Privacy Policy
PulseDeck shows a gym class's live heart rate on a screen in the room. This page explains what we store, why, and how to get rid of it.
Who this covers
Two different groups of people, with different data:
- Gym staff — owners and trainers who sign in to run classes.
- Athletes — people whose heart rate appears on the board. Athletes do not have accounts and never sign in.
What we collect from gym staff
- Name and email address, from Google or Apple when you sign in. We never receive your password. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
- Which gyms you belong to and whether you're an owner or trainer.
- Sign-in sessions — a session identifier and the browser or device description, so you stay signed in and can be signed out.
What we collect from athletes
- A display name, entered by the gym — usually a first name.
- Heart rate readings during a class, sent from a watch, plus the heart rate zone and calorie estimate we derive from them.
- Optional profile details the gym enters to make those numbers accurate: age, maximum heart rate, weight, sex.
What we don't do
- No advertising, and no ad tracking or advertising identifiers.
- No selling or renting personal data to anyone.
- We add no analytics or advertising SDKs of our own to the iPhone app.
- The app does include Google's Cast SDK (to find and connect to your TV) and Google Sign-In (to sign you in). Both send their own diagnostic and usage information to Google as part of operating, which we neither control nor receive. Google's handling of it is covered by Google's privacy policy.
Who we share it with
Only the service providers needed to run PulseDeck: Cloudflare (hosting and database), Google and Apple (sign-in, and in Google's case the Cast SDK that talks to your TV), Stripe (subscription billing — card details go straight to Stripe and never reach us), and Resend (sending email such as class summaries). Each gym's data is visible only to that gym's own owners and trainers.
We do not send heart rate or any athlete data to Google, Apple or any advertiser. The Cast SDK receives the gym's board address so the TV knows what to display, nothing more.
Casting to a TV
When you cast a board to a Chromecast, the board's web page runs on the TV and connects directly to us. Google receives the fact that a cast happened, as it would for any Cast-enabled app. Heart rate data is not sent to Google.
How long we keep it
Class data is kept while the gym's account is active, so trainers can look back at past classes. Sign-in sessions expire on their own. Deleting an account or a gym removes the associated data as described below.
Deleting your data
- In the iPhone app: Delete account, on the main screen.
- On the web: the dashboard settings page.
Deleting your account removes your user record, your sign-in sessions and your gym memberships. If you are the only owner of a gym, deleting your account also deletes that gym — its athletes, paired watches and class history — and the app asks you to confirm that explicitly first. Backups are overwritten on a rolling basis within 30 days.
Children
PulseDeck is sold to gyms and is not directed at children under 13. Gyms are responsible for having permission for anyone whose heart rate they record.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data. Email us and we'll action it.
Contact
Questions, requests, or anything that looks wrong: privacy@pulsedeck.tv