CardioPulse AI Privacy Policy

The controller for the App and this policy is Tysora — Leopoldo Pérez Ortiz, a self-employed professional (autónomo), based at Avenida Isaac Albéniz 12, 45638 Pepino (Toledo), Spain.

For any privacy matter you can reach us at hola@tysora.es.

To measure your pulse, the App uses the camera and flash: you rest your finger and the color changes in your skin with each heartbeat are analyzed. The video is processed in real time on your device to compute the reading; it is not recorded, stored or uploaded to any server. The App uses the camera only for this feature and only when you start a measurement.

With your permission, the App saves your readings (heart rate, HRV) to Apple Health and can read health data to show your trends and generate the report. That data lives in your private Apple account (HealthKit); Apple manages it and Tysora does not store it on its servers. You can grant or revoke Health access in iOS Settings.

To generate the AI health report and the food analysis, the App sends the necessary metrics and context (for example, your pulse and HRV values, or the food photo/description) to a Google AI model (Gemini) that returns a plain-language explanation or estimate. That processing is governed by Google's terms; under them, this data is not used to train its models. Only what's needed for the feature you use is sent; don't share data you don't want analyzed. The AI generates informational content and may contain errors; it is not a diagnosis.

If you enable notifications, we use OneSignal to deliver them (for example, reminders). OneSignal processes a device identifier/notification token and your preferences to deliver them. You can turn notifications off in iOS Settings.

We use Firebase Analytics to measure aggregate usage and Firebase Crashlytics to log crashes and improve the App. These services may process device identifiers and usage data; they do not receive the content of your health measurements.

CardioPulse Pro is managed by Apple (App Store) through RevenueCat. Tysora does not receive or store your payment details; RevenueCat processes a random user identifier and your purchase status to activate Pro. The App shows no ads.

Apple HealthKit to read/write your health data, with your permission.

Google (Gemini model) for the AI features, with the data you send when using them. Policy: https://policies.google.com/privacy

OneSignal for push notifications. Policy: https://onesignal.com/privacy_policy

Firebase Analytics and Crashlytics (Google) for measurement and stability.

RevenueCat to manage the subscription. Policy: https://www.revenuecat.com/privacy

We never sell your personal data or your health data.

Your readings and reports are stored on your device and, if you enable it, in Apple Health; you can delete them from the App or from Health, or by clearing the App's data. Data processed by third-party providers is retained per their policies.

Health data is a special category of data; we process it based on your explicit consent when you grant the relevant permissions. You can request access, rectification, erasure, restriction and objection, and data portability, and withdraw your consent at any time in iOS Settings. To exercise your rights, email hola@tysora.es. You may also complain to the Spanish Data Protection Agency (www.aepd.es).

The App is not directed to children under 13 and does not knowingly collect personal data from minors.

CardioPulse AI is a wellness and educational tool. It is not a medical device, does not provide diagnoses, and its measurements and reports are estimates that do not replace a professional's assessment. For any symptom or concern, consult a healthcare professional; in an emergency, call your local emergency number.

We may update this policy to reflect changes to the App or the law; we'll post the current version on this page with its date. For any question, write to us at hola@tysora.es.