PulseRemit Pro is business software developed by Pulse Generation UG ("we", "us") for banks,
money-transfer operators, microfinance institutions, SACCOs and similar organisations ("the institution"). It is used
by the institution's staff, not by the general public.
1. Who controls the data
All information recorded in PulseRemit Pro is entered by the institution's staff and belongs to the institution.
The institution is the data controller and is responsible for its lawful use under the laws of its country.
Pulse Generation UG operates the "Pulse cloud" only as a processor that connects the institution's own computers
(section 3). We never sell this data or use it for advertising.
2. Information the app stores
To run branch operations the app stores, on the institution's own devices:
customer details entered by staff: names, phone numbers, addresses, date of birth, nationality, next of kin,
identification document details, photographs and specimen signatures;
financial records: transfer instructions, payouts, savings/deposit account transactions, cash sessions,
expenses and fees;
staff user accounts (passwords are stored only as salted one-way hashes), device registrations and an audit log
of actions.
3. Where it is stored and sent
Data is stored in a database on the institution's Branch Host computer or standalone device.
Counter PCs and tablets connect to the Branch Host over the institution's local network with the Host's PIN; each
device gets its own key, every request is encrypted (AES-256-GCM), and managers can block any device.
When a computer is online, the Pulse cloud (a Supabase database operated by Pulse Generation UG) connects the
institution's head office and branches. It receives, over HTTPS: transfers sent between branches (sender and
receiver names and phone numbers, amounts, status), the branch list, daily totals and the institution's settings
(fees, exchange rates, products, logo).
For banking and SACCO services the cloud also receives, so that any branch of the same institution can serve its
customers: a balance snapshot of each savings/deposit account (account number, holder name and number, product,
currency, balance, status and only the last 4 digits of the phone number), a loan snapshot (loan number, borrower
name, amounts outstanding and in arrears, days late, next due date) and a register of transaction receipts
(receipt number, type, amount, account or loan number, branch, date) used to check that a printed receipt is genuine.
If the institution chooses Back up to cloud, a full backup is uploaded after it has been
encrypted on the institution's computer (AES-256-GCM with a key derived from a password only the institution knows).
Pulse Generation UG and Supabase cannot read it. The newest 3 backups per computer are kept.
Customer photos, signatures and identity documents are not sent to the cloud except inside such an
encrypted backup; they stay on the branch computer.
Each institution's computers hold their own secret keys and the cloud only returns that institution's own records —
one institution can never see another's data. Pulse Generation UG staff do not browse institution records.
For licensing and support we also receive: the institution's name and contacts, its computers' Device IDs, app
versions, licence status and any licence/renewal request it sends.
Internal messages that staff send to the head office or to other branches of the same institution
(sender name and role, recipient, subject, text, time) pass through the Pulse cloud so they can be delivered.
Messages between staff of one branch stay on that branch's network. Only the institution's own computers can
read its messages; Pulse Generation UG sees only how many messages were sent, never their content.
Messages the institution sends to Pulse Generation UG from Messages › Pulse Generation UG (support chat)
are stored in the cloud so that we can reply.
The institution can switch cloud sync off in Settings › Head office & cloud. The app contains no advertising,
analytics or tracking SDKs.
4. Permissions
Camera - to photograph customers and receivers for identity verification, only when staff tap
"Take photo".
Network access - to connect to the Branch Host on the local network and to the Pulse cloud.
5. Security
Role-based permissions, manager approval of devices, dual approval of large transactions, automatic sign-out,
lock-out after failed sign-ins, and a tamper-evident audit log protect the data. Financial records are never deleted;
corrections are recorded as new entries.
6. Retention and deletion
Delete your account inside the app. Open Settings → Privacy & account →
Delete my account and confirm with your password. Your name, phone, e-mail and sign-in are erased at once and
you are signed out. Transactions a staff member recorded stay with the institution, as financial-record laws require.
Delete all of the institution's data. The Director can open Settings → Privacy & account
→ Delete the institution's data. Every record on that device is erased, and we are asked to delete the
institution's records from the Pulse cloud; we do this within 30 days.
PulseRemit Pro runs on Windows, Android, iPhone, iPad and Mac. The same rules apply on every device. On iPhone, iPad and
Mac the app has no in-app purchases; licences are arranged directly with Pulse Generation UG.
7. Children
PulseRemit Pro is a business tool for adult staff and is not directed at children.