Privacy Policy

Last updated: October 2026

1. Scope

This policy describes how Pulse Inc. ("Pulse", "we", "us") collects, uses, and protects information when a club and its members use the Pulse platform. By using Pulse, you agree to the practices described here.

2. Information we collect

Account information (name, email, password) for club owners and co-managers; member records a club chooses to store in Pulse (name, contact info, belt/skill level, attendance, membership status); payment information processed through Stripe (Pulse never stores full card numbers); and basic usage data (pages visited, actions taken) to keep the product working and improve it.

3. How we use information

To provide and operate the service, process payments, send transactional emails (invitations, receipts, password resets), respond to support requests, and improve Pulse based on how it's actually used. We do not sell personal information to third parties, and we do not use member data for advertising.

4. Controller vs. processor

For member data entered by a club, the club is the data controller and decides what is collected and why; Pulse acts as a data processor, storing and processing that data only as instructed by the club and only to operate the service. Requests about a specific member's data (access, correction, deletion) should go to that member's club in the first instance; Pulse supports clubs in fulfilling those requests.

5. Third-party service providers & cross-border transfers

Pulse relies on a small number of trusted providers to operate: Supabase (database hosting), Stripe (payment processing), and Resend (transactional email delivery). These providers may process or store data outside Quebec, including in the United States. Where that occurs, we rely on each provider's own contractual and security safeguards, consistent with Quebec's Law 25 requirements for data transferred outside the province.

6. Data security

Each club's data is isolated at the database level — one club cannot access another club's members, payments, or records, even though all clubs share the same application. Data is encrypted in transit and at rest. No system is perfectly secure, and we cannot guarantee absolute security.

7. Data breach notification

If we become aware of a confidentiality incident involving personal information that poses a risk of serious injury, we will notify affected clubs and, where required by law, the Commission d'accès à l'information du Québec and affected individuals, as required under Law 25.

8. Data retention

Club and member data is retained for as long as the club's account is active. If a club closes its account, data is deleted or anonymized within a reasonable period, except where retention is required by law (e.g. payment records for tax purposes).

9. Minors' data

Many clubs on Pulse serve members under the age of majority. It is each club's responsibility, as the data controller, to obtain any legally required parental or guardian consent before entering a minor's information into Pulse. Pulse does not independently collect data from minors outside of what a club enters on their behalf.

10. Your rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us or your club. Quebec residents have specific rights under Law 25, including the right to request de-indexing and the right to data portability; contact us to exercise them.

11. Cookies

Pulse uses essential cookies to keep you signed in and remember your preferences (like language). We do not use third-party advertising or tracking cookies.

12. Changes to this policy & contact

We may update this policy as Pulse evolves. Significant changes will be communicated to club owners. Questions about this policy, or about exercising your rights, can be sent to support@pulse-club.app.