PulseStock is business software developed by Pulse Generation UG ("we", "us") for pharmacies, hospital pharmacies, supermarkets, shops and wholesalers
(the "business"). It is used by the business's staff, not by the general public.
1. Who controls the data
All information recorded in PulseStock is entered by the business's staff and belongs to the business.
The business is the data controller and is responsible for its lawful use under the laws of its country.
Pulse Generation UG operates the "Pulse cloud" only as a processor that connects the business's own computers
(section 3). We never sell this data or use it for advertising.
2. Information the app stores
To run daily operations the app stores, on the business's own devices:
products, prices, barcodes, batches and expiry dates, stock movements, goods received, purchase orders, suppliers, transfers, stock counts and recalls;
sales, receipts, returns, shifts and cash-ups, customers on credit (name, phone, balance);
pharmacy records entered by staff: patient name, date of birth, sex, phone, weight, allergies and conditions, prescriptions (and an optional photo of the paper prescription), dispensing records, dose-check results and the controlled-drugs register;
staff user accounts (passwords only as salted one-way hashes), device registrations and an audit log of actions.
3. Where it is stored and sent
Data is stored in a database on the business's main (Host) computer or standalone device.
Other computers, phones and tablets connect to the Host over the business's local network after pairing
with the Host's PIN; every request is encrypted (AES-256-GCM) and managers can block any device.
When a computer is online, the Pulse cloud (a Supabase database operated by Pulse Generation UG) connects the
business's head office and branches. Over HTTPS it receives:
daily totals for the head office: sales today and this month, cost of goods, receipts count, stock value, number of products and batches expiring;
from the head office to its branches: the product catalogue (names, SKUs, prices, barcodes, medicine details), product recalls (SKU, batch numbers, reason) and branch-to-branch stock transfers (products, batches, expiry dates, quantities and cost);
the business's settings (selling rules, branding) so every branch uses the same ones;
internal messages that staff send to the head office or other branches of the same business (sender name and role, recipient, subject, text, time), so they can be delivered;
for licensing and support: the business's name and contacts, its computers' Device IDs, app versions, licence status, licence requests and the support messages it sends to us.
Patient records, prescriptions, dispensing records, customers and sales receipts stay on the business's computers.
The cloud only returns an business's own records to its own computers; one business can never see another's
data. Pulse Generation UG staff do not browse business records.
The business can switch the cloud off in Settings. The app contains no advertising, analytics or tracking SDKs.
4. Permissions
Camera - to scan barcodes, photograph products and paper prescriptions, only when staff tap the camera or scan button.
Face ID / fingerprint - optional quick sign-in and to confirm approvals; biometric data never leaves the device.
Bluetooth - to print receipts and dispensing labels on a Bluetooth thermal printer chosen by the user.
Local network - to connect tills, phones and tablets to the business's Host computer, and optionally to receive dispensing from PulseHMIS on the same network.
Network access - to connect to the Host computer on the local network and to the Pulse cloud.
5. Security
Role-based permissions, manager approval of devices, approvals for sensitive actions, automatic sign-out, lock-out
after failed sign-ins and a tamper-evident audit log protect the data. Backups can be protected with a password.
6. Retention and deletion
Delete your account inside the app. Open Settings → Privacy & account →
Delete my account and confirm with your password. Your name, phone, e-mail and sign-in are erased at once and
you are signed out. Records a staff member entered (sales, receipts, stock) stay with the business.
Delete all of the business's data. The owner can open Settings → Privacy & account
→ Delete the business's data. Every record on that device is erased, and we are asked to delete the
business's records from the Pulse cloud; we do this within 30 days.
PulseStock runs on Windows, Android, iPhone, iPad and Mac. The same rules apply on every device. On iPhone, iPad and
Mac the app has no in-app purchases; licences are arranged directly with Pulse Generation UG.
7. Children
PulseStock is a business tool for adult staff and is not directed at children.