--- title: "Privacy Policy | PulseBreak" description: "How PulseBreak handles your data. Short version: the Mac app keeps your settings local." url: https://pulsebreak.app/privacy --- # Privacy Policy Last updated: August 29, 2026 ## The short version The PulseBreak Mac app keeps its settings and break history on your Mac. Its own services make only two kinds of network request: checking for updates and — only if you buy Pro — activating and validating your licence. If you choose photos stored in iCloud or a folder on a network drive, macOS or that drive may also retrieve the images you requested. The website collects only what you choose to send through the signup or contact form. ## Who is responsible PulseBreak is operated by **CloudBridge Capital Limited**, trading as PulseBreak. Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central Hong Kong SAR [Contact form](https://pulsebreak.app/contact) Registration number: 74276386 (Hong Kong Business Registration) ## The app PulseBreak is a native macOS application. Your break schedule, break history, routines, application rules, and preferences are stored on your device and are never uploaded. There is no account and no analytics inside the app. PulseBreak does not record keystrokes, text, mouse coordinates, input content, window titles, or browsing history. It does not use Camera, Microphone, Screen Recording, Accessibility, Input Monitoring, or Calendar access. Adaptive Breaks may read public macOS information — elapsed idle time, recent input timing, the frontmost application identifier, and approximate full-screen window geometry — to decide whether a break should appear now or wait. These signals are evaluated on your Mac and are never transmitted. ### Photos and folders If you choose your own break backgrounds, PulseBreak asks macOS for access to the photos or folder you pick. Photos you import from the Photos library are stored as display-sized copies in PulseBreak’s own application-support folder on your Mac; a Finder folder you choose is read directly from disk when a break appears. Either way PulseBreak does not upload the images to its servers. Importing again replaces the previous copies, and *Remove Imported Photos* in Settings → Break Experience deletes them; switching to a built-in or dark background alone keeps them, so they are there if you switch back. ### Update checks PulseBreak periodically requests the public update feed at `pulsebreak.app/meta/appcast.xml` to see whether a newer version exists. Like any web request this reveals your IP address, the time of the request, and your app version to the server and its network provider. The request carries no identifier, no licence data, and no usage information, and PulseBreak does not send a system profile. Automatic checks can be turned off in Settings. ### Break history PulseBreak stores a local record of each break — when it happened, whether it was taken or skipped, its type, how long you had been working, and which timing profile was active — to produce the Insights page and your streak. It holds no application names, no window information, and no identifiers. History older than roughly 400 days is discarded automatically, and **Delete All History** in Settings removes it immediately. It is never uploaded. ## PulseBreak Pro licensing If you activate Pro, the app sends your licence key and a random per-Mac identifier (a UUID generated on your device — not your computer name, serial number, or hardware address) to Dodo Payments to activate, validate, or deactivate the licence. Activation happens once per Mac; validation runs when PulseBreak starts and about once every 24 hours while it is running, so a revoked or refunded licence stops working and a valid one keeps working. Dodo Payments returns the licence status and the email address associated with the purchase. PulseBreak stores the licence key, the activation identifier, and that email address in your Mac’s Keychain so Settings can show which account the licence belongs to. Your break history, settings, and activity signals are never included in a licence request. The free version never contacts the licensing service at all. The website separately receives signed webhook events from Dodo Payments for payment and licence operations. It stores only event identifiers, hashes, event types, product or entitlement identifiers, processing status, and timestamps — enough to process each event exactly once and to respond to refunds and fraud. It does not store licence keys or payment details. ## This website The site sets no advertising or cross-site tracking cookies. Standard web-server access logs may record your IP address, user agent, requested URL, and timestamp for security and operational purposes. The site is served through Cloudflare, which processes requests on our behalf and may set functional cookies for security and bot protection. If privacy-friendly analytics are enabled they are configured without cookies, without personal profiles, and without cross-site tracking. ## Email updates If you sign up for launch or product updates, your email address is used to send those updates. A six-digit confirmation code is sent first to make sure the address is real and belongs to you. Pending confirmation requests, confirmed signup records, IP address, user agent, source, and timestamps may be stored to operate the list and prevent abuse. Every update email carries an unsubscribe link, and your mail app’s own unsubscribe button works too; either removes your address from the list right away. You can also [ask](https://pulsebreak.app/contact) to be removed. ## Contact form If you send a message, the site stores the name, email address, message, source, IP address, user agent, and timestamp needed to handle the request and reduce spam. Contact messages are also emailed to the support inbox so they can be read and answered. ## Why we may use your data Under the GDPR, each use rests on one of these bases: - **Performance of a contract** — processing a purchase, activating and validating a licence, and providing support. - **Consent** — sending you email updates after you confirm your address. You may withdraw consent at any time by unsubscribing, which does not affect processing that already happened. - **Legitimate interests** — keeping the site and forms secure, preventing spam and abuse, and answering the messages you send, balanced against your interests. - **Legal obligation** — tax and accounting records for purchases, which the merchant of record handles. ## Service providers and international transfers PulseBreak uses service providers to operate: Dodo Payments (merchant of record for purchases, licence issuing and validation), Cloudflare (content delivery, security, and optional bot protection), DreamHost (website hosting and incoming support mail), Resend (outgoing confirmation, welcome and support-notification mail), and — if enabled — Beehiiv for the update list. Their roles depend on the service: a merchant of record may process purchase data as an independent controller, not solely on our behalf. Some of these operate outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA it is done under the safeguards those providers offer, such as the European Commission’s Standard Contractual Clauses. For delivery monitoring, our server stores hashed message identifiers, delivery-event types and timestamps, not recipients or message contents. These records are pruned after seven days by incoming events and the daily health check. Open and click tracking are not enabled for this mail. ## Retention and deletion Pending confirmation codes expire within minutes and are deleted after successful confirmation, expiry, or repeated failed attempts. Confirmed signup records are kept until you unsubscribe. Contact messages are kept while they remain useful for support and operational records, and are reviewed periodically. Purchase and licence records are kept by the merchant of record for as long as tax and accounting law requires. Break history never leaves your Mac and is deleted whenever you choose. ## Your rights If you are in the EEA or the UK you have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing based on legitimate interests, and a copy of the data you provided in a portable format. Where processing rests on consent you may withdraw it at any time. To exercise any of these, use the [contact form](https://pulsebreak.app/contact). We answer within one month. Much of it needs no request at all: break history is deleted from Settings, and the unsubscribe link removes you from the list immediately. If you believe your data has been handled improperly you may complain to your local data protection authority. ## Children PulseBreak is not directed at children and does not knowingly collect personal data from anyone under 16. ## Changes If this policy changes materially, the date above changes with it and the update is noted in the [changelog](https://pulsebreak.app/changelog). ## Contact Questions? Use the [contact form](https://pulsebreak.app/contact).