WorldPulse Privacy Policy

Version: 1.0

Effective date: Upon publication of this version.

ALNILAM TECHNOLOGIES LLC provides and operates WorldPulse and is responsible for the information practices described in this Privacy Policy. References to "WorldPulse," "we," "us," or "our" in this Policy mean ALNILAM TECHNOLOGIES LLC in its operation of the Service.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the WorldPulse mobile application, related websites, and services (collectively, the "Service").

1. Information We Collect

Account and profile information

When you create or maintain an account, we collect your display name, email address, date of birth, account identifier, authentication information, and any handle, profile photo, biography, or profile-visibility setting you choose to provide. Our authentication provider processes your password; WorldPulse does not store it in readable form.

We use the date of birth you provide to determine eligibility, place the account in an age band, apply age-appropriate defaults and restrictions, transition the account when the user reaches an applicable age, and comply with child- and teen-safety requirements. We do not display a user's date of birth to other users.

When Apple indicates that an additional age check applies during account creation, WorldPulse may request an age range or category through Apple's Declared Age Range service after you tap Create Account. Apple may also provide an age-assurance method, parental-approval status, significant-change requirement, or consent-revocation signal through Declared Age Range, PermissionKit, or related App Store services. These services are designed to provide an age range or regulatory signal without giving WorldPulse your exact Apple Account birthdate. When no Apple check applies or the service is unavailable for the account or device, WorldPulse uses the neutral date-of-birth entry and its server-side age rules.

WorldPulse may also process age-related reports, safety signals, challenge status, and the outcome of an age review. If an account's age is credibly challenged, we may temporarily restrict the account and ask for additional age evidence. We will explain what is requested and how it will be handled before collecting any additional verification material. WorldPulse does not currently use a third-party identity-document verification provider for ordinary registration.

For a teen account, we also process linked parent or guardian account identifiers, link status, safety settings, and records of permissions or revocations. Linking shows that an authenticated adult account accepted a temporary pairing code; it does not mean that WorldPulse independently verified the person's identity or legal relationship to the teen. WorldPulse does not currently ask for a phone number during account creation.

Content and social activity

We collect content and activity you choose to create through the Service, including:

posts, blog posts, comments, reactions, bookmarks, photos, videos, and other uploads;
direct messages, conversation membership, delivery information, and read status;
club information, memberships, meeting details, RSVPs, and join requests;
friend, follow, block, report, and profile-visibility choices;
job or other listings you submit where that feature is available;
support, safety, moderation, and appeal communications; and
other information you intentionally provide through the Service.

Profile information and content may be visible to other users according to the feature involved, the audience you select, and your privacy settings. Public content may be copied or reshared by other people.

Direct messages are delivered to their intended participants and stored on WorldPulse systems. They are not end-to-end encrypted. Authorized WorldPulse personnel and service providers may access messages when reasonably necessary to operate the Service, provide support, investigate reports, protect safety and security, or comply with law.

Live broadcasts and live interactions

When you host a live broadcast, we process the broadcast video and audio, title, description, host account, stream and recording identifiers, status, timestamps, and technical information needed to deliver and record the stream.

When you watch or interact with a live broadcast, we may process your account identifier, display name, join and leave activity, comments, likes, viewer presence, and aggregate viewer and like counts. Join, like, and comment activity may be visible to the host and other viewers.

WorldPulse live broadcasts are automatically recorded. The host can replay a completed recording in the app and can delete it before its scheduled expiration. See Section 5 for retention details.

Purchases and subscriptions

Apple processes WorldPulse Plus subscriptions and optional platform-support purchases. We receive purchase and entitlement information such as the product purchased, transaction identifiers, subscription status, expiration date, App Store environment, and an account-linking token. We do not receive or store your full payment-card number or Apple Account password.

Location and local information

You may select a city manually or allow WorldPulse to use your device location while you use the app. We use the selected city, coordinates, and time zone for local weather, Sun and Moon information, maps, major-highway traffic information, nearby content, and Assistant briefings.

Location preferences are stored on your device. When needed to fulfill a request, coordinates or a place name may be sent to Apple mapping and geocoding services or Open-Meteo. For traffic requests, WorldPulse reduces the precision of device coordinates before they are sent to our server and HERE Technologies for city-level, major-highway traffic and incident information. The displayed map is provided by Apple. You can decline device-location access and select a city manually. You can change your choice in WorldPulse Settings and manage system permission in iOS Settings.

Calendar information

WorldPulse may request:

write-only calendar access when you choose to add a WorldPulse club meeting to Apple Calendar; and
full calendar access when you request an upcoming-calendar briefing from the WorldPulse Assistant.

For an Assistant calendar briefing, WorldPulse reads upcoming event information only after you request the feature. The title and time of a relevant event may be included in the text sent for speech generation. If calendar access is off, the Assistant may instead announce an upcoming WorldPulse club meeting associated with your account. WorldPulse does not continuously monitor your calendar.

Notifications

WorldPulse uses notification permission to deliver app notifications. If you request an Assistant notification briefing, the count and content of up to three recently delivered WorldPulse notifications may be included in the text sent for speech generation. WorldPulse does not read or summarize notifications from other apps.

Camera, microphone, and selected photos or videos

With your permission or direction, WorldPulse receives:

camera and microphone input when you prepare or host a live broadcast;
photos or videos that you select through Apple's photo picker for a profile or upload.

WorldPulse does not currently use the microphone for Assistant voice commands. You can change camera, microphone, photo, calendar, location, and notification permissions in iOS Settings.

Assistant speech and OpenAI

WorldPulse uses OpenAI's API to convert requested Assistant text into spoken audio. Depending on the briefing you request, the text sent to OpenAI may contain your display name, selected city, local time and weather, an upcoming calendar event title and time, a WorldPulse club meeting, recently delivered WorldPulse notification content, news headlines, or wellness-exercise instructions.

Before WorldPulse first sends this information to OpenAI, the Assistant Avatar screen identifies OpenAI, describes the information that may be sent, and asks for your separate permission through an unchecked consent control. If you decline, Apple on-device speech remains available and you can continue using the rest of WorldPulse. You can later grant or withdraw that permission from the Assistant voice controls. A parent or guardian's decision to unlock the Assistant for a Teen Account does not replace the separate AI-data permission shown to the teen.

OpenAI returns generated audio for playback. WorldPulse does not use Assistant requests as a persistent chat history and does not intentionally store the generated audio after playback. Our speech-generation function logs the requesting account identifier, model, and voice for operations and security, but does not intentionally log the speech text. WorldPulse records the AI provider and purpose, the consent-text version, the grant, decline, or withdrawal status and time, the app version and platform, and the Privacy Policy version associated with the decision. The server checks for a current grant before permitting an OpenAI speech request.

OpenAI states that API data is not used to train its models unless the API customer affirmatively opts in. Under OpenAI's standard API settings, abuse-monitoring logs may retain API content for up to 30 days, unless a longer period is legally required. See OpenAI's API data controls.

Technical, security, and support information

We and our service providers may process IP address, device and app information, request time, authentication status, service events, crash and error details, and similar technical information needed to operate, secure, troubleshoot, and prevent abuse of the Service. If you contact us, we collect the information in your request and our response.

Information from other people and providers

Other users may provide information about you when they interact with you, add you to a conversation or club, tag or report content, or contact support. Apple and our service providers may provide authentication, age-category, parental-approval, consent-revocation, purchase, subscription, delivery, security, or operational information.

2. How We Use Information

We use information to:

create, authenticate, maintain, and secure accounts;
determine account eligibility and apply age-appropriate experiences, safety settings, parental controls, and feature restrictions;
provide profiles, social feeds, messaging, clubs, live broadcasts and recordings, subscriptions, and other requested features;
personalize content and provide location-based weather, astronomy, maps, and local information;
generate requested Assistant speech and briefings;
process purchases, maintain subscription entitlements, and prevent fraud;
deliver service, safety, and account notifications;
enforce privacy, audience, messaging, blocking, and access choices;
review reports, moderate content, investigate misuse, and protect users and the Service;
maintain, troubleshoot, secure, measure, and improve the Service;
respond to support and privacy requests; and
comply with law and enforce our agreements.

WorldPulse does not sell personal information. WorldPulse does not currently use personal information for cross-context behavioral advertising or tracking across other companies' apps and websites. If these practices change, we will update this Policy and provide any notice, choice, or consent required by law and Apple policy.

3. When We Disclose Information

We may disclose information as follows:

Other users and the public. We disclose profile information, public or audience-limited content, club activity, and live broadcasts according to the feature and your settings. Messages are delivered to their intended participants. Live join, like, and comment activity may be displayed to the live audience.
Parents and guardians. For teen accounts, the current parental-controls screen discloses the teen's age band, parent-link status, parent-granted category identifiers, and parent-granted feature permissions to a linked parent or guardian account. If we add new parent-visible safety or account information, the app will identify what is shared. Linking a parent account does not silently expose direct-message contents.
Service providers. Vendors process information for hosting, authentication, storage, APIs, content delivery, livestreaming and recording, purchase verification, mapping, traffic, notifications, weather, and speech generation. These providers currently include Amazon Web Services, Apple, HERE Technologies, OpenAI, and Open-Meteo.
Third-party content and data providers. When you view or request third-party information or follow an external link, the relevant provider may receive your IP address, request, browser or app information, and other technical data. These providers may include mapping services, NASA, NOAA, news publishers and feed operators, sports leagues, entertainment and event providers, employers, job-listing sources, and linked websites. Job applications and information submitted on an employer's or listing provider's site are governed by that site's privacy practices, not this Policy.
Safety and legal disclosures. We may preserve or disclose information when reasonably necessary to comply with law or valid legal process; enforce our agreements; investigate fraud, abuse, intellectual-property claims, or security incidents; or protect the rights and safety of users, WorldPulse, or others.
Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
At your direction. We may disclose information when you request or consent to the disclosure.

We require service providers that process WorldPulse personal information on our behalf to use it only for authorized purposes and to provide protections consistent with this Policy and applicable requirements.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we process information:

to perform our contract with you and provide requested Service features;
with your consent, including for optional device permissions and third-party AI processing;
for our legitimate interests in operating, securing, improving, and protecting the Service, balanced against your rights; and
to comply with legal obligations and protect vital interests or public safety when applicable.

5. Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy. Current retention rules are:

Information	Retention approach
Account and profile	While the account is active, then removed or de-identified from active systems after a verified deletion request, subject to the exceptions below.
Date of birth, derived age band, and age-assurance status	While needed to enforce age eligibility and age-based protections. Exact birthdate should be access-restricted and may be replaced with an age band and next-transition date when legally and operationally sufficient.
Parent or guardian account links, approvals, and revocations	While the teen account or linked guardian relationship remains active, and afterward for the approved period needed to document consent, safety actions, disputes, or legal compliance.
Posts, blogs, comments, clubs, uploads, and direct messages	While needed to provide the feature or until deleted by the user, moderation, or account deletion. Direct messages already delivered may remain visible to recipients without an active profile link. Copies made or reshared by others and safety or legal records may also remain.
Live recordings, live-session records, comments, likes, and join events	Approximately 30 days after the live session ends, or earlier when the host deletes an eligible historical recording. Aggregate, safety, or legal records may be retained longer when necessary.
Assistant text and audio	Not intentionally kept by WorldPulse as a persistent history. OpenAI may retain API content in abuse-monitoring logs for up to 30 days under its standard settings.
AI voice permission records	While needed to enforce your current choice and afterward for the approved period needed to document consent, withdrawal, disputes, or legal compliance.
App Store server-notification processing records	Approximately 180 days. Purchase and entitlement records may be kept longer for account access, fraud prevention, accounting, disputes, and legal compliance.
Location, appearance, category, and other local preferences	On the device until changed, cleared, or the app is removed, subject to normal device-backup behavior.
Account-deletion audit records	A non-identifying record of the deletion request and completion status may be retained for approximately 400 days to document completion, prevent abuse, and resolve disputes.
Support, moderation, security, fraud, and legal records	For the period reasonably necessary to resolve the matter, prevent repeat abuse, establish or defend legal claims, and comply with law.
Protected backups	Until overwritten under the applicable backup cycle. DynamoDB point-in-time recovery may retain recoverable versions for up to 35 days. Information in backups is isolated from ordinary use and expires under the backup cycle unless preservation is legally required.

Deleting content removes it from ordinary display, but cached copies and content already copied or reshared by another person may remain. Deleting a historical live video removes the recording objects and associated live interactions from active systems, although deletion and cache expiration may not be instantaneous.

You may choose immediate account deletion or schedule deletion with a 30-day recovery period. For scheduled deletion, ordinary access is disabled and signing back in during the recovery period allows you to cancel the request. When deletion becomes permanent, WorldPulse removes or de-identifies the account and associated personal information from active systems, subject to the direct-message, audit, backup, safety, transaction, dispute, and legal exceptions described above. Deleting WorldPulse does not cancel an Apple-billed subscription; subscriptions must be managed separately through Apple.

6. Your Choices and Privacy Rights

You can:

edit your profile, handle, biography, photo, and visibility settings;
manage friends, blocked users, messaging choices, and content audiences;
use available teen-account or parental controls, including content-category and feature unlocks;
delete eligible posts, comments, blog posts, and historical live videos;
change device permissions in iOS Settings;
choose a city instead of enabling device location;
decline or withdraw permission for OpenAI speech processing;
manage or cancel an Apple subscription through Apple; and
delete your WorldPulse account in the app immediately or with a 30-day recovery period.

Depending on where you live and subject to legal exceptions, you may have rights to:

confirm whether we process your personal information and access it;
correct inaccurate information;
delete information;
receive a portable copy of information you provided;
opt out of targeted advertising, sale, or qualifying profiling;
withdraw consent or restrict or object to certain processing; and
appeal a decision we make about a privacy request.

WorldPulse does not currently sell personal information, use it for targeted advertising, or perform qualifying profiling for decisions that produce legal or similarly significant effects.

To submit a privacy request or appeal, contact Business@alnilamtechnologies.com. We may need to verify your identity and authority before completing a request. If you use an authorized agent, we may request proof of authorization and identity verification where permitted. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

You may also complain to the privacy or data-protection authority where you live.

7. Security

We use administrative, technical, and physical safeguards designed to protect information, including authenticated access, access controls, encryption in transit, and encryption at rest where supported. No system is completely secure, and we cannot guarantee absolute security.

Keep your credentials confidential and notify us promptly if you believe your account has been compromised.

8. International Processing

WorldPulse is based in the United States and is initially offered only in the United States. We and our providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live. Where required, we use recognized safeguards for international transfers.

9. Children and Teens

WorldPulse is intended for people age 13 or older. A person under 13 may not create or use a WorldPulse account. The neutral age screen appears before WorldPulse requests the information needed to create an account. If a person identifies as under 13, account creation stops and WorldPulse does not intentionally collect additional personal information from that person. If we later learn that an account belongs to a person under 13, we will restrict the account and delete or handle the information as required by law. Contact Business@alnilamtechnologies.com to report an underage account.

WorldPulse may use account reports, attempts to evade age safeguards, and other relevant safety signals to review whether an account is in the correct age band. A challenged account may be restricted while the review is pending. Any additional age-proof process will be limited to what is reasonably necessary, explained at the point of collection, and subject to this Policy and applicable law.

Users ages 13 through 17 receive a Teen Account. Teen Accounts use privacy-protective defaults and age-appropriate safeguards, including:

a private profile and limited discoverability;
messaging only between accepted friends;
a limited default set of categories and no default access to the Assistant, blogs, clubs, current events, or live features;
controls that let a linked parent or guardian account unlock eligible categories and features while the profile remains private and messaging remains friends-only;
reporting and blocking tools and review of attempts to evade age restrictions; and
no targeted advertising or profiling of teens for advertising.

Specific controls may vary by age band, location, legal requirements, Apple-provided signals, and safety risk. WorldPulse explains material parental controls to both the teen and linked parent or guardian. A Teen Account automatically transitions to the appropriate older age band when the user reaches the relevant age, subject to any required verification.

10. Changes to This Policy

We may update this Policy to reflect changes to the Service, our practices, or applicable law. We will post the updated version and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice and request renewed consent when required.

11. Contact Us

ALNILAM TECHNOLOGIES LLC 12655 Whittington Dr. Houston, TX 77282-0112 United States Privacy and support: Business@alnilamtechnologies.com