Privacy Policy

2026-09-11 · Pulse of Horizon

1. Who is responsible

Pulse of Horizon is operated by Ramil Tolstomirov, based in Kazakhstan. Contact us about privacy, access or deletion at kancey123@gmail.com. This policy covers the iOS app and its supporting website and services. Pulse of Horizon is an independent companion app for Forza players.

2. Account and saved progress

If you sign in with Apple or Google, Supabase processes your account identifier, email address (including an Apple private relay address where used), sign-in provider, authentication records and profile information that the provider supplies, such as your name or profile image URL. We do not receive your Apple or Google password. We use account data to sign you in, maintain your session and associate your saved progress with your account.

Cloud records may include your garage collection, completed festival activities, map activities, collection journal, preferences, rewards and auction contributions. Some preferences, cached content and balances are stored locally on your device. Signing out does not by itself erase local settings or delete your cloud account.

3. Camera, selected images and auction analysis

The garage recognition feature uses an on-device Core ML model. Local recognition and the separate online auction-photo submission feature have different data flows. Camera frames used only for local recognition are processed on your device.

When you agree to online auction-photo analysis and confirm a photo or selected screenshot, we upload a JPEG image to Supabase Storage and associate its storage path, job identifier, requested car, processing status, timestamps and results with your account. The server sends the image and car context to OpenAI to identify the car, completed-sale price and class. Images may contain any names, chats or other information visible in the original photo: crop these out before submitting. We do not intentionally send your account email to OpenAI as part of this analysis.

Authorized reviewers can inspect submitted images and results to resolve uncertain readings, reject invalid submissions and administer rewards. Accepted car prices may contribute to the shared auction-price catalog. AI results can be wrong.

Current storage visibility: submitted auction images are stored in a publicly readable bucket. Anyone who obtains an image's direct URL can access it. The app does not require you to submit personal photos; submit only cropped game-sale results you are authorized to share. Do not submit confidential information.

OpenAI processing is requested with response storage disabled (`store: false`). This setting alone does not mean zero retention by the provider. Provider security, abuse monitoring and contractual retention rules may still apply. See OpenAI enterprise privacy.

4. Purchases and subscriptions

Apple processes App Store payments. RevenueCat helps validate transactions, restore eligible purchases, manage subscription entitlements and deliver in-app purchases. It processes purchase history, product and transaction identifiers, subscription status and an app user identifier, which is associated with your Supabase account when you sign in. We do not receive your full payment-card details. Purchase and entitlement records may be needed even after an app reinstall. See RevenueCat privacy policy.

5. Advertising and privacy choices

The free experience includes Google AdMob advertising and optional rewarded ads. The Google Mobile Ads SDK may process IP addresses (including approximate location inferred from IP), app or device identifiers, ad impressions and interactions, diagnostic information and performance data for advertising, measurement, fraud prevention and service operation. Actual processing depends on region, consent and SDK settings. See Google privacy policy and Google partner data use.

Google's User Messaging Platform requests privacy choices where required. Where available, use the advertising privacy options in the app's store to revisit them. You can also manage app permissions and any tracking authorization in iOS Settings. Declining an optional permission does not authorize us to bypass it. Optional photo analysis can be declined independently of advertising choices.

6. Hosting, maps and external content

Supabase hosts authentication, database and uploaded content. Our supporting web service runs on Hetzner. Requests to these services can involve IP addresses, request timestamps, device or client information and operational logs used to serve content, secure the service and investigate errors.

Maps show game locations, not your physical GPS location. The reviewed app does not request physical location access. Loading map tiles, images or news can contact external providers, including MapGenie and the original content host, which receive network request information such as your IP address. Opening links to music, videos or guides takes you to services with their own privacy practices.

7. Why we process data and who receives it

We use the data above to deliver the features you request, synchronize progress, operate purchases and rewards, analyze submissions, provide support, secure the app and satisfy legal obligations. Where a legal basis is required, we rely on performance of the service agreement, consent for optional processing where required, legitimate interests in security and reliable operation, and applicable legal obligations. You may withdraw consent for future optional processing; withdrawal does not undo processing already lawfully performed.

Service providers receive data needed for their respective roles as described above. We may disclose relevant information when legally required or necessary to establish or defend legal claims. We do not provide your account email or submitted photos to advertisers as an app feature. Advertising SDK processing is described separately above; this policy does not represent that all advertising processing is legally exempt from definitions of sale, sharing or tracking in every jurisdiction.

8. Retention and deletion

Account and cloud progress data are retained while your account is maintained and as needed to provide the service. Submitted images and processing records remain stored for processing, review and reward verification; the current system does not automatically delete them after a fixed number of days. Local caches and settings may remain until removed through device or app controls.

Contact kancey123@gmail.com to request access, correction, a copy of your data or deletion of your account and associated submissions. We may need to verify account ownership. We assess requests under applicable law and explain any records that must be retained for legal obligations, dispute resolution or fraud prevention. Backup copies may remain until the provider's backup cycle expires, and Apple and other independent providers may retain their own records under their policies. Do not interpret signing out or uninstalling the app as an account-deletion request.

Deleting your app account does not cancel an Apple subscription. Manage or cancel it in Apple subscription settings.

9. Your rights, international processing and security

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or complain to your local data-protection authority. Send requests to the contact above. Service providers may process data outside your country; applicable protections and provider contractual safeguards govern such processing. Network communication uses HTTPS, and access controls protect account records. No system can guarantee absolute security; the public visibility of submitted auction-image URLs is disclosed above.

10. Children and policy changes

The service is intended for a general gaming audience and is not directed at children under 13. If local law requires a higher age or parental authorization, those requirements apply. If you believe a child provided personal data without appropriate authorization, contact us to investigate and arrange deletion where appropriate.

We update this policy when practices change. The version and effective date identify the applicable text. Material changes will be brought to your attention as required by law, and new consent will be obtained where required before new optional processing begins.