Privacy Policy — Schumann Pulse

Last Updated: October 16, 2026

Schumann Pulse ("the App") is operated by BitForge Pte. Ltd., 10 Anson Road, #20-05, International Plaza, Singapore 079903 ("we", "us"), which decides how your data is used (the controller). This privacy policy explains how we collect, use, and protect your data.

1. Data We Collect

Account Data

• Your account is pseudonymous: no email or phone number is asked for
• Your first name, if you give it — asked once during setup (you can skip it), or shared during an optional Apple or Google sign-in. It's used only to greet you — in the app and in the titles of some notifications (the morning question, Sunday's recap, the morning briefing) — and never goes on a card you share. Change or remove it anytime in Settings → Your Name
• Device identifier — a random ID the app creates on your device, which keeps you in the same account; it's not your Apple advertising ID
• If you choose Sign in with Apple — the identifier Apple gives this app for your Apple ID (we ask Apple for your name and keep only the first name — never your email), and a token from Apple that we keep until you delete your account, only to cancel the sign-in link then. It lets you keep your diary when you change iPhones and use one account on several: signing in on another iPhone adds that iPhone's answers and diary to the same account, and deleting the account removes it for every iPhone
• If you choose Sign in with Google — the stable account identifier in Google's verified sign-in token. A shared first name fills your profile only if it has no name yet. Google may make your email and profile available to its sign-in SDK; our server does not store that email, profile picture, or Google access/refresh tokens. The account identifier lets you keep the same diary across iPhones; a guest diary joins the account only when you sign in from that guest. We never link accounts merely because their email addresses match
• Your subscription, if you buy one — the plan, when it started and when it renews or ends, whether it's a free trial or Apple is retrying a failed payment, and the App Store's transaction ids. Apple takes the payment: we never see your card or your Apple ID

Wellness Data (User-Provided)

• Kept only with your consent. Before your first answer the App asks whether we may keep your answers, your diary and — if you connect it — Apple Health data on our server. We record your answer with its date and the version of the words you agreed to. Without it the App works as a viewer of the resonance and space weather, and nothing about how you feel is stored (see "Legal Bases")
• Check-in logs — how you feel (one tap, 1–5), optional energy, mood and focus ratings (1–5), what you noticed (such as tired, tense or a headache), and optional notes
• Timestamps — when you answered, and whether you answered a reminder or a spike alert, in the app or inside a notification
• Answering blind — if you choose to hide the resonance for a while, the day it comes back, and for each answer whether it was given while the resonance was hidden
• Your day (diary) — for each day you write about: how you slept (one tap, 1–5 — in the app or in the morning notification, with when and where you answered), what was going on (tags you choose, such as Coffee or Exercise, or your own words), and an optional line of text
• Worked out from these — a summary of each of your days (the averages of your answers, with that night's space weather and resonance) and your pattern. They are health data too: kept and deleted with your answers

Health Data (HealthKit, PRO only)

• Sleep duration
• Heart rate variability (HRV)

HealthKit data is only accessed with your explicit permission and is never shared with third parties, used for advertising, or sold.

Schumann Resonance Data

• SR power level at the time of each check-in (automatically recorded)
• This is public environmental data, not personal information

Device Data

• Push notification token (APNs) — for morning briefings, geomagnetic storm alerts (on by default, off in Settings), and the spike, solar flare and solar wind alerts you turn on
• Timezone — for sending notifications at appropriate times
• Notification choices — which alerts are on, the storm alert threshold, and the times of the morning briefing and the morning question

Usage Data (you choose)

• Which setup steps you complete, whether you allowed notifications, which upgrade screens you open and whether a purchase was started, completed or cancelled, how many reminders a day you chose and whether you chose the morning question, which card you shared, from where in the app and to what kind of app (for example "Instagram" or "Messages" — never to whom), where you found the App if you answer that one-time question, when the App asked the system to offer you an App Store rating (and at which moment — never what you rated), and the app version
• Sent only to our own server, linked to your account, deleted with it. It never includes your answers or health data
• You choose during setup and can change it any time in Settings → Privacy → Share Usage Data; when it's off nothing is collected and unsent data is discarded. In the EU, the UK and Switzerland it starts off and is only collected if you turn it on (consent); elsewhere it starts on and you can turn it off (legitimate interest in improving the app)
• Whatever this setting, we also record when we send you a spike alert or a morning briefing — for our own counting, and so your pattern can tell answers given after one (which showed the resonance) from answers given before

Share Links and Website

• schumannpulse.app is a static website hosted on Cloudflare Pages. Fonts and images are served from the website; we do not embed advertising, analytics scripts or social trackers, set application cookies, or run our former page-view and share-link counters on this site.
• Cloudflare processes technical request information, such as IP addresses, requested URLs and browser information, to deliver and protect the website. This processing may occur across its global network. See Cloudflare's Privacy Policy.
• A shared link may include a campaign label in its URL. The website does not associate that label with an app account or send it to our app backend. Avoid putting personal or health information into URLs.
• If you email support, we receive your address and the contents you choose to send, so we can respond. Please do not include passwords or unnecessary health information.

2. How We Use Your Data

• Your pattern — to show, in one sentence with the days it rests on, whether your answers differed when the resonance ran high or low for its hour of the day, and which hours of your day stand out; each comparison is corrected for how many were made
• Your diary — to show your days back to you in History and in your week, and how your answers compared on days with and without each tag, by last night's sleep, on storm days, after spike nights and near the full Moon ("Your days, side by side")
• Streak tracking — to show your logging consistency
• Greeting you — your first name, if you gave it, in the app and in notification titles
• Push notifications — morning briefings, geomagnetic storm alerts and, if you turn them on, spike, solar flare and solar wind alerts (you control these in Settings)
• After a few hard days — when you answer Rough or Low in the app and your answers averaged Low or below on at least 3 of your last 4 days, the App may show a short note with a link to findahelpline.com, a free directory of helplines — at most once a week (we note when it was last shown). It's worked out on our server from your own answers; nothing is sent to anyone, and following the link opens their website
• "Right now", only if you choose it — if you tap "Count Me In" (Pulse, or Settings → Your Data), your latest one-tap answer ("How do you feel right now?") from each 3-hour window, given after you joined, is counted in a total that people see right after their own answer: how many answered (rounded down to tens) and whether most, about half or fewer than half said Good or Great. Nothing else is used — not your scales, notes, diary, Apple Health data or the resonance. To keep anyone from being singled out, only people who joined at least a week ago and answered on at least 3 of the last 30 days are counted, the totals cover the last 3 full hours and change once an hour, and they appear only from 50 people. We keep the moment you joined and which words you agreed to until you leave, withdraw your health-data consent or delete your account; they're in your export and in What We Keep. Turn it off anytime in Settings → Your Data → Count Me In; withdrawing your health-data consent turns it off too. A total already worked out for the current hour still includes you until the hour ends
• Service improvement — counting how many people get through each step of setup and upgrade (usage data above), to make the app easier to use

We do not:

• Sell your data to third parties
• Use your data for advertising
• Share individual health data with anyone (in "Right now" only a rounded total of at least 50 people's answers, in words, and only if you chose to be counted)
• Track your location

Legal Bases (EU, UK, Switzerland)

• Running the App for you — your account (and first name, if you give it), notifications and subscription: performing our agreement with you. Check-ins, the diary and Apple Health data are part of that agreement too, and because they are health data we keep them only with your explicit consent (next point)
• How you feel, your sleep and Apple Health data — your explicit consent (GDPR Art. 9(2)(a)), asked before your first answer and recorded with its date and the version of the words. Withdraw it anytime in Settings → Your Data → Withdraw Consent: your answers, diary and Apple Health data, and the day summaries and pattern worked out from them, are then deleted from our server and your iPhone; your account and any subscription stay
• Usage data — your consent (see Section 1)
• "Right now" — your separate explicit consent (GDPR Art. 9(2)(a)) when you tap "Count Me In", recorded with its date and the version of the words; off until you do, and off again anytime. Seeing the totals doesn't depend on it
• Security, error reports and website delivery — our legitimate interest in running a safe, working service

3. Data Storage & Security

• Your data is stored on our server in the EU (a data centre in Germany, run by Fornex Hosting S.L.); error reports go to Sentry in the United States (Section 5)
• All communication with our server uses HTTPS (TLS 1.2 or later)
• The server that answers the app (api.schumannpulse.app) logs requests with their IP address, for security and to find faults; these logs are capped in size and rotate out, usually within days. The public website is hosted separately by Cloudflare as described in Section 1
• Authentication tokens are stored in iOS Keychain
• Database backups are encrypted (AES-256) and kept for up to 30 days
• We keep a separate private recovery record of deletions, cleared or replaced fields, consent changes and account merges. It contains internal account and record identifiers, the names of affected fields, the local date needed to locate a diary or biometric day, operation order and timestamps, but no answer values, note text, tag contents, email addresses or sign-in tokens. Its purpose is to keep deleted data from being brought back during backup recovery

4. Data Retention

• Account data is retained while your account is active
• Check-in, diary and health data, and what's worked out from it, is retained while your account is active and your consent stands — withdrawing the consent deletes it
• A guest account (not signed in with Apple or Google) that hasn't been used for 18 months is deleted with all its data — unless a subscription is still running. To know this, we note the last day the account was used (once a day at most)
• Usage data (Section 1) is kept for 13 months, then deleted
• Schumann Resonance measurement data is retained for up to 2 years
• You can request deletion of your account and health data at any time (see Section 7); deleted account and health data leaves our encrypted backups within 30 days
• Minimal recovery records described in Section 3 are retained separately after account or health-data deletion. They remain while backups or unresolved recovery operations could bring deleted data back; they are not used for profiling or marketing

5. Third-Party Services

We do not use third-party analytics SDKs, advertising networks, or social media trackers. Usage data (Section 1) is collected by us and stays on our servers.

6. Children's Privacy

The App does not knowingly collect data from children under 13. It is not directed at children.

7. Your Rights (GDPR / CCPA)

You have the right to:

• Access your data — in the app: Settings → Your Data → What We Keep shows what we keep and for how long, and Export Your Data gives you everything we keep about your account as one file; or contact us
• Correct your data — update your profile in the app
• Delete your data — in the app: Settings → Delete Account deletes your active account and its health data immediately. Backup expiry and the separate minimal recovery records are explained in Section 4. An App Store subscription is billed by Apple and must be cancelled separately in your Apple ID settings
• Portability — the export is a machine-readable JSON file
• Withdraw consent — Settings → Your Data → Withdraw Consent (see "Legal Bases")
• Object — opt out of any data processing

To exercise these rights, email: support@bitforge.cloud

We will respond within 30 days. You can also complain to your data protection authority.

8. HealthKit Disclosure

Schumann Pulse integrates with Apple HealthKit to read (never write) only what it shows:

• Sleep analysis
• Heart rate variability

This data is used solely to show your sleep and HRV next to your own answers and in your pattern. HealthKit data is:

• Never shared with third parties
• Never used for advertising
• Never sold
• Stored securely on our servers only if you explicitly enable the HealthKit feature and have agreed to keeping health data
• Deletable at any time in the app (Settings → Your Data → Withdraw Consent, or Settings → Delete Account)

9. Changes to This Policy

We may update this privacy policy. Significant changes will be announced in the App and on this page, with the date at the top.

10. Contact

For privacy questions or data requests:

• BitForge Pte. Ltd., 10 Anson Road, #20-05, International Plaza, Singapore 079903
• Email: support@bitforge.cloud
• Subject: "Privacy Request — Schumann Pulse"