PulseBloom Privacy Policy

Audio and permissions

Microphone listening uses Android's microphone permission. Device listening uses Android's capture approval and works with compatible playback apps. Experimental Output mix obtains temporary waveform and spectrum information through Android's output visualizer. Android requires microphone permission for this option, but PulseBloom does not open a microphone recorder for Output mix.

PulseBloom analyzes audio temporarily on your device. It does not save audio recordings, capture screen images or upload captured audio. The included Demo song plays locally. Disconnect stops PulseBloom's listening connection, not music playing in another app. Capture uses an Android foreground service where required.

Purchases and security

PulseBloom has no ads and does not require a PulseBloom account. Premium is an optional one-time purchase through Google Play. The optional trial does not charge automatically or start a subscription. Google Play handles checkout and payment data.

Purchase verification, Restore and automatic reconciliation of completed purchases use a Play purchase token, request identifier and security attestation. These are sent over HTTPS to our Google-hosted verification service. We keep token-derived purchase-status records to support continuing ownership and reconciliation.

That verification request does not include captured audio, screenshots, song metadata, payment-card information or your Google-account email.

Firebase App Check and Play Integrity process app, device and integrity information to protect verification. Security initialization can happen when PulseBloom opens or resumes, including before Buy is pressed. Switching purchase processing off does not necessarily stop SDK security processing or attempted verification requests.

We use this information for purchase functionality, security and technical fault investigation. We do not use it for targeted advertising or tracking people across apps. An inconclusive verification result does not create a new confirmed purchase; previously verified access may be retained until an authoritative result is available.

Information on your device

The device stores visual preferences, trial settings, parental-lock settings and verified purchase information. Eligible visual preferences may be backed up by Android. Purchase-token, trial and parental-lock caches are excluded from Android backup and device transfer.

Clearing app data or uninstalling removes local app data. It does not refund a purchase or automatically erase Google or server records. The optional parental lock uses Android device credentials; it is not age verification or proof of guardianship or parental consent.

Support and privacy requests

Feedback opens an editable message in your chosen email app. PulseBloom does not send it automatically. If you email us, we receive your sender address, message and information or attachments you choose to include. You can remove prefilled app version before sending. Current24does not automatically prefill phone manufacturer/model or Android release. The draft asks a parent or guardian to contact support for a child and warns against child personal details, purchase tokens or passwords.

Contact OrbitalScarStudios@gmail.com to request access to or deletion of relevant personal information. A parent or guardian should handle a child's request. Do not email raw purchase tokens, App Check tokens, passwords or payment-card data.

We may need proportionate private information to verify authority and identify the relevant record. We do not identify a purchase-ledger record from an email address alone. If we cannot uniquely identify a record, we explain the limitation rather than guess or claim deletion succeeded. You do not need another purchase or a PulseBloom account to contact us.

Deleting our verification record does not refund or cancel a Play purchase. Restore or later automatic reconciliation may recreate purchase metadata. Google handles its own account and payment records separately.

Retention

We retain purchase records while supporting lifetime unlocks and review their continued necessity annually. The purchase ledger has no automatic expiry.

Ordinary closed adult or guardian support correspondence is deleted 12 months after closure. Appropriate privacy requests may require earlier handling of their own correspondence.

If we identify a direct child contact, we avoid requesting further child information and direct the child to a parent or guardian. Where the limited one-time-response conditions apply, we promptly remove the contact information after replying. Ongoing requests are handled with a verified adult. We do not treat this as permission to retain or reuse additional personal information supplied by a child.

Purchase-notification messages have seven-day retention. The configured default operational logs have 30-day retention; required Google Cloud audit logs have 400-day retention. Google may retain separate security/service records under its own policies. These systems do not share one universal deletion deadline.

We do not intentionally log raw purchase or security-attestation tokens in application logs.

Service providers and changes

We use Google Play, Firebase and Google Cloud for purchase, security and hosting. Your chosen email provider handles support delivery under its own terms. Our app-controlled remote verification uses HTTPS; that is not a promise of end-to-end encryption for ordinary email.

We will update this policy when actual data practices change. Privacy questions and requests: OrbitalScarStudios@gmail.com.