PulseGuard Privacy Notice
Last updated: 2 September 2026
PulseGuard lets you confirm you are okay each day, and tells the people you choose if a day goes by without it. It can also hold instructions for the people you trust, released only if your account falls silent — some people use it for that alone and never check in at all. This notice explains what we hold, why, and who else ever sees it.
Who we are
PulseGuard is operated by JY Bodega Enterprise, of 23, Desa Pahlawan, Jalan Ampang, 55000, Malaysia. For anything in this notice, including a request to see or delete your data, write to pulseguard.care@gmail.com.
What we hold, and why
| What | Why |
|---|---|
| Your email address | It is how you sign in, and where reminders and alerts are sent. |
| Your name | So the app can greet you, and so an invitation can say who it is from. |
| Your timezone and chosen check-in times | So "you are late" means late where you are, not in London. |
| Each check-in, and when you last opened the app | This is the whole product: the absence of these is what raises an alert. |
| Names, emails, phone numbers and relationships of your Care Circle | So we can invite them, and contact them if you go quiet. |
| What you write in your Legacy Vault | To hold it until you ask for it, or the release conditions below are met. |
| Recorded video messages | Same. |
| Notes about where credentials are kept | Stored encrypted. See below. |
| A push subscription for each device you turn notifications on for | So a reminder can reach the device you are holding. |
| Subscription and payment status | To know what your plan allows. We never see your card. |
About other people's details
When you add someone to your Care Circle you give us their contact details. We use them only to invite that person and to contact them about you. They are told who added them, and nobody joins your Care Circle until they accept. If they decline, or you remove them, we stop contacting them.
Credentials in the vault
PulseGuard asks you to record where things are kept, not the passwords themselves, and the app says so on the vault screen. Anything you do store in the credential field is encrypted before it is saved, and revealing it requires you to confirm each time. Revealing a credential is recorded.
Credentials are excluded from any Legacy Vault release. One approval must never hand over every password somebody ever stored.
When your Care Circle sees more than "they are okay"
Normally the people watching you see only whether you have checked in.
Your written instructions and recorded messages are released to them only when all of the following are true:
- your account has been silent for the period you chose (one month to a year), and
- nobody marked you safe when we asked, and
- a further period of silence passed after that, and
- a PulseGuard administrator reviewed it and approved the release.
Any activity on your account — a check-in, opening the app, editing the vault — stops a release automatically, and you are told that it was stopped. A release cannot be requested by anyone in your Care Circle.
Who else processes your data
| Who | What they handle | Where |
|---|---|---|
| Supabase | Database, sign-in, and file storage | Singapore (ap-southeast-1) |
| Resend | Sends our emails | United States |
| Stripe | Payments. Stripe holds your card details; we do not. | United States |
| Cloudflare | Serves the app | Global |
| Google, Mozilla, Apple push services | Deliver notifications to your device | Varies |
Notification contents are encrypted so that the push service itself cannot read them.
How long we keep it
While your account exists. Removing someone from your Care Circle marks them removed rather than erasing them, so the record of who was told about you stays accurate — that history is part of a safety net being trustworthy.
Ask us to delete your account and we will remove your profile, check-ins, vault, recordings and Care Circle within 30 days.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to pulseguard.care@gmail.com. Under Malaysia's Personal Data Protection Act 2010 you may also complain to the Personal Data Protection Commissioner.
Younger users
PulseGuard is for people aged 13 and over. Someone living with an illness at 15 has the same reason to want a trusted person to know they are alright as someone at 75, and we would rather not shut them out.
If you are under 18, please make sure a parent or guardian knows you are using PulseGuard. The people you add to your Care Circle will be told when you stop checking in, so they should be people you and your family are happy to involve.
We hold nothing extra because of your age. We do not ask your date of birth, we do not track your location, we show no advertising to anyone, and we use no analytics or tracking services at all — so there is nothing about a younger user that we treat differently, and nothing about them that we pass to anyone else.
We do not knowingly hold information about anyone under 13. If you believe a child under 13 has an account, write to pulseguard.care@gmail.com and we will delete it.
Changes
If we change this notice in a way that affects what we do with your data, we will tell you in the app before it takes effect.