Your voice belongs to you.
Always.

Last updated: June 2026 · Pulse Score Ltd

PulseScore never stores what you say. Only how you sound. Your words are processed in memory and discarded. The signal that remains is yours.

01 — Who we are

Pulse Score Ltd

PulseScore is built and operated by Pulse Score Ltd, a company registered in England and Wales (company number 17231193). We act as the data processor under the terms of this policy.

If you use PulseScore through a club, school, or team, your organisation is the data controller — they hold ultimate responsibility for the data and the relationship with you. If you use PulseScore independently as an individual player, you are the data controller of your own information; we process it on your behalf.

For any questions about how your data is handled, write to privacy@pulsescore.life.

02 — What we collect and why

Three categories of data

Account information

Your name, email address, and role (coach or player). Used to authenticate you and connect you to your organisation. For players under 18 in a school setting, no email is collected — only an access code and a personal PIN.

Check-in data

Slider values you submit — sleep, body, energy, and similar. These are numeric responses, scored on a continuous scale. Stored against your account and used to build your personal pattern over time.

Voice tone signals

When you record a voice note, our voice engine extracts a small set of acoustic measurements — energy, valence, arousal, dominant emotion, and confidence. These are numbers and a single descriptor word. They are stored against your check-in record. The recording itself is never stored.

The voice-note privacy contract

Your voice recording is never stored. No transcript of what you said is ever generated. The audio is processed in memory by our voice engine, the tone signals are extracted using open acoustic analysis (no speech recognition, no language model), and the audio is discarded immediately. What remains in our database is a few numbers and one descriptor word — nothing you said, only how you sounded.

03 — What we never do

Non-negotiable limits

We never store voice recordings after processing.
We never transcribe or store the words you said.
We never sell your data to any third party.
We never use your data to train AI models without your explicit consent.
We never share individual player data with coaches without the player's explicit action.
We never use your data for advertising.
We never retain coach audio recordings beyond 30 days.

04 — Coach audio

What happens to a coach's voice

When a coach records a purpose — their session intention — the audio is stored temporarily so players can hear it when they respond. This is intentional: the coach is broadcasting to their squad.

Coach audio is automatically deleted from our servers after 30 days. The purpose text — a written or extracted transcription of the coach's intention, where they have chosen to enable it — is retained in the session record as part of the coaching history, only if the coach explicitly created or confirmed it.

05 — The Drawbridge

Sharing your pattern with your coach

By default, your coach sees only anonymised, collective signals — squad energy, participation counts, aggregate tone across the group. They cannot see your individual data. Our system enforces a minimum response threshold before any collective reading is shown to your coach, so you cannot be inferred from a small group.

You can choose to share your personal pattern with your coach — your slider scores, your tone signals, or both — over a defined recent window. We call this lowering the drawbridge.

You are always in control

You open the drawbridge. You choose what to share. You can close it at any time. Even when open, your coach sees a pattern — numbers and tone descriptors — never your words. The drawbridge is your act of trust, not the product's default.

06 — Data sharing

Who sees your data

Your organisation

Your club, school, or team holds the data controller role. They can see aggregate squad signals subject to the anonymisation threshold. They cannot see individual player data without that player's explicit action.

Your coach

Coaches see collective signals only, unless a player has actively opened the drawbridge.

Third-party processors

We use a small set of vetted sub-processors to operate the service:

Anthropic — provides the language model that turns aggregated numeric tone signals into a plain-English summary for a coach. Anthropic only ever receives numbers (already aggregated above the anonymisation threshold). They never receive audio, never receive transcripts, and never receive individual player data.

Supabase — provides our database and storage infrastructure. Data is hosted in the European Union and encrypted at rest.

Microsoft Azure — hosts our voice engine and a small reference database of numeric baselines. No audio and no transcripts are retained on Azure.

Apple and Google — distribute the app via their stores and deliver push notifications. Standard platform behaviour.

No one else

We do not share your data with advertisers, data brokers, analytics SDKs, or any other third party.

07 — Your rights

GDPR and your rights

PulseScore is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). You have the right to access your data, request correction, and request deletion at any time.

Access — request a copy of all data we hold about you.
Correction — request that inaccurate data be corrected.
Deletion — request that your data be deleted entirely.
Portability — request your data in a portable format.
Objection — object to how your data is being processed.

If you are a minor (under 18), your organisation holds consent authority on your behalf, and additional protections apply: no surname, no photograph, no individual data ever shared without your explicit action.

We do not knowingly process data from children under 13 without verified parental consent.

08 — Data retention

How long we keep your data

Voice recordings — deleted immediately after processing, before any signal is stored.

Coach audio — deleted after 30 days.

Check-in data and tone signals — retained for the duration of your active account, then deleted within 90 days of account closure.

Account information — retained until you request deletion.

If your organisation ends their relationship with PulseScore, your data is deleted within 90 days unless you maintain an individual account that continues independently.

09 — Security

How we protect your data

All data is encrypted in transit using TLS 1.2 or above. Data at rest is encrypted by our infrastructure provider. Access to your data is controlled by row-level security policies — no one can read your data unless the system explicitly permits it based on your role and permissions, and we audit those policies regularly.

We do not store passwords in any readable form. Coach authentication is handled by Supabase Auth using industry-standard protocols. Player PINs are stored only as bcrypt hashes; the raw PIN never leaves the device after entry.

Questions?

We take privacy seriously. If you have any questions about this policy, your data, or how PulseScore handles information, contact us directly.

privacy@pulsescore.life

Your voice belongs to you.Always.