Data controller: Ultimatum Technologies
Legal form: sole proprietor (Hungary)
Registration number: 60193605
Tax number: 90848748-1-42
Contact: support@pulse.ultimatumtechnologies.com
Registered office, postal address: Zrínyi utca 33/B, 1171 Budapest, Hungary

Name of the service: UltimatumPulse (ultimatumpulse.app) – website and Android app.

Heart-rate and body data are health data (Article 9 GDPR). We store them only if you give separate consent on the Profile page. You can withdraw this consent at any time. For the daily summary from Health Connect, consent is given with the “Send daily summary” switch in the mobile app.

Daily health summary – only if you turn it on. The “Send daily summary” switch on the app's Health data page is off by default. If you turn it on, we store one summary per day for your account: step count per source (which app measured how much that day); sleep start, end, duration, time in bed and sleep stages; resting heart rate; active and total kcal; body weight; the start, duration, type, kcal, average and maximum heart rate and time per heart-rate zone of workouts recorded in other apps, plus your zone limits – each with the app that recorded it. We do not send raw measurements: neither per-minute heart rate nor individual step records. When you turn it on, we also send past data that Health Connect provides, for up to 12 months; data older than 30 days is read only if you grant a separate system permission on the phone (“Also older data”). Your coach cannot see these summaries, and we do not pass them to third parties.

Workout and heart-rate data are stored in a database run by Supabase in the European Union (Frankfurt, Germany). The website is served by Vercel's global content delivery network, whose logs may process technical visit data (e.g. IP address) outside the EU as well. Both act as data processors on our behalf.

The connection is encrypted throughout (HTTPS). Every row in the database is protected by an access rule (RLS): only you can see your own data — and the coach you have explicitly authorised.

Heart-rate data travels over an encrypted channel (HTTPS/TLS). In addition, the detailed heart-rate curve and the content of your training plans are encrypted by your device before they leave your phone or browser — with a key that belongs to your data only. In the database they exist only in encrypted form, and the key is not stored next to them: a stolen database backup is useless on its own.

We do not encrypt — because the service would not work without them, and because they are aggregated data — the workout summaries (average, maximum and minimum heart rate, time in zone), times and durations, age group, gender and your display name – and, if enabled, the daily health summary sent from Health Connect. The latter sits in a separate table that is not directly accessible and can only be retrieved from your own account.

It is not stored in plain form on your phone either. The app keeps the key in the Android Keystore, which the system holds in a separate hardware element — not in an ordinary file next to the data. The copy of your plans stored on the phone is also encrypted. If you update from an earlier version, the app migrates and deletes the old unencrypted copy.

What this does not mean: this is not “end-to-end” encryption. The key is issued by the service — to you, and to the coach you have authorised. This has two consequences. First: if you forget your password or lose your phone, your data is not lost — sign in on a new device and everything will be there. Second: the operator of the service can access your data; see section 5.

We store the detailed, second-by-second heart-rate curve for 12 months. The reason is that a training cycle can last up to a year, and at the end of the cycle detailed data for the whole period is needed to evaluate load and progress. After 12 months the detailed curve is deleted automatically (by a daily job).

Workout summaries (average, maximum and minimum heart rate, duration) are kept so that your long-term progress can be followed. These — together with your profile, training plans and calendar — are stored until you delete your account.

We keep the mobile app's debug logs for 90 days; after that they are deleted automatically. Operational statistics not linked to your account are also kept for 90 days, and your bug reports for 30 days; these are then deleted automatically as well.

The daily health summary sent from Health Connect (if enabled) is kept for 12 months after the day it covers, then deleted automatically (by a daily job). If you turn off the “Send daily summary” switch on your phone, the summaries uploaded so far are deleted from the server immediately; deleting your account also deletes them.

If you delete a training plan or a calendar day, its content is removed immediately — exercises, weights, everything. The empty row itself remains for 90 days, so that your phone also learns that nothing is there any more; otherwise the next sync would put it back. After 90 days the row disappears too.

You can delete your account at any time on the Profile page. Deletion covers all of your data and cannot be undone.

By default, only you. If you accept a coach's invitation, or a coach accepts your application, that coach can see and edit your calendar and training plans, and can see whether you completed a planned workout and how long it took — but not your heart-rate data, zones, body data, health data from Health Connect or templates. You can revoke access at any time, with immediate effect.

Medical history (health questionnaire and assessment). You fill in the questionnaire if you wish (known conditions, medication, joint complaints, injuries, pregnancy, other complaints under load, lifestyle, goals); the assessment (measurements, movement tests, muscle-map markings, goals, warnings) is recorded about you by your coach. Both are stored encrypted with your data key, item by item. Your coach sees only the questionnaire items you share with them – per coach and per item – and only while your connection and consent are active; the same applies to viewing and editing the assessment. You can also see the assessment about you. You can withdraw consent at any time on the My coaches tab of the Coach page: from then on your coach receives nothing from it. There you can also delete your questionnaire and the assessment about you. We log when, to whom, for which items and with what wording you gave consent (but not the content). We cannot delete anything your coach has already seen and may have saved. The mobile app does not show the medical history yet.

Coaching appointments. If your coach schedules an appointment with you (personal, small-group or online), both of you can see the appointment (day, time, location) and whether you cancelled it. Members of a small group cannot see each other's names, and the coach's own note is visible only to the coach. After the connection ends, future appointments disappear from your calendar and past ones remain; in your coach's calendar the shared appointments remain with your name until one of you deletes their account.

The operator also has access. For troubleshooting and to resolve your support requests, the developer of the service may access your detailed data as well. We do not hide this: without it an error could not be fixed, and encryption would be meaningless if we concealed who can look inside. Every such access leaves a trace: the system records who requested the key to your data and when, and we will show you this on request.

We use data processors: Supabase — database, account management, storage, and currently also sending confirmation e-mails (EU, Frankfurt); Vercel — serving the website and access logs (IP address); Cloudflare — the bot check (Turnstile) at sign-in, registration and password reset (IP address, technical browser data; may also be processed outside the EU). We do not sell your data and do not use it for advertising.

Sign-in with Google. If you sign in with a Google account, sign-in is handled by Google as an independent controller under its own privacy policy (policies.google.com/privacy). We receive only the data listed in section 2.

Map and address search in the coach finder. The map and address search are not operated by us: your browser connects directly to the OpenStreetMap Foundation's services — the map tiles (tile.openstreetmap.org) and the address search (Nominatim). These see your IP address, and the address search also sees the text you type; the map loads only when you open the coach finder or the locations, and the address search starts only when you press “Search”. With “Near me”, your browser sends your location (rounded to about 100 metres) only as a search parameter — we do not store it.

You may request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing. You can withdraw consent-based processing at any time — this does not affect processing carried out before the withdrawal. Please send your request to support@pulse.ultimatumtechnologies.com.

Download your data: Profile → “Download my data” (on the website and in the mobile app). You receive the data belonging to your account in a single, readable file. You can also change your e-mail address there (“Change e-mail address”).

Health Connect: you can turn off sending the daily summary on the app's Health data page – this also deletes the summaries already uploaded. The Health Connect permission itself can be revoked in the phone's Settings: “Health Connect” › App permissions › UltimatumPulse.

Delete everything in one step: Profile → “Delete account and all data”. This deletes everything immediately and permanently.

If you believe your rights have been infringed, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (naih.hu), or turn to the courts.

We do not use marketing or analytics cookies. In your browser's local storage (localStorage) we keep your session token, so that you do not have to sign in again on every page refresh – it is deleted when you sign out – plus a few interface settings (e.g. light/dark theme, a cache of which features are switched on); these settings contain no personal data.

The mobile app stores the session token and the data key in the Android Keystore, and an encrypted copy of your training plans — so that you can train offline. Uninstalling the app removes them.

We also record aggregated, non-personal daily counters (how many accounts exist, how many people trained that day). They contain nothing that points to you.