Privacy policy

PulseOxTracker is the data controller for everything described here. Email contact@pulseoxtracker.com for any privacy question, or use the support button on any page.

This policy follows the UK GDPR and the EU GDPR.

Account: your email address and a hash of your password. We never store the password itself and we cannot read it.

Recordings: the overnight oximetry sessions you sync or import. Each one is a series of oxygen saturation, pulse and motion samples with timestamps, plus the summary figures calculated from them, such as desaturation index, lowest and average SpO2, time under 90% and pulse.

HRV readings: the heart rate variability readings you save from the live pulse wave, each a series of beat-to-beat intervals with the time you took it, plus the figures calculated from them, such as RMSSD and heart rate.

Your notes about your nights: the tags you create and apply, and the nightly measures you log.

Payment: if you buy lifetime access, we hold your Stripe customer id and the purchase status. Card numbers go to Stripe and never reach our servers.

Support: the messages you send us and our replies.

Session recordings: our self-hosted analytics records how pages are used, including on dashboard pages where your own figures are visible. These recordings stay on our own EU servers and are deleted within 30 days.

Technical: ordinary web server logs, including IP address and browser type, kept briefly for security and troubleshooting.

Oximetry data says something about your health, so UK and EU law puts it in a higher protection class.

We rely on your explicit consent to hold it. You give that consent with the tick box at registration, and we record the date and time you gave it.

You can withdraw that consent at any time. Delete individual nights or HRV readings from the dashboard, or delete your whole account, which removes all of them with it. Withdrawing consent does not undo what was lawful before you withdrew it.

To run your account and show you your own nights, charts and trends. That is the contract between us, plus your explicit consent for the health data itself.

To take payment and meet tax and accounting obligations. That is our legal obligation and the contract between us.

To answer your support messages, keep the service secure and stop abuse. That is our legitimate interest in running a working service.

We do not sell your data. We do not use your recordings to profile you or to target advertising, and no automated decision is made about you.

The application and the database run on Hetzner servers in the EU. Your recordings stay there.

Data is encrypted in transit. The database is on private networking and is not open to the public internet.

Hetzner Online GmbH hosts the servers and the database, in the EU, under a data processing agreement.

Stripe handles payments. Stripe receives your email address and payment details. Stripe never receives your recordings or anything else about your health.

Analytics are self-hosted on our own servers and record page visits and on-page interactions, including session recordings on dashboard pages. No analytics data is sent to a third party service.

We do not use any third party service to process your oximetry data.

Your account and your recordings are kept while your account exists, because that is the point of the product: long term trends need old nights.

When you delete a night or an HRV reading, it is removed from the database at once.

When you delete your account, your account row and everything attached to it, including every recording, HRV reading, tag and measure, is removed at once. Backup copies are overwritten within 30 days.

Payment records are kept for as long as tax law requires, typically six years. They contain no health data.

There is a delete button on the account page in your dashboard. You confirm by typing your email address, and the deletion is immediate and permanent.

If you would rather we did it, email contact@pulseoxtracker.com from the address on your account. We complete deletion requests within 30 days and usually within a few days.

Export anything you want to keep before you delete. Every night exports as a CSV file from the dashboard, and so does your HRV log.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it, and ask for it in a portable file. You can withdraw consent for the health data at any time.

Email contact@pulseoxtracker.com and we will answer within one month.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office in the UK at ico.org.uk, or to the supervisory authority in your own country.

We set one cookie to keep you signed in. Without it an account cannot work.

We set no advertising cookies and load no advertising tags.

We never put your email address, your recordings or any figure from them in a URL, a query string or a page title. Web addresses end up in server logs, browser history and referrer headers, so health data has no business being in one.

Accounts are for people aged 18 and over. We do not knowingly hold data about children. Tell us if you think we do and we will delete it.

The date at the top says when this policy last changed. If a change affects how we use your health data, we will email account holders and ask again for consent where the law requires it.