PulseLMIS is business software developed by Pulse Generation UG ("we", "us") for medical, hospital, reference and research laboratories
(the "laboratory"). It is used by the laboratory's staff, not by the general public.
1. Who controls the data
All information recorded in PulseLMIS is entered by the laboratory's staff and belongs to the laboratory.
The laboratory is the data controller and is responsible for its lawful use under the laws of its country.
Pulse Generation UG operates the "Pulse cloud" only as a processor that connects the laboratory's own computers
(section 3). We never sell this data or use it for advertising.
2. Information the app stores
To run daily operations the app stores, on the laboratory's own devices:
patient details entered by staff: names, date of birth, sex, identifiers (MRN, national ID), phone, email and address;
test orders, specimens and their chain of custody, results, comments, amendments, critical-result calls, reports and delivery logs, microbiology, blood bank, pathology and molecular records;
quality control, inventory, equipment, invoices, payments, payers and insurance claims;
staff user accounts (passwords only as salted one-way hashes), device registrations and an audit log of actions.
3. Where it is stored and sent
Data is stored in a database on the laboratory's main (Host) computer or standalone device.
Other computers, phones and tablets connect to the Host over the laboratory's local network after pairing
with the Host's PIN; every request is encrypted (AES-256-GCM) and managers can block any device.
When a computer is online, the Pulse cloud (a Supabase database operated by Pulse Generation UG) connects the
laboratory's head office and branches. Over HTTPS it receives:
the laboratory profile (name, address, phone, email, director, accreditation number) and its licence state;
staff user names and roles (no passwords) so the head office can address messages and Pulse Generation UG can support the account;
activity counts for the head office and for support: number of patients, orders and released tests today, open critical calls, active tests, analysers and users, amount collected today;
staff messages addressed to other branches of the same laboratory organisation, and the support chat with Pulse Generation UG;
when Pulse Generation UG asks for diagnostics: app version, operating system, database size, licence state, the same counts and the last lines of the technical error log.
internal messages that staff send to the head office or other branches of the same laboratory (sender name and role, recipient, subject, text, time), so they can be delivered;
for licensing and support: the laboratory's name and contacts, its computers' Device IDs, app versions, licence status, licence requests and the support messages it sends to us.
Patient records, results, reports, specimens and invoices stay on the laboratory's computers. Reports are only sent by e-mail, SMS or WhatsApp when staff choose to deliver them, using the laboratory's own accounts.
The cloud only returns an laboratory's own records to its own computers; one laboratory can never see another's
data. Pulse Generation UG staff do not browse laboratory records.
The laboratory can switch the cloud off in Settings. The app contains no advertising, analytics or tracking SDKs.
4. Permissions
Local network - to connect other computers, phones and tablets to the laboratory's Host computer, analysers and the clinician / patient portals on the same network.
Internet - for licence delivery, branches, messages and support through the Pulse cloud, and for report delivery when the laboratory configures e-mail, SMS or WhatsApp.
Files - to choose a logo for printed reports and to import analyser or remittance files, only when staff pick a file.
Network access - to connect to the Host computer on the local network and to the Pulse cloud.
5. Security
Role-based permissions, manager approval of devices, approvals for sensitive actions, automatic sign-out, lock-out
after failed sign-ins and a tamper-evident audit log protect the data. Backups can be protected with a password.
6. Retention and deletion
The laboratory decides how long records are kept, subject to the record-keeping rules of its country. Staff
accounts are disabled by the laboratory's administrator. To delete the laboratory's cloud records, the owner can
write to [email protected]; we delete them within 30 days. People whose
information was recorded by an laboratory should contact that laboratory to access or correct it.
7. Children
PulseLMIS is a business tool for adult staff and is not directed at children.