Privacy Policy – PulseLoop

1. Controller

AIX HSG UG (haftungsbeschränkt)
Pfarrer-Gursky-Ring 11, 52499 Baesweiler
Represented by: Holger Jansen, Raimund Engels
E-Mail: apple@aix-hsg.de

2. Principle

The app does not need an account with us. We run no server for it, receive none of your content, and use no analytics, tracking, or advertising tools.

3. What data the app processes

Readings from your ring (heart rate, heart rate variability, blood oxygen, steps, sleep stages, temperature where available), workouts with routes, meals, tags and notes, profile information (e.g. age, height, weight), and coach conversations. Most of this is health data (Art. 9 GDPR). The app processes it based on your explicit consent, which you give by pairing the ring and granting iOS permissions.

4. Storage and Apple Health

Data is stored in a database on your iPhone. If you allow it, the app writes values to Apple Health and reads your profile from there; iOS determines how Health stores and syncs data. Widgets and the Live Activity read a small summary on the same device. Backups you export only leave the device to the destination you choose.

If you delete the app, iOS removes all data it stored locally.

5. Coach and AI providers

By default the coach uses Apple's on-device language model; no data is transmitted. With your separate consent it can use Apple Private Cloud Compute; according to Apple, data is processed there only for the request and not stored.

If you configure another provider with your own API key in settings (e.g. OpenAI, Google Gemini, OpenRouter, MiniMax, or your own OpenAI-compatible server), the app sends your question and the necessary excerpts of your data to that provider. This happens on your behalf and under your agreement with that provider; some of these providers process data outside the EU. We receive nothing. Your key is stored in the device keychain.

6. Other services

Weather and location (optional): if you enable it for the coach, the app determines your approximate location once (city level) and fetches the weather for it via Apple WeatherKit. Food: for meal logging, the app queries Open Food Facts (France) with the barcode or your search term. Coach web search: only if you configured a provider with search; that provider then performs the search.

7. Permissions

Bluetooth: connecting to the ring. Health: reading and writing values. Location: workout routes and – optionally – weather for the coach. Camera: photos of meals or labels for the coach and barcode scanning. Local network: only for a self-hosted AI server. Notifications: reminders and weekly report.

8. Downloads, purchases, and crash reports via Apple

The app is distributed through Apple's App Store. Apple processes data such as your Apple Account and purchase receipts under its own responsibility and privacy policy. In-app purchases are handled entirely by Apple — we receive no payment data, only the anonymous confirmation that a purchase is valid, and only on your device.

If you have enabled "Share with App Developers" in your device settings, Apple provides us with anonymized crash and usage statistics. You control this yourself in system settings.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Where data only exists on your device, you exercise these rights directly in the app or by deleting the app. You may withdraw any consent at any time with effect for the future.

You may lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. Changes

If a new version of the app processes data differently, we update this policy beforehand. The current version is always available at this address.