Privacy Policy

Last updated: September 30, 2026

Pulse is a tap-to-share product. When you use the app, website, or a Pulse object, we collect account, link, object, tap, and (when someone saves a pulse) receiver information. We may use that information to run and improve the service, for support, security, moderation, analytics, research, legal compliance, and other business purposes, and we may share it as described below.

This policy describes how Pulse (Smokey Enterprises LLC) (“we”, “us”) collects, uses, and shares information when you use the Pulse mobile apps, pulserouter.com, related tap and save pages, and the shop.

Contact

For privacy questions or requests (including access, correction, or deletion): [email protected]. You may also use pulserouter.com/delete-account.

Information we collect

We collect information you provide, information created by using the service, and information we receive from vendors. This includes:

  • Account and profile: login email; display name; username; avatar; phone number; contact email (used on pass-through pages and vCards, separate from login email); company name and company logo; role / job title; device ID; referral code and who referred you; theme and other profile settings; verification status if we mark an account verified.
  • Sign-in: if you use Apple, Google, or email magic links / passwords, we receive identifiers and related account data those providers send us (for example email and name).
  • Links and modes: labels, destination URLs (including Drive, LinkedIn, Venmo, payments, and any other URL you add), mode type, icons, colors, tap behavior, and custom images you upload for a mode. We store those destinations in full.
  • Pulse objects: NFC UIDs, nicknames, claim status, type, generation, color, material, finish, size, and how the object is configured to route (including a locked mode, if set).
  • Tap events: time of the tap, which object and which mode / link was involved, tap behavior and outcome, and approximate location (city, region, country) derived from IP address via our host’s request headers. Unclaimed objects may generate a simpler tap record (object and time).
  • Receivers (people who tap or save a pulse): if someone saves a pulse, we may store their email and/or phone, an access token, open counts and timestamps, and a snapshot of the sender’s profile plus the link or profile payload at save time. Recipients who only open a destination may still generate a tap event with approximate location.
  • Shop and site: Shopify checkout and order information when you buy products (name, email, shipping address, payment status, and related order data, processed by Shopify; those order and customer records usually cannot be deleted). Emails submitted on Coming Soon / concept votes and idea forms. Votes and freeform ideas. Cart and similar cookies needed to run the shop.
  • Support and reports: emails you send us; reports of custom logos and destination URLs (reporter when signed in, reported account/mode, URL, reason).
  • Device media: photos you choose from the library or camera for avatars and custom logos.
  • Automatically collected on the website: Vercel Analytics page views and related usage metrics; standard server logs and IP-derived geo used for taps as described above.

How we may use information

We may access, review, and use links, account data, object data, tap data, receiver data, shop data, and other information described here to:

  • Operate and provide the service (accounts, routing, save-for-later, shop, referrals).
  • Improve the product, including analytics, research, and debugging.
  • Provide support and communicate with you about your account or orders.
  • Handle security, fraud, abuse, phishing, malware, and other moderation.
  • Comply with law and enforce our terms.
  • Pursue other legitimate business purposes related to Pulse.

We may use aggregated or de-identified data for any purpose.

How we may share information

We may share information with:

  • Service providers that help us run Pulse, including Supabase (auth, database, file storage), Vercel (hosting, tap geo headers, web analytics), Shopify (shop and checkout), Resend (transactional email such as magic links and claim mail), and Apple or Google when you sign in with them. Shopify may use its own payment processors.
  • Business partners when needed to operate or promote the service.
  • Parties to a business transaction, such as a merger, acquisition, or sale of assets.
  • Others when we believe disclosure is required by law, regulation, or legal process, or to protect the rights, property, or safety of Pulse, our users, or the public.

Recipients who tap your object are sent to the destination URL you configured. That third party then handles their visit under its own policies.

Receivers

If you tap a Pulse object or save a pulse without creating a full account, this policy still applies to the information we collect about that interaction. We may use and share it as described above, including to show the sender that a tap occurred, to let you open a saved pulse later, and for security and analytics.

Retention

We may retain information for as long as needed for the purposes in this policy or as required by law. We may change retention practices over time.

Your rights and requests

Depending on where you live, you may have the right to request access to personal information, a copy of it, correction, deletion, and information about how we use and share it. California residents may also have rights under the CCPA/CPRA, including to know, delete, and correct personal information, to opt out of sale or sharing of personal information, to limit use of sensitive personal information, and to not be discriminated against for exercising these rights. If you are in the EEA, UK, or a similar jurisdiction, you may also have GDPR rights to restriction, portability, objection, and to lodge a complaint with a supervisory authority.

To make a request, email [email protected]. We may need to verify your identity (for example, that you control the account email). You may delete your Pulse account from Settings in the app or at pulserouter.com/delete-account after signing in. That flow unlinks Pulse objects so they can be claimed again, and removes account data we store in our systems as implemented today. Shopify orders and customer records usually cannot be deleted. If you cannot sign in, email the address above.

Children

Pulse is intended for users 13 and older. If we learn we have information from a child under 13, we may delete it and take other steps we consider appropriate.

Security

We use administrative, technical, and organizational measures designed to protect information. Transmission and storage can fail or be compromised.

Changes

We may update this policy. We will post the new version on this page and update the “Last updated” date above.