Pulso ← back

Privacy

Last updated 3 August 2026

Pulso is built and run by one person, me. This page says exactly what I hold, where it sits, and who else sees it. I would rather write it plainly than hide it in the usual language.

What I hold

I do not ask for your address, your date of birth, or your payment details, because I do not need them. Nothing is for sale.

Where it sits

In a Postgres database hosted by Supabase, in London. The app itself runs on Railway. Photos you upload sit on that same server.

Backups

Your collection is backed up every night to a private Cloudflare R2 bucket in Western Europe. Nobody can read it without a key that only the server holds, and the last 30 days are kept.

Worth saying plainly: a second copy also lands in my personal iCloud, made by a job on a machine at home. Two backups that fail for different reasons beat one, which is why I keep it, but it does mean a copy of your collection sits in my own storage as well as on a server. If that is not something you are comfortable with, do not join.

Who else sees it

Three services, each for one job:

Nobody else. I do not sell anything to anyone, and there is nobody to sell it to.

This page used to list a fourth, Google Fonts, because the app and the shared pages loaded two typefaces from Google and that handed Google the IP address of whoever opened them. That mattered most on a shared page, which gets read by people who have no account here and never agreed to anything. The typefaces are now served by Pulso itself, so there is nothing to disclose.

What I do not do

There is no analytics, no tracking pixel, no advertising, and no third-party script watching what you click. I checked the whole codebase before writing that sentence rather than assuming it. The only cookie is the one that keeps you signed in.

Sharing a watch

If you create a share link, that page is public to anyone who has the link. It shows the watches you chose to share and nothing else. Delete the link and the page stops working.

How long I keep it

For as long as you have an account. Backups are kept for a rolling period and then overwritten, so a deleted collection can survive in a backup for a short while after you ask me to remove it.

Your rights, and how to use them

You can ask me for a copy of everything I hold, ask me to correct it, or ask me to delete it. Email yeisonwithay@gmail.com and I will do it myself, usually the same day.

You can now do this yourself: open the account panel and choose Delete my account. You will be asked to type your email address to confirm, because it cannot be undone. It removes your collection, shortlist, wear history, stories, photos and credits immediately.

Two honest caveats. A copy may persist in an encrypted backup for up to 30 days before it rotates out — restoring one is a disaster-recovery action, not something anyone browses. And if you have sent feedback, the message itself is kept so a reported bug does not vanish with the account, but it is unlinked from you: your identifier is removed from it.

Emailing me still works if you would rather.

You can already export your collection yourself, as a CSV or a printable valuation schedule, from the Insights tab. You do not need to ask me for that.