Privacy Policy

01Who we are and scope

Impulse Health for iOS is operated by THE WORLD'S PHENOMENON PTE. LTD. (“we”, “us” or “our”). We are responsible for the personal information described in this policy. Contact us at the email in section 15 for privacy questions and requests.

This policy covers the iOS app and related support communications. It does not cover an Android version or independently operated third-party websites. These document pages contain no analytics scripts, advertising scripts or cookies; the website hosting service may still receive ordinary access logs, such as IP address, requested page and time.

02Camera and health records

With camera permission, the app uses the rear camera and flash to analyze changes in light through your fingertip and estimate heart rate and related wellness indicators. Camera frames are processed in memory on your device for this purpose; the measurement feature does not save a camera video or upload those frames to our servers.

Saved heart rate, heart rate variability (HRV), derived wellness indicators, measurement dates and times, and manually entered blood pressure and oxygen saturation records are stored in the app’s local database. The current iOS app does not offer cloud synchronization of this measurement history and does not read from or write to Apple Health / HealthKit.

These records can reveal health information. We do not send your camera frames or numerical heart rate, blood pressure or oxygen saturation records to advertising SDKs for ad targeting. Information you choose to include in a support message is handled as described in section 6.

03Profile and service identity

You may enter sex, age, height, weight and preferred measurement units. These details are used to personalize app displays and wellness calculations. When you save your profile through the app’s profile service, these fields are submitted to our server and associated with your service identity.

The app can automatically register or sign in a device-based service identity, even without an email/password account. Requests include an app-generated device identifier, authentication information, device model, iOS version, app version, language, request time and service/channel identifiers. They support authentication, profile management, service availability and membership functions.

Profile selection events, including selected age and sex, are also sent to Firebase Analytics. Therefore, not all profile information remains exclusively on your device.

04Usage, diagnostics and advertising

The app and its service providers process app interactions, viewed screens or article categories/titles, measurement-flow events, subscription interactions, ad impressions/clicks and ad revenue events. Technical data may include IP address, approximate location inferred from IP, device or installation identifiers, language, system/app versions, crash information and performance diagnostics.

Google AdMob provides advertising; Firebase Analytics and Crashlytics support usage analysis and reliability; AppsFlyer supports installation attribution, purchase/ad-event measurement and campaign performance analysis. The IDFA advertising identifier is available only when permitted by iOS tracking authorization. Refusing tracking does not stop all network requests, diagnostics or processing of identifiers limited to the app or developer.

The current app does not request precise GPS location. Service providers may infer a general area from your IP address.

05Purchases and membership

Apple processes App Store payments. The app processes product identifiers, transaction or receipt information, subscription status, entitlement dates and restoration results to provide paid features. Membership redemption may involve a redemption code and the associated service identity. Purchase and revenue events may be sent to the analytics/attribution providers described above.

We do not receive your full payment card number or Apple Account password from Apple. Apple handles its payment and account information under its own privacy policy.

06Feedback and communications

When you submit in-app feedback, we receive the feedback category, message and any contact email you choose to provide, together with the service request information described above. When you email us, we receive your email address, message, attachments and the correspondence needed to investigate and respond.

Include only information needed to explain the problem. Please redact unrelated health details, payment card details, passwords and other people’s information from screenshots or attachments. We use your contact information to handle your request and related follow-up, not to enroll you in a marketing mailing list.

07Purposes and legal grounds

We process information to provide measurements and records, manage profiles and paid access, respond to support requests, maintain security, diagnose failures, understand feature use and measure advertising performance.

Where data protection law requires a legal basis, we rely on providing the service you request, compliance with legal obligations, or legitimate interests in maintaining a secure and reliable service where those interests do not override your rights. We rely on consent where required for tracking, optional analytics, or processing sensitive health information. Where explicit or separate consent is required, it must be obtained through the relevant process; reading this policy or accepting the terms does not replace it. You may withdraw consent for future processing without affecting processing that was lawful before withdrawal.

08Recipients and third-party services

• Our hosting and support providers: process service requests, submitted profiles and support communications on our behalf.
• Google / Firebase: receive the usage, diagnostic and advertising data relevant to Firebase Analytics, Crashlytics and AdMob, including the profile events disclosed in section 3.
• AppsFlyer: receives attribution identifiers, technical information and installation, purchase and ad-related events.
• Apple: processes App Store transactions and platform services you use.

We require providers acting on our behalf to protect personal information consistently with this policy and applicable requirements and to limit its use to the agreed services. Some providers also act independently for their own platform services; their policies explain those activities. Advertising-related disclosures can qualify as “sale”, “sharing” or targeted advertising under some laws, even without monetary payment. See section 11 for your choices.

We may also disclose information when necessary to comply with law, protect rights or security, or complete a corporate transaction subject to appropriate safeguards and notice where required.

Provider privacy information:

• Firebase privacy and security
• Google Privacy Policy
• AppsFlyer Services Privacy Policy
• Apple Privacy Policy

09Permissions and choices on iOS

• Camera: enables fingertip measurements. Turn it off in iOS Settings → Privacy & Security → Camera. Camera measurement will then be unavailable.
• Tracking: manage permission in Settings → Privacy & Security → Tracking. Turning it off restricts cross-app tracking and access to IDFA under Apple’s rules; it does not necessarily remove ads.
• Notifications: if you enable reminders, manage permission in Settings → Notifications → Impulse. Turning it off stops permitted notifications.

Settings labels may differ by iOS version and language. You can edit profile information in the app. For privacy choices without an in-app control, contact us using section 15; iOS tracking permission is not a universal analytics opt-out.

10Storage, retention and deletion

Measurement history remains in the local app storage until it is removed. Deleting the app through iOS normally removes that local app data; “Offload App” preserves documents and data. Device backups are managed separately under your Apple/device settings. Reinstalling does not guarantee that your history will return.

Uninstalling does not automatically delete server-side profiles, support messages, provider records or identifiers stored in the iOS Keychain, and does not cancel an Apple subscription. Contact us to request deletion of information held by us.

We retain server-side information only for as long as needed for the stated purpose: service identity and profiles while needed to provide the service; support messages while needed to resolve and document the issue; transaction or security records while required for legal obligations, fraud prevention or disputes. Retention depends on the data type, purpose and applicable obligations; provider records and backups have their own retention cycles. Information no longer needed is deleted or anonymized. We explain any lawful exception when responding to a deletion request.

11Your privacy rights

Depending on where you live, you may have rights to access or obtain a copy of information, correct it, delete it, restrict or object to processing, withdraw consent, request portability, or opt out of sale/sharing or targeted advertising. Where applicable, you may use an authorized agent, appeal our decision and complain to your local data protection authority. We do not discriminate against you for exercising a protected privacy right.

Email us with “iOS Privacy Request” and describe your request. We may ask for proportionate information to verify your identity and locate the relevant service record; never send a password or full payment card number. We respond within the period required by applicable law and explain any limitations or permitted extension. We cannot remotely retrieve or delete records that exist only on your device, or reverse an independently operated provider’s processing without the relevant provider process.

12Security and international processing

We use reasonable technical and organizational safeguards appropriate to the information and risks, including access controls and authenticated service requests. No storage or transmission method is completely secure. Protect your device with a passcode and keep iOS and the app updated.

Our service providers operate internationally, so information may be processed outside your country, where privacy laws may differ. Where required, cross-border processing must use appropriate safeguards, such as legally required contractual protections or other permitted mechanisms, and any required separate consent. Contact us for information about recipients, processing locations and safeguards applicable to your request.

13Children and age requirements

The app is not directed to children under 16. If local law requires a higher minimum age or guardian authorization, those requirements also apply. We do not knowingly collect children’s information in violation of applicable law. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate deletion or restriction measures.

14Changes to this policy

We may update this policy as features, providers or legal requirements change. The date at the top identifies the current version. For material changes, we provide appropriate notice and obtain new consent where required before carrying out processing that requires it. The English and Simplified Chinese versions are intended to have the same meaning; contact us if you notice a discrepancy.

15Contact for privacy requests

Responsible operator: THE WORLD'S PHENOMENON PTE. LTD.
App: Impulse Health for iOS

Please use the same address for privacy questions, access/correction/deletion requests, consent withdrawal and privacy complaints.