Legal
Children's privacy
Last updated: 2026-04-20 · Version 1.0
Placeholder. Pulsus legal team to replace this copy by 2026-05-15. Structure + links are final; body text is provisional.
Pulsus is a wellness tool. It is made for people aged 16 and above. We do not knowingly create accounts for, or collect personal data from, children under 16.
Why 16+
Sixteen is the strictest common digital-consent age across the jurisdictions we serve. By choosing it as our global floor we:
- Satisfy the Children's Online Privacy Protection Act (COPPA) final rule effective 22 Apr 2026 in the United States without building a verifiable-parental-consent flow.
- Clear every EU member state's Art. 8 GDPR age-of-consent floor (13–16 depending on country).
- Align with Turkey's KVKK and Japan's APPI guidance for wellness-class digital services.
- Match the position of peer wellness apps (Calm 13+, Headspace 13+ with parental consent under 18, Whoop 16+, Oura 18+).
If someone under 16 reached this app
If you are a parent or guardian and believe your child under 16 has used Pulsus or created an account, contact us immediately at privacy@pulsus.co. We will verify the request, remove the account, and delete the associated data (including rPPG measurement aggregates, subscription records, and any chat history) within 30 days. Raw video frames are never stored, so there is nothing to delete on that axis.
Family plan members
The Pulsus Family plan allows a primary subscriber to invite up to six additional members. The primary subscriber is responsible for confirming that each invited member is 16 or older. Invited members pass the same age-gate modal on first sign-in; no cross-profile data sharing occurs between seats.
How we enforce the gate
- A one-time attestation modal shown on first visit, stored as a single yes/no value on the device (no birthdate, no identifier, no server-side log).
- If the user declares they are under 16 the modal redirects them to this page and prevents further navigation within the app.
- Signup flows on
/auth/signupreject under-age attempts before a password is hashed.
Questions? Reach out to privacy@pulsus.co or read the full Privacy Policy.