Privacy

The short version

• Your account is your email address and a password (stored only as a one-way hash), or your Sign in with Apple ID.
• We keep the monitors you set up and the results of checking them, so we can show your uptime and alert you.
• No advertising, analytics or tracking, on the website or in the apps.
• Delete your account at any time, in the app or on the website, and everything goes with it.

What we keep

• Your account: email address; a bcrypt hash of your password (never the password itself); the identifier Apple gives us if you use Sign in with Apple; your plan; and, if you turn on two-factor authentication, its secret and recovery codes.
• Your monitors: the names, web addresses, hosts and ports you enter, and the settings for each.
• Check results: for each check, the time, whether it was up, the status code, the response time and any error. Detailed results are kept for up to 90 days (7 days on the Free plan); daily uptime summaries for about 400 days.
• Alerts: the email addresses and webhook addresses (Slack, Discord, Teams and others) you add, and a record of incidents.
• Status pages: what you publish, and the email addresses of people who subscribe to updates on them.
• The apps: for each device you sign in on, its name, platform and app version, so you can see where you're signed in. If you turn on alerts, the device's push token.

Who else handles it

• Stripe takes payments for paid plans. Your card details go to Stripe, not to us; we keep only the subscription's reference.
• Resend delivers our alert and account emails.
• Apple delivers push alerts to the apps, and handles Sign in with Apple and App Store downloads under Apple's privacy policy.
• Our server host stores the data above on our behalf.

Each gets only what it needs for that job. None of them may use it for anything else.

Cookies and logs

The website sets one cookie, to keep you signed in. The apps keep their sign-in in the device's Keychain. Our web server keeps standard logs, such as IP address and page requested, for security and reliability.

Deleting your data

Delete your account from the account menu in the app, or from Settings on the website. Any paid plan is cancelled first, then your account, monitors, check history, status pages, alert settings and signed-in devices are deleted straight away. Copies in our server backups are removed as those backups are replaced.

Children

PingPulse is a tool for people who run websites and isn't meant for children under 13.

Changes and questions

If this policy changes, we'll update this page and the date above. Questions? Email support@empoc.com. Empoc, LLC.