Privacy Policy

This policy describes what information PulseForm collects across the PulseForm iOS app and the PulseForm Web Portal, how that information is stored, and the controls available to you. PulseForm is a training and simulation platform for medical instruction — it is not for clinical or diagnostic use, and it is not directed at children.

Accounts and sign-in

PulseForm uses Firebase Authentication (a Google Cloud service) and supported identity providers for sign-in. The PulseForm iOS app and the Portal support Sign in with Apple, Google Sign-In, email and password, and phone number (SMS) sign-in, with optional multi-factor verification where it is enabled. Depending on the sign-in method, authentication information is processed by Firebase Authentication and the applicable identity provider. PulseForm does not receive your Apple or Google account password. Email/password and phone authentication are handled through Firebase Authentication. PulseForm stores the identity information your sign-in method provides — a stable account ID, and an email address, phone number or display name where one is supplied.

Training content and Performance History

Lanes (training scenarios you author), Vitals Presets, and folders are stored locally on your device by default. Completed training sessions ("LaneRuns") and their Timeline event records are also local-only by default.

If you turn on Performance History (also called Platform Participation in-app), completed LaneRuns and their Timeline events are additionally saved to a private, per-user location in Cloud Firestore. This data is scoped to your account — Firestore Security Rules restrict it to you alone, and PulseForm does not analyze, aggregate, or share it.

Separately, if you turn on Cloud Sync (Optional Cloud Backup), your authored Lanes, Vitals Presets, and folders are backed up to a private, per-user location in Cloud Firestore so they can be restored on another device. This is a separate setting from Performance History — turning one on does not turn on the other.

Organization and Small Group data

If you join a PulseForm Organization (for example, through the Small Group Tracker, or "SG Tracker"), your role, small-group assignment, and related roster fields are stored in Cloud Firestore, scoped to that organization. This data is visible to that organization's administrators and instructors as needed to run the program, and is managed through the PulseForm Portal.

What PulseForm does not collect

PulseForm does not use analytics, advertising, or crash-reporting SDKs of any kind, and does not sell or share your data with advertisers or data brokers. The only outside services involved are described below.

Notifications and purchases

If you allow push notifications in the PulseForm iOS app, PulseForm stores a device notification token for your account so that notifications can be delivered to your device; you can turn notifications off in iOS Settings. If you buy a subscription or Founding Supporter access through the App Store, Apple processes the payment and PulseForm receives the purchase and entitlement status for your account — never your payment card details.

How data is stored and secured

Cloud data is stored in Cloud Firestore (Google Cloud infrastructure) under the same Firebase project used for authentication. Firestore Security Rules enforce that your private training records are readable only by you, and that organization data is readable only by members of that organization with the appropriate role.

Data retention

PulseForm does not automatically delete or expire your data on a schedule. Local data remains on your device until you remove it or uninstall the app. Cloud data you have opted into remains stored until you remove it yourself in-app, or until you delete your account — see Account Deletion for exactly what each control does, including which records are retained after an account is deleted.

Your choices and controls

• Turn off Performance History at any time — this stops future syncing; records already saved to Firestore are not deleted by this action alone.
• Turn off Cloud Sync at any time — this stops future backups; a backup already saved to Firestore is not deleted by this action alone.
• Delete a single completed training record from Command's Recent Runs.
• Delete your Cloud Backup entirely.
• Sign out, which ends your session on that device only.
• Delete your account in the iOS app (Account settings → Delete Account) — see Account Deletion.

Third-party services

PulseForm relies on: Firebase (Google) for authentication, cloud data storage and push-notification delivery; Apple for Sign in with Apple and App Store purchases; and Google for Google Sign-In. Each provider's own privacy policy governs the identity data it passes to PulseForm during sign-in.

Children's privacy

PulseForm is built for licensed and trainee medical personnel and is not directed at, or knowingly used by, children.

Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a revised "Last updated" date.

Contact

Questions about this policy or your data can be sent to support@pulseformsystems.com.