1. Introduction
This Privacy Policy explains how AirPulse processes information when you use the AirPulse iOS app, its Live Activity on the Lock Screen and in the Dynamic Island, optional Pro features, purchase or restore flows, feedback flows, iCloud backup features, shortcuts, and the AirPulse website
AirPulse primarily processes app data on the device. The provider does not operate a custom user-account system or a developer-operated backend for uploading app data in the current implementation
2. Controller
The controller responsible for processing personal data in connection with AirPulse is:
- Legal name: Christian Range
- Address: Paulusstraße 19, 53227 Bonn, Germany
- Contact email: support@airpulse.me
No data protection officer has been appointed because no appointment is currently required for this project
3. Information We Process
Depending on how you use AirPulse and which permissions you grant, the app may process the following categories of information:
- Health and workout data: heart rate values, timestamps, recent heart rate history, derived statistics, zones, trends, insight summaries, an optional date of birth read from Apple Health to calculate the current age for age-based heart rate zones, and optional manual age values entered for the same calculations. AirPulse reads the date of birth when an age is needed. The app does not save the date of birth or the age calculated from it to iCloud, the session database, or session backups. A manually entered age remains a separate iCloud-synced setting. AirPulse does not save AirPulse sessions as workouts in Apple Fitness or contribute to Apple Fitness rings. AirPulse does not read, calculate, display, or store calorie or active-energy values, including in Apple Health. AirPulse processes this data for the app features you choose to use and does not use it for advertising
- Location data: current location, whitelist or blacklist evaluation data, optional session location history points, map selections, address search results, reverse-geocoded place labels, and location preview snapshots for saved places. With Save Battery turned off, AirPulse may process location updates in the background during an active session to support active-session behavior across foreground and background transitions as permitted by iOS. Location history points are stored only when Pro is active and location history is enabled for the current session tag. In that case, timestamped latitude and longitude points, and optionally altitude or horizontal accuracy, are stored locally with the session data. If iCloud is available for your Apple Account, they may also be included in the iCloud backup copy. A saved location filter contains the place name, latitude, longitude, and configured radius
- Device and connectivity information: supported Bluetooth audio device names and identifiers, active audio route state, technical tracking state such as whether tracking is active, paused, blocked, or stopped, and Live Activity or shortcut state needed to display or control an active session
- Settings, tags, and preferences: theme, language, low power mode preference, notification preferences, onboarding completion, configured device names, location filter mode, saved entries, custom tags, tag categories, colors, favorites, activity levels, heart rate zone profiles, audio feedback profiles, and shared values used for the Live Activity, shortcuts, and iCloud-synced settings
- Purchase, entitlement, and support purchase information: App Store product identifiers, transaction states exposed by Apple StoreKit, locally cached entitlement status such as plan type, expiry date, lifetime purchase flags, early-user status, or purchase source, and information needed to show available products, complete or restore a purchase, and cache the result locally
- Feedback, ratings, and support contact: information you choose to provide when you rate the app, open an App Store review flow, contact support by email, or open an optional external feedback form. AirPulse does not automatically attach health, location, or session data to feedback
From app version 1.1.2, you can export selected completed sessions as three CSV files. These contain session IDs and times, available heart rate readings from Apple Health with timestamps, sample UUIDs, device names and models, saved location points with timestamps and available altitude or accuracy values, and the tags and heart rate zone settings used for those sessions. The files are created locally and shared through the iOS share sheet with the destination you choose
4. Website Data, Cookies, and Local Storage
The AirPulse website is a static website hosted on a virtual server provided by netcup GmbH. The website does not intentionally use analytics, advertising pixels, tracking SDKs, or cookies. For purposes of German end-device privacy rules, including § 25 TDDDG, no non-essential tracking access is intentionally used
The website may store the following browser preferences in localStorage when you use the corresponding controls:
- selected language;
- selected light or dark theme
This storage is used only to remember your visible website preference. You can remove it through your browser settings
During a language change, sessionStorage temporarily holds the destination page, menu and page scroll positions, and a timestamp to restore an open mobile menu. The next page reads and removes the entry. If navigation is interrupted, the entry remains until replaced, read, or cleared by you or your browser
When you access the website, the server processes technical connection information, including your IP address, the requested URL, HTTP headers, and timestamps, to deliver the requested content. netcup GmbH provides the hosting infrastructure. We do not keep access logs of website requests
From app version 1.1.2, AirPulse can retrieve public current-issue notices in your selected app language from airpulse.me. Automatic checks are enabled by default and can be turned off in the app; manual checks remain available. Your preference, cached notices, and the IDs of notices you hide are stored locally
From app version 1.1.2, tutorial videos in the app are streamed from airpulse.me in your selected app language when you tap a video button. The app does not download videos automatically or keep a persistent video cache. The player temporarily buffers data for playback
Notice and video requests use the technical connection information described above. AirPulse does not send health, location, session data, or a user or device identifier with these requests
5. How We Use Information
We use information processed by AirPulse to:
- display current and recent heart rate information in the app;
- operate pulse tracking through Apple's workout and HealthKit frameworks;
- support background behavior permitted by iOS;
- show information in the Live Activity on the Lock Screen and in the Dynamic Island;
- let you configure supported audio devices;
- let you configure location-based tracking rules;
- process background location updates during an active session when Save Battery is turned off;
- record optional location histories only while Pro is active and a tag with location history enabled is assigned;
- search for, label, and preview saved places;
- calculate session statistics, daily summaries, insights, heart rate zones, and graph views;
- provide optional audio feedback based on heart rate zones and personal limits;
- unlock, restore, cache, or display optional Pro entitlements and support purchases;
- create, upload, restore, export, or import session backups through iCloud when iCloud is available;
- prepare CSV exports of selected completed sessions and share them with your chosen destination;
- store your app settings, tags, profiles, and preferences;
- retrieve current-issue notices in the selected app language;
- deliver tutorial videos you choose to play;
- send optional local notifications; and
- support feedback, rating, and support contact flows you choose to open
6. Legal Bases
Where the GDPR, UK GDPR, or similar privacy laws apply, processing may be based on one or more of the following legal bases:
- performance of a contract, or steps taken at your request, for core app functionality and optional purchases you choose to use;
- consent, where permission-based access is required, including for location access, notifications, HealthKit access, and optional external feedback forms;
- explicit consent, where required by law for health-related data processed through HealthKit or similar health-data contexts;
- legitimate interests in maintaining app stability, reliability, fraud prevention, and website delivery, to the extent permitted by law;
- compliance with legal obligations, where applicable
You may withdraw consent-based permissions at any time through iOS settings, Health settings, notification settings, or the relevant app setting. Withdrawal does not affect processing that already took place before withdrawal
For current-issue requests, we rely on our legitimate interest under Article 6(1)(f) GDPR in informing you about problems that affect app functionality. The request is limited to the selected language and technical connection information needed to retrieve the public notices
For tutorial video requests, we rely on our legitimate interest under Article 6(1)(f) GDPR in providing instructions for using the app. Videos are requested only when you choose to play them
7. Where Information Is Stored
AirPulse stores information locally on the device, including through:
- SharedPreferences, UserDefaults, or an App Group container shared between app components where needed;
- iCloud key-value storage for selected settings that are intended to sync across your Apple devices;
- Keychain storage for selected entitlement or app-state flags where needed;
- the local session database for sessions, tags, optional session location histories, audio feedback profiles, zone profiles, and related app data;
- iCloud backup storage used for session database backup and restore when iCloud is available for your Apple Account;
- local cache storage for map preview images and public current-issue notices;
- Apple Health / HealthKit storage for heart rate information and the date of birth handled through Apple's frameworks;
- Live Activity state displayed by iOS on the Lock Screen and in the Dynamic Island; and
- local purchase entitlement cache used for optional Pro features
When iCloud is available for your Apple Account, the backup copy is stored through Apple's iCloud infrastructure. Storage, protection, retention, availability, account access, and international processing of that iCloud data are governed by Apple's applicable iCloud terms, Apple's Privacy Policy, and Apple's iCloud data security practices. The provider of AirPulse does not operate the iCloud infrastructure and does not control how Apple stores or protects data in iCloud
9. Retention
AirPulse keeps locally stored information for as long as it remains necessary for the relevant app feature, unless you delete it, overwrite it, clear it, or remove the app
- App settings, including automatic notice checks and hidden-notice IDs, remain stored until changed or removed
- Saved devices, tags, profiles, and location filters remain stored until you delete them
- Session data and session location histories remain stored until the related session data is deleted, imported over, or the app is removed
- Cached entitlement data may remain stored until it changes, expires, is restored, or is cleared in the app
- Cached map preview images may remain in cache until removed by the app
- Cached current-issue notices remain on your device until replaced or cleared by the app or operating system
- iCloud backups remain available until overwritten, deleted, unavailable, or removed through Apple/iCloud mechanisms
- Local website preferences remain in browser localStorage until cleared by you or your browser
HealthKit heart rate records and the date of birth remain in Apple's Health data environment and are subject to the way Apple manages such data. AirPulse does not retain a copy of the date of birth or the age calculated from it
AirPulse removes temporary export files when sharing finishes or you cancel, or if preparing or sharing the export fails. Files left by an interrupted app run are cleaned up on the next app start. Copies you save or share remain with the chosen destination until deleted there. The original records in Apple Health are unaffected
10. Your Choices and Rights
Depending on your jurisdiction, you may have rights such as the right to access, correct, erase, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent and the right to lodge a complaint with a supervisory authority
For users in North Rhine-Westphalia, Germany, the competent supervisory authority may be the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). You may also contact any other competent data protection supervisory authority
You can also control certain processing directly by:
- granting or revoking Health, location, and notification permissions in iOS settings;
- changing or deleting saved location filters;
- enabling or disabling location history on individual session tags;
- deleting sessions, tags, profiles, or backups where the app offers deletion controls;
- removing configured devices;
- changing app settings;
- clearing website localStorage in your browser;
- stopping use of the app and deleting it from your device
11. Required or Optional Data
Providing personal data to AirPulse is generally voluntary. However, some app functions cannot work without the relevant permission or data. For example, heart rate display requires HealthKit access, location filters and optional session routes require location access, location access may also affect active-session background behavior and Live Activity availability when Save Battery is turned off, purchase features require StoreKit, and iCloud backup features require iCloud availability through your Apple Account. Access to the date of birth is optional. If it is unavailable, AirPulse keeps the manual age or uses its defined default for age-based zones
12. Automated Decision-Making
AirPulse does not use automated decision-making within the meaning of Article 22 GDPR and does not use profiling for advertising. The app may calculate technical and health-related summaries such as zones, trends, averages, graphs, and insights for display to you
13. Security
AirPulse uses on-device storage and Apple's platform frameworks for the functions described in this Privacy Policy. While reasonable technical and organizational measures should be taken to protect personal data, no security measure can guarantee absolute protection
This Privacy Policy does not make any representation about specific certifications, encryption standards, or formal security controls unless such measures are separately implemented and documented
14. International Data Transfers
AirPulse does not currently include a developer-operated backend for transferring app data to the provider's own remote systems
If Apple, netcup GmbH, Google, email providers, or other services process data in connection with HealthKit, maps, iCloud, StoreKit, Live Activities, shortcuts, website hosting and video streaming, feedback, or notifications, such processing and any international transfers are subject to their applicable terms and policies
15. Children
AirPulse is not directed to children under 13. The App Store may show a regional age rating. If you believe a child has provided personal data directly to the provider, please contact us
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the app, the website, applicable law, or operational requirements. The updated version should be published with a revised effective date
17. Contact
For privacy-related questions, please contact:
- Legal name: Christian Range
- Address: Paulusstraße 19, 53227 Bonn, Germany
- Contact email: support@airpulse.me
Related documents: see the Terms of Use and the Imprint