Privacy Policy

This Privacy Policy explains how AquaPulse collects, uses, stores and protects information when you use the AquaPulse mobile app, website and related services. Most of this policy describes the mobile app, which collects more information than the website. Section 19 and our Cookie Policy describe the website's own, much more limited, use of cookies and browser storage.

1. Who we are

AquaPulse is developed and operated by Valeon Labs Ltd, a company registered in England and Wales.

2. Information we collect

Depending on how you use AquaPulse, we may collect and process the following categories of information:

• Account information: such as your email address, authentication provider and account identifier.
• Aquarium information: such as tank names, tank type, tank size, setup details, livestock, plants, corals, equipment and care preferences.
• Water parameter and care data: such as water test results, maintenance records, reminders, tank history and aquarium notes.
• Photos and uploaded content: if you choose to upload images for aquarium guidance, tank records or image-based features.
• App activity: such as features used, screens viewed, onboarding progress, paywall interactions and general app usage events.
• Device and technical data: such as app version, operating system, device type, crash logs, diagnostics, security signals and app integrity information.
• Purchase information: such as subscription status, entitlement status and purchase-related identifiers processed through Apple’s App Store, Google Play and RevenueCat.
• Support communications: such as messages you send to us by email or through support channels.

3. How we use information

We use information to:

• Provide aquarium tracking, tank management and care guidance features.
• Save your tanks, livestock, logs, reminders and account preferences.
• Generate AI-assisted aquarium explanations, insights and recommendations.
• Operate free and premium features, including subscription entitlement checks.
• Improve app reliability, security, functionality and user experience.
• Understand app usage and diagnose technical issues.
• Respond to support, privacy and data deletion requests.
• Prevent abuse, fraud, unauthorised access and misuse of the app.
• Comply with legal, regulatory, tax, accounting, security and platform obligations.

4. Legal basis for processing

Where UK GDPR or similar privacy laws apply, we process personal data on one or more of the following legal bases:

• Contract: to provide the app, account, subscription and requested services.
• Legitimate interests: to maintain, secure, improve and troubleshoot AquaPulse.
• Consent: where required, such as for certain optional analytics, notifications or uploaded content features.
• Legal obligation: where we must retain or process information for legal, tax, accounting, compliance or regulatory reasons.

5. AI-assisted features

AquaPulse uses Google's Gemini service through Firebase Cloud Functions for AI health analysis, Ask, signed-in Planner analysis and Emergency Triage. Depending on the feature, requests include your question or instructions, proposed aquarium or plan details, recorded water readings, livestock names and quantities, lifecycle and care information, observations and AquaPulse's derived assessment. Health requests can include record identifiers and dates associated with the latest test. These reviewed features send text, not uploaded photos; photo storage and other image features are described separately.

Ask can use relevant context from one selected aquarium. Guest AI requests also leave the device and use anonymous authentication and service allowances. Signing out does not make an AI request local. Guest Planner analysis is generated locally. Emergency Triage can request AI refinement after displaying its initial guidance as part of the triage action.

These features use Gemini's GenerateContent API, not the Interactions API, and AquaPulse does not request optional API log storage for them. This does not mean Google never retains or reviews requests: provider abuse monitoring is separate from optional API logs, AquaPulse's operational logs and saved results.

Google processes these requests under the applicable service terms and settings. These may include retention and human review for abuse prevention. We do not promise that requests are never retained, reviewed or used to improve models. Avoid including personal, sensitive or confidential information in questions, aquarium names or notes.

AI advice may be incomplete, inaccurate or unsuitable for your aquarium. It is based on supplied information, not continuous observation or a guarantee of health. Check important advice and seek qualified aquatic or veterinary help where appropriate.

6. Photos and image uploads

If you choose to upload images, those images may be processed to provide app features such as tank records, aquarium guidance or image-assisted analysis. You should avoid uploading images that contain people, private documents, location details or other sensitive personal information.

7. Third-party services

AquaPulse uses trusted third-party services to operate the app. These may include:

• Firebase and Google Cloud: for authentication, database, storage, cloud functions, analytics, security and app infrastructure.
• Apple App Store: for distribution of the iOS app, in-app purchases and subscriptions.
• Google Play: for app distribution, in-app purchases, subscriptions and platform services.
• RevenueCat: for subscription entitlement management and purchase status processing.
• AI service providers: for processing aquarium guidance requests and generating AI-assisted responses.

These providers may process information as necessary to provide their services. We do not sell your personal information.

Google's Gemini service processes the AI requests described above. Firebase and Google Cloud also handle authentication, request allowances, saved records and operational diagnostics. The account or anonymous identifier used for authentication and allowances is separate from the information selected for the AI prompt; information you enter can itself identify you.

8. Analytics, diagnostics and crash data

We may collect app activity, diagnostics, crash logs and performance information to understand how AquaPulse is used, identify errors, improve features and maintain app stability.

Where possible, analytics are used in an aggregated or pseudonymous form. Analytics and diagnostics are not used to sell your personal information.

Optional analytics are controlled by the app's analytics preference. Choosing Necessary Only does not disable data processing needed for account or AI features you use.

The corrected AI function application logs record the feature, outcome, duration and a classified error code, without adding prompts, answers or user identifiers to those diagnostics. Earlier logs can still contain reply excerpts and account or anonymous identifiers under their existing retention configuration. This change does not delete historical logs or change Google's handling of AI requests. Other platform and service logs are separate.

9. Subscriptions and payments

Payments and subscriptions are processed by Apple through the App Store for purchases made in the iOS app, and by Google Play for purchases made in the Android app. AquaPulse does not directly collect or store your full payment card details. We may receive purchase status, entitlement information, transaction identifiers and related subscription information from Apple, Google Play and RevenueCat so we can manage premium access.

10. Data sharing

We do not sell personal data. We may share information only where necessary to:

• Operate AquaPulse and provide requested app features.
• Process subscriptions and manage premium access.
• Provide cloud, storage, analytics, diagnostics, security or AI-assisted functionality.
• Respond to support, privacy or legal requests.
• Investigate misuse, fraud, technical problems or security incidents.
• Comply with applicable laws, regulations, court orders or platform requirements.

11. Data storage and security

We use reasonable technical and organisational measures to protect your information. Data transmitted between the app and cloud services is encrypted in transit. Access to production systems is limited where appropriate.

No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

12. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the app, maintaining records, resolving disputes, enforcing terms, meeting legal obligations, preventing abuse and supporting security.

Some information may remain in backups or logs for a limited period before deletion as part of normal technical operations.

AquaPulse can save the latest health analysis and its date, selected analysis in saved plans, and investigations you choose to save. Ask replies remain in the current screen rather than a saved conversation history. Daily/monthly usage counters track accepted AI requests; unsuccessful requests can still consume an allowance. The separate device-local counter tracks validated completions.

Operational logs are separate from those saved results. Our application-log bucket is configured to retain records for 30 days. Required platform audit logs have a separate 400-day configuration. Neither period describes saved aquarium records or Google's provider-side retention. Account deletion does not immediately remove every technical record or provider-held copy. We have not established a new fixed retention period for saved results or usage counters in this change.

13. Account deletion and data deletion

You may request deletion of your account and associated personal data by contacting valeonlabs@proton.me.

When requesting deletion, please contact us from the email address linked to your AquaPulse account where possible. Some information may be retained where required for legal, tax, accounting, billing, fraud-prevention, dispute resolution, security or compliance reasons.

14. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to request a copy of certain personal data.

To exercise these rights, contact us at valeonlabs@proton.me. We may need to verify your identity before completing certain requests.

15. Children’s privacy

AquaPulse is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to AquaPulse, contact us and we will take appropriate steps to delete it.

16. International processing

Information may be processed in countries other than your own, including where our service providers operate. Where required, appropriate safeguards are used for international data transfers.

17. Your choices

You may choose not to provide certain information, but some app features may not work without it. You can disable notifications through your device settings and uninstall the app at any time to stop further app-based data collection.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and may provide additional notice where appropriate.

19. Cookies and the AquaPulse website

This section covers the AquaPulse website (aquapulse-app.com), as distinct from the mobile app described elsewhere in this policy.

The website stores one small, strictly necessary item in your browser's local storage to remember your cookie preferences, so you are not asked again on every visit. We do not run Google Ads or set advertising or affiliate-tracking cookies ourselves on this website.

We use Google Analytics 4 only with your consent. AquaPulse website pages load it only if you allow Analytics in the cookie banner or preferences; until then the analytics script does not load and no connection is made to Google for this purpose. We configure Analytics for measurement only: Google signals and ad personalisation are switched off in our tag, and advertising storage is denied. Our own measurement events carry only fixed labels (such as the page and the type of link clicked) and not what you type into tools or forms, and page and referring-page addresses are sent without query strings or fragments. Google Analytics also receives some standard technical information automatically, including your IP address, browser and device details and the page title. We read the results as aggregate reports, but Google receives the individual events and processes them under its own privacy policy, which AquaPulse does not control.

You can view, change or withdraw these choices at any time using "Cookie Settings" in the website footer. Full details of exactly what is stored, by whom, and for how long are in our Cookie Policy.

20. Contact

For privacy questions, support requests, account deletion requests or data protection enquiries, contact:

Valeon Labs Ltd
Email: valeonlabs@proton.me
Company Registration Number: 17258810
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.