PulsIO

Privacy Policy

1. Who We Are

PulsIO is operated by Chetak Infinity Limited, a company registered in Mauritius. We are the data controller for personal information collected through the PulsIO platform at pulsio.mu. For privacy-related enquiries, contact us at support@pulsio.mu.

2. What We Collect

We collect the following personal information:

• Email address — when you create an account or join the waitlist
• Authentication data — login method (email, Google, or Apple) and session tokens
• Location data — GPS coordinates when you grant location permission, used to personalise alerts to your district
• Usage data — pulse history, layer preferences, session duration, and feature usage
• Device information — device type, operating system, and browser for session management and device limits
• Community reports — location, category, and description of reports you submit
• Payment information — processed entirely by Paddle (card payments) and NOWPayments (cryptocurrency). We do not store card numbers, bank details, or wallet addresses.

3. How We Use Your Data

We use your personal information to:

• Provide and personalise the PulsIO service
• Send you relevant alerts based on your location and preferences
• Manage your account, subscription, and pulse allocation
• Enforce device limits per your subscription tier
• Improve the platform through anonymised usage analytics
• Communicate with you about service updates, security alerts, and (with your consent) marketing
• Comply with legal obligations under Mauritius law

4. Location Data

Location data is central to PulsIO's functionality. We use your GPS location to determine which district you are in and to deliver relevant alerts (CEB power cuts, CWA disruptions, weather conditions) for your current area. Location data is processed in real time and is not stored permanently unless you submit a community report, in which case the report location is stored for the duration specified in our data retention policy. You can revoke location permission at any time through your device settings. PulsIO will continue to function with reduced personalisation.

5. Cookies and Tracking

PulsIO uses essential cookies for authentication and session management only. We use Plausible Analytics for website analytics, which is privacy-focused and does not use cookies or collect personal data. We do not use tracking pixels, fingerprinting, or cross-site tracking. Free tier users see advertisements served by Google AdSense, which may use cookies subject to Google's own privacy policy.

6. Data Sharing

We share personal information only with:

• Paddle — our merchant of record for card payment processing
• NOWPayments — our cryptocurrency payment processor
• Supabase — our database and authentication provider
• Cloudflare — our hosting and content delivery provider
• Google AdSense — for serving advertisements to free tier users

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose information if required by law or to protect the rights and safety of our users.

7. Data Retention

We retain your data as follows:

• Account data — retained until you delete your account
• Pulse history — 12 months
• Community reports — 90 days (anonymised after deletion)
• Payment records — 7 years (Mauritius tax law requirement)
• Error and system logs — 30 days

8. Your Rights

Under the Mauritius Data Protection Act, you have the right to:

• Access your personal data — request a copy of all data we hold about you
• Correct your data — update inaccurate or incomplete information
• Delete your data — request full account deletion (completed within 72 hours)
• Withdraw consent — opt out of marketing communications at any time
• Data portability — request your data in a machine-readable format

To exercise any of these rights, contact us at support@pulsio.mu.

9. Data Security

We protect your data with encryption in transit (TLS 1.3), database-level row security policies, rate limiting on all endpoints, account lockout protection, and continuous monitoring. While no system is 100% secure, we implement industry-standard protections appropriate for the nature of the data we process.

10. Children's Privacy

PulsIO is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. International Transfers

Your data may be processed by our service providers (Supabase, Cloudflare, Paddle) in locations outside Mauritius including the United States and the European Union. These providers maintain appropriate data protection standards.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For privacy enquiries, data requests, or complaints, contact us at support@pulsio.mu. You also have the right to lodge a complaint with the Data Protection Office of Mauritius.