Skip to content
Island Pulse

Privacy & Security

What data is stored

Island Pulse stores the minimum necessary to deliver updates to your device. This includes:

  • A randomly generated unique ID (created on your device) that routes incoming webhooks to your phone
  • Internal delivery credentials required to show updates on your Lock Screen
  • Your device model, iOS version, and subscription tier for diagnostics and feature enforcement
  • Registration and update timestamps

No personal data is collected. Island Pulse does not store your name, email, Apple ID, location, or any content from your payloads. What you send in a webhook is delivered to your device and never stored on our end.

Your webhook URL

Your webhook URL is your API key. It contains a randomly generated unique ID that is created on your device.

  • Treat it like a password. Store it in environment variables, CI secrets, or a secrets manager, never in source code or public repositories.
  • All traffic is HTTPS. Plain HTTP is not supported.
  • Rotate if compromised. If your URL is ever exposed, go to Island Pulse → Settings → “Generate new secret URL”. The old URL is immediately deactivated.

Sending the ID without putting it in the URL

For integrations that run behind proxies, load balancers, or log aggregators, full request URLs are often recorded. To reduce the chance your secret appears in logs, you can POST to /notify without putting uniqueID in the query string and instead send:

Authorization: Bearer <your unique ID>

The value is the same ID embedded in the webhook URL the app shows you. You can also use the query alias ?token= if a tool cannot set headers. See the Quickstart for examples.

How updates reach your device

Your webhook payload travels from your server to Island Pulse over HTTPS, and from there to your device over Apple’s encrypted delivery network. All communication between Apple’s servers and your iPhone is encrypted end-to-end.

Data residency

Island Pulse’s servers run on Cloudflare’s global edge network. Cloudflare’s data handling is governed by their Data Processing Addendum.

App permissions

Island Pulse requests only:

  • Notifications, required to display Live Activities and receive updates in the background.

No location, contacts, camera, microphone, or other sensitive permissions are requested.

Purchases (Pro)

In-app purchases are processed entirely by Apple’s App Store. Island Pulse never sees your payment information. The app receives only a confirmation from the App Store of your subscription status.