Privacy Policy

Scope and operator

This Privacy Policy applies to the Pulse for Writers hosted website, accounts, subscriptions, and support services.

Novala Studios AS (Norwegian organisation number 938261598) is the controller of the personal information described in this policy.

The current operator identity and support email address appear at the end of this policy.

Information we collect

• Account information, including your name, email address, verification status, and linked Google or Facebook account identifiers when you choose social sign-in.
• The time zone you choose or confirm for your account, which is stored with your workspace to work out when your days and months start.
• Writing-workspace information, including work days, goals, sessions, timer records, tags, word counts, preferences, and other information you enter into the service.
• Subscription information, including provider customer and subscription identifiers, plan, status, billing period, and checkout state. Paddle is our merchant of record and processes payment details; we receive subscription status, plan, renewal dates and a customer reference, and we do not receive or store card or bank-account numbers. We also receive payment records reported by Paddle (amounts, currency, refund and chargeback status) for accounting.
• Support and account-administration information, including requests, reasons for authorized support changes, session revocations, and audit records.
• Feedback you choose to send from the account menu, including your message, the category you pick, whether you allowed us to contact you at your account email, the app version, and the time it was sent. Authorized administrators can read it together with your account email.
• Optional email choices, if you turn them on in Account settings: which emails you chose (a weekly summary, a streak reminder), when you chose them and when you turned them off, the privacy wording in force at that time, the time zone your browser reported, a record of which optional emails were sent to you and when, and unsubscribe links stored as secure hashes. The emails contain only your own aggregate writing numbers, such as time logged, words, active days, and streak length.
• Technical and security information, including session tokens stored as secure hashes, IP address and request metadata in service logs, browser storage needed for offline recovery, and necessary cookies.

How we use information

• Provide, synchronize, secure, maintain, and improve the service.
• Authenticate accounts, recover access, deliver transactional messages, and prevent abuse or fraud.
• Send the optional weekly summary and streak reminder emails, only if you turned them on. Every one includes an unsubscribe link.
• Process subscriptions, reconcile provider events, and provide billing support.
• Respond to support requests and keep an auditable record of sensitive support actions.
• Comply with legal obligations and enforce the Terms of Service.

Legal grounds

Where data-protection law requires a legal basis, we process information as needed to perform our contract with you, comply with law, protect the service and its users, and pursue legitimate interests such as security and support. We rely on consent where the law requires it, and you may withdraw consent without affecting earlier lawful processing.

When information is shared

We do not sell personal information or use writing content for third-party advertising. We share information only with service providers needed to operate Pulse for Writers, such as hosting and database providers, email delivery services, Google or Facebook when you choose their sign-in services, and Paddle when you subscribe. These providers process information under their own terms and privacy notices.

Paddle acts as merchant of record for subscription purchases and is an independent controller of the purchase and payment data it collects from you; its handling of that data is described in the Paddle privacy notice at paddle.com/legal/privacy.

We may also disclose information when required by law, to protect rights and safety, in connection with a business reorganization, or at your direction. If processing crosses national borders, we use safeguards required by applicable law where available.

Cookies and local storage

Pulse for Writers uses a necessary HttpOnly session cookie to keep hosted accounts signed in. Browser storage is used for workspace persistence, offline recovery, and safe sign-out or deletion reconciliation. We do not currently use advertising cookies or cross-site behavioral tracking.

Retention and deletion

We keep account and workspace information while your account is active and as needed to provide the service. Account settings let you export your workspace data, basic account profile, and the feedback you sent, and permanently delete your account and owned workspace data. Feedback you sent is deleted with your account. The export does not include security credentials, internal logs, support audit records, or payment-provider records. Deletion may not immediately remove copies from routine backups, security logs, provider records, or records that must be retained for legal, fraud-prevention, accounting, or dispute purposes.

A limited deletion receipt containing an irreversible user identifier hash and operation metadata may be retained to confirm that a deletion completed. Paddle, Google, Facebook, and email providers apply their own retention policies to information they control.

Security

We use measures designed to protect information, including password hashing, hashed session tokens, secure production cookies, access controls, rate limits, request validation, and audited support actions. No service can guarantee absolute security. Keep your credentials private and notify support if you suspect unauthorized access.

Your choices and rights

You can review or correct profile information, export account data, revoke sessions, disconnect by signing out, and delete your account through the service. You can turn the optional emails on or off in Account settings, or stop them with the unsubscribe link in any of them. Depending on your location, you may also have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to complain to a data-protection authority.

Children and changes

The hosted service is not directed to children under 13. A person below the age required to consent to online services where they live may use it only with authorization from a parent or legal guardian.

We may update this policy as the service or law changes. Material changes will be identified by a revised effective date and, when appropriate, an in-product notice. Contact instructions are provided in the Support Policy.