI permissions are not transferred in backups.
Pulse Plus
The backend stores purchase identifiers, subscription status and usage to verify subscriptions and calculate allowances; it does not save diary or chat bodies. Apple processes payment, and we do not receive bank card information.
A random device credential is kept in Keychain and is not exported in diary backups. Subscription and usage data are not sent to the AI provider. Monthly and annual auto-renewing subscriptions are available; purchase and restoration require online Apple transaction verification. Deleting the app or local records does not cancel a subscription.
Retention and deletion
You manage local records in the app. The 7-day recovery period for cleared chats is not a server retention period. Exported backups, content shared to other apps and system backups you choose to use are managed by you and the relevant platforms. Check that you have a usable backup before uninstalling.
The backend retains necessary state for device verification, abuse prevention, subscription verification and allowance accounting. Deleting local diary entries does not automatically remove these service records. Contact the privacy-request email for access, correction or deletion. We will explain the scope where active subscriptions, transaction verification or legally required retention apply. Upstream AI retention and processing follow its platform terms; we do not promise a fixed deletion period or zero retention.
Website and support email
GitHub Pages hosts this marketing, support and policy website. The website has no login, advertising, analytics SDK, third-party font requests or tracking cookies set by us. GitHub and its infrastructure may process IP addresses, browser information, request times and visited paths; see the GitHub Privacy Statement. External links, including the App Store, are handled by those services when opened.
When you email support, we receive your address and the issue description, device information or attachments you choose to send. We use them to reply, investigate and handle privacy requests. Please redact personal details and do not send a complete diary, backup, password or payment credentials. You may request correction or deletion of email content using the same address.
Children
The app is not directed at children under 13, and we do not knowingly collect children's information. Parents who believe a child has provided personal information should contact us to request deletion.
Contact
Development and support contact: 卫智超. The App Store lists Shanghai Qishan Cultural Communication Co., Ltd. as seller. For policy questions or personal information requests, email 281916057@qq.com.
Changes
We may update this policy and provide notice in the app when the policy changes. Please review this page periodically. Read the terms or visit support for practical help.