The short version
- Pulse turns your product details into TikTok carousels and learns from the results you share.
- We collect what you give us (account, project details, uploads, post links and chats) plus usage analytics from Mixpanel and Google Analytics.
- We never connect to your TikTok account, never see your card details and never sell your data.
- The AI providers we use can't train their models on your content.
- You can get a copy of your data or delete it anytime by emailing [email protected].
1. Who we are
Pulse is operated by Eshed Yaacov, trading as funApps, based in Israel ("Pulse", "we", "us"). We are the controller of the personal data described in this policy, meaning we decide why and how it is used.
This policy covers the Pulse website at pulse-ai.studio, the Pulse web app and the Pulse API (together, the "Service"). It does not cover TikTok, App Store Connect or other services you use alongside Pulse; their own privacy policies apply there.
You can reach us at [email protected] or +972 53-932-5990.
2. Information we collect
We collect what you give us to run your marketing loop, plus basic usage data. We never connect to your TikTok account, and we never see your full payment card details.
| Category | Examples | Source |
|---|---|---|
| Account details | Email address; name and profile photo if you sign in with Google; a temporary anonymous ID before you sign up; login and session identifiers | You, Google |
| Project details | Product name, app or website URL, description, niche, competitors, target audience, your founder story, settings and onboarding answers | You |
| Content | Carousels, slide images, captions and other copy Pulse generates; your edits; your chats with the Pulse agent | You, Pulse |
| Results | TikTok post links you add; screenshots you upload, such as TikTok analytics or App Store Connect; numbers you type in | You |
| Public post metrics | Public views, likes, comments and shares for the TikTok links you add | Virlo, our research provider |
| API data | API keys (stored only as hashes), API requests, and data you send through the API, such as attribution answers collected in your own app | You |
| Billing details | Plan, subscription status, credit balance, country and order IDs; Paddle handles your payment details | Paddle |
| Usage and device data | Pages viewed, features used, clicks, referring site, browser and device type, approximate location (city and country), cookie identifiers | Mixpanel, Google Analytics |
| Security and log data | IP address, browser signals used for bot protection, timestamps and error logs | Our servers, Cloudflare |
| Support messages | Emails, calls or messages you send us, and our replies | You |
What you have to give us. You are not legally required to give us any personal data. We need an email address or Google account to create your account; without one you can't save work or buy a plan. Everything else is optional, though Pulse learns less without it.
Information about other people. Our niche research shows public TikTok posts by other creators, such as their captions, hooks and view counts. We use this public information only to analyze what performs in your niche. Screenshots can show more than numbers, so please crop out details we don't need and don't upload sensitive information such as health or financial data.
3. How we use information
We use your information to run Pulse for you, keep it secure and improve it. We don't sell it, and we don't use it for advertising.
| Purpose | Information used | Legal basis (EEA and UK) |
|---|---|---|
| Create your account and sign you in | Account details | Contract |
| Research your niche, generate carousels, read your results, plan your next batch and answer your chats | Project details, content, results, public post metrics | Contract |
| Bill you and manage plans and credits | Billing details | Contract; legal obligation for tax records |
| Send account emails, such as sign-up confirmation, receipts and important changes | Email address | Contract |
| Send product news and tips | Email address | Consent where required; you can unsubscribe anytime |
| Measure and improve Pulse | Usage and device data | Consent for analytics cookies where required; otherwise legitimate interests |
| Improve Pulse's recommendations with aggregated, de-identified results, such as which hook types tend to perform | Results and content, de-identified | Legitimate interests |
| Prevent abuse, fraud and security incidents, and enforce our Terms | Security and log data, account details | Legitimate interests |
| Answer support requests | Support messages | Contract; legitimate interests |
| Meet legal obligations and handle legal claims | What the matter requires | Legal obligation; legitimate interests |
AI processing. Pulse sends your project details, content, uploads and chats to the AI models you choose, from Anthropic and Google, to generate and analyze content. These providers process it under API terms that don't let them train their models on it. We don't train AI models on your content either.
Consent. Where the law bases processing on consent, including Israel's Protection of Privacy Law, you give it when you create an account after reading this policy. You can withdraw it by deleting your account or contacting us; this doesn't affect processing that already happened.
Legitimate interests. Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (see section 9). Pulse's AI decides which content to suggest, but it never makes decisions about you with legal or similarly significant effects.
4. Cookies and analytics
We use cookies and similar technologies, such as local storage, to keep you signed in, block bots and understand how Pulse is used. Only the analytics cookies are optional.
| Tool | Why we use it | What it collects | Optional |
|---|---|---|---|
| Pulse sign-in (Supabase) | Keeps you signed in | Session token | No, the Service needs it |
| Cloudflare Turnstile | Blocks bots at sign-up | IP address and browser signals | No, needed for security |
| Paddle checkout | Processes payments and prevents fraud | Checkout and fraud-prevention data | No, needed to buy a plan |
| Mixpanel | Shows which features people use and where they get stuck | Events, device and browser type, approximate location, your account ID once you sign in | Yes |
| Google Analytics | Shows where visitors come from and which pages they view | Pages, events, device and browser type, approximate location | Yes |
Mixpanel uses your IP address to estimate your city and country, then discards it. Google Analytics doesn't log or store IP addresses. Mixpanel's cookie lasts up to 1 year and Google Analytics' cookies up to 2 years.
We don't use advertising cookies, and we keep Google Analytics' advertising features, such as Google Signals, turned off.
Your choices. Where the law requires consent, including in the EEA, UK and Switzerland, Mixpanel and Google Analytics load only after you accept analytics cookies. You can change your choice anytime under Cookie settings in the site footer. You can also block cookies in your browser or install Google's opt-out add-on; blocking sign-in cookies will sign you out.
5. Who we share information with
We share personal data only with the providers that help us run Pulse, and each gets only what it needs. We don't sell personal data or share it for targeted advertising.
| Provider | What they do for Pulse |
|---|---|
| Supabase | Database, sign-in and file storage |
| Vercel | Hosts the website and web app |
| [Fly.io or Railway] | Hosts the Pulse API |
| Trigger.dev | Runs background jobs, such as generating carousels |
| Anthropic | Claude AI models for writing, analysis, chat and reading screenshots |
| Gemini AI models for text and images, Sign in with Google, and Google Analytics | |
| Virlo | Niche research and public metrics for the TikTok links you add |
| Paddle | Checkout, payments, invoicing and sales tax, as our merchant of record |
| Resend | Account emails, such as sign-up confirmations |
| Cloudflare | Bot protection at sign-up |
| Mixpanel | Product analytics |
These providers act on our instructions under contracts that limit how they use your data. Two also act on their own behalf: Paddle, which sells plans to you as our reseller and handles payment data under its own privacy notice, and Google, for the Google account you sign in with.
We also share information with:
- Professional advisers, such as lawyers and accountants, when we need their help.
- Authorities and others when the law requires it, or to protect rights, safety or property, or to prevent fraud.
- A buyer or successor if Pulse is sold, merged or transferred. We'll tell you before your data becomes subject to a different privacy policy.
- Anyone you direct us to, such as the tools or AI agents you connect to the Pulse API.
We may publish aggregated, de-identified insights, such as "list-style hooks earned more saves this month", that can't identify you or your product.
6. International transfers
We are based in Israel, and our providers store and process data in other countries, mainly the United States and the European Union. The European Commission recognizes Israel as providing adequate protection for personal data, so data can move from the EU to us without extra safeguards.
When personal data from the EEA, UK or Switzerland goes to a country without such a decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where needed) or the recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
For transfers from Israel, we rely on our providers' written commitments to protect the data, as Israeli regulations require. You can ask us for a copy of the relevant safeguards.
7. How long we keep information
We keep your data while your account is active and delete it within 30 days after you delete your account, except for the records below.
| Information | How long we keep it |
|---|---|
| Account, project details, content, results, uploads and chats | Until you delete them or your account, then up to 30 days |
| Onboarding answers from visitors who never sign up | Up to 30 days |
| Billing and tax records | As long as tax and accounting laws require, generally 7 years |
| Support messages | Up to 2 years after our last exchange |
| Mixpanel event data | Up to 2 years; profile data linked to your account is deleted when you delete your account |
| Google Analytics data | Up to 14 months |
| Server and security logs | Up to 90 days |
| Backups | Up to 30 days, after which deleted data is gone from backups too |
| Aggregated, de-identified insights | Indefinitely, since they don't identify anyone |
We may keep information longer when the law requires it, or to resolve a dispute or enforce our Terms.
8. How we protect information
We protect your data with encryption in transit and at rest, API keys stored only as hashes, and database rules that keep each account's data separate. Only Pulse's operator has administrative access, protected by multi-factor authentication.
No system is perfectly secure. If a breach affects your personal data, we'll notify you and the relevant authorities as the law requires.
9. Your rights
Wherever you live, you can ask us to access, correct, export or delete your personal data, and we'll do it unless the law requires or allows us to keep something. You can delete projects in the app, ask us to delete your account at any time, and unsubscribe from marketing emails using the link in any of them.
- EEA, UK and Switzerland. You can also restrict or object to our processing, including processing based on legitimate interests, receive your data in a portable format, and withdraw consent at any time. You can complain to your local data protection authority, though we'd appreciate the chance to help first.
- Israel. You can inspect your personal data and ask us to correct or delete data that is wrong, incomplete, unclear or out of date. You can also ask to be removed from any marketing list, and complain to the Privacy Protection Authority.
- United States. Depending on your state, you may have rights to know, access, correct and delete your personal data, and to opt out of its sale or use for targeted advertising. We do neither, we won't treat you differently for using your rights, and you can appeal our decision by replying to it.
How to make a request. Email [email protected] from your account's email address. We'll reply within 30 days, may need to verify your identity, and won't charge you. If a request is complex, we may need up to two more months and will tell you why.
If an app sent us your answer. Some apps ask their users which Pulse-made post they saw and send the answer to us through our API. That app's developer controls that data, so contact them first; we'll help them handle your request.
10. Children
Pulse is for people 18 and older. We don't knowingly collect personal data from anyone younger; if you believe a child has given us data, email us and we'll delete it.
11. Changes to this policy
We'll post any changes here and update the date at the top. If a change is significant, we'll email you or notify you in the app at least 14 days before it takes effect.
12. Contact us
Pulse is operated by Eshed Yaacov, trading as funApps, based in Israel.
- Email: [email protected]
- Phone: +972 53-932-5990