Privacy Policy
Draft for owner and legal review — not legal advice. Last updated: 2 November 2026.
Who we are
Pulse is a fitness app run by its owner, Faicel Achiri (the "controller" under UK GDPR). Contact: Achiri@live.fr.
What we collect
- Account: your email address and login details. If you sign in with Google or Lovable, we receive your email and basic profile from that provider. Passwords are stored only in hashed form by our login service.
- Workouts: workout names, dates, durations, exercises, sets, reps, weights and rest times you log.
- Saved programmes: plans and AI Coach programmes you save.
- Body measurements: weight, body fat %, and waist, chest, hips, arm and thigh measurements you enter. This is health-related information; we use it only to show your progress.
- AI Coach: the goals, level, equipment, days and session length you enter, plus your last 8 logged workouts, are sent to generate your programme. We record the date you used the Coach to enforce the daily limit.
- On your device only: language choice, Coach form choices, calculator inputs (age, height, weight, sex, activity, goal) and a copy of saved programmes for offline use. These stay in your browser.
- Treadmill / heart-rate (optional): if you connect a Bluetooth device, live readings are shown on screen and are not stored.
- Technical: our hosting may record basic error reports and request logs to keep the app working.
Why we use it (lawful basis)
To provide the app you asked for (contract), and, for body measurements, based on your explicit consent when you choose to enter them. You can stop entering them or delete them at any time.
Who processes it
- Lovable Cloud — hosting, login and database.
- Lovable AI Gateway and its AI model provider — to generate Coach programmes. Requests are sent with storage turned off on our side.
- YouTube (privacy-enhanced mode) — exercise demo videos are played from YouTube, which may set its own cookies when you play a video.
- Google — only if you choose Google sign-in.
Owner review needed before launch: confirm the server locations and international transfer safeguards for the providers above and update this section. We do not sell your data or use it for advertising.
How long we keep it
We keep your data while you have an account. When you delete your account, your login, workouts, saved programmes, body measurements and Coach usage records are deleted immediately. Data stored on your device is cleared on that device when you delete; remove it from other devices by clearing site data.
Your rights
You can access, correct, export or delete your data, and object to or restrict its use. Delete everything at any time from Account → Delete my account in the app. You can complain to the UK Information Commissioner's Office (ico.org.uk).
Children
Pulse is only for adults aged 18 or over. You must confirm you are 18+ to create an account. If we learn an account belongs to someone under 18, we will delete it.
Contact
For privacy requests or questions, email Achiri@live.fr.