Pulto Privacy Policy
Effective date: July 6, 2026
Pulto is a visionOS app for opening spatial notebooks, local data files, and user-selected Jupyter servers. This policy describes the data Pulto handles, where it is stored, and the choices available to you.
Summary
- Pulto does not include advertising SDKs, cross-app tracking, or third-party analytics.
- Local notebooks, imported files, generated previews, and saved server settings are stored on device unless you explicitly connect to a remote service.
- Authentication secrets for Jupyter and Pulto-hosted connections are stored in the system keychain.
- Pulto only sends notebook content to a server when you choose to connect to that server or run a notebook through that server.
Data We Handle
Account Data
If you sign in with Apple, Pulto may receive your Apple-provided user identifier, name, and email address. Apple may provide a private relay email address depending on your Sign in with Apple choices.
Pulto uses this information to identify your account, manage signed-in app features, and support account deletion or recovery workflows.
User Content
Pulto can handle notebooks, code cells, cell outputs, data files, images, videos, 3D models, point clouds, Gaussian splats, and spatial metadata that you import or create.
Local content remains on device unless you export it, share it, or connect to a notebook server that processes it.
Server Settings and Tokens
Pulto can store user-provided Jupyter server URLs, Pulto helper server URLs, discovered server history, and authentication tokens. URLs and preferences are stored locally. Tokens and other secrets are stored in the system keychain.
Local Network Discovery
Pulto can discover notebook servers advertised over Bonjour on your local network. Discovery is used to show available servers in the app. Pulto does not use local-network discovery for tracking.
Network Use
Pulto connects to remote services only when you initiate a connection, reopen a saved server, sign in, or use a feature that depends on that server.
Remote credential-bearing connections should use HTTPS. Local development and Bonjour-discovered servers may use local HTTP addresses such as localhost, 127.0.0.1, or private-network hosts.
Third-Party and User-Provided Servers
When you connect Pulto to a Jupyter, JupyterHub, Pulto helper, Superset, or other user-provided service, that server may receive the notebooks, code, output requests, tokens, and files needed to perform the requested operation.
Those services are controlled by you or by the service provider you choose. Their handling of your data is governed by their own policies and configuration.
Data Sharing
Pulto does not sell personal information.
Pulto does not share notebook contents with third parties except when you explicitly connect to a server, export content, use a sharing workflow, or request a hosted feature that requires server processing.
Retention and Deletion
You can remove saved servers, delete imported files, clear local credentials, and sign out from the app. You can revoke local-network permission in visionOS Settings.
If account-backed features are enabled, use the in-app account controls or the support channel below to request account deletion.
Children
Pulto is not intended to collect personal information from children.
Changes
This policy may be updated as Pulto changes. Material changes should be reflected in the public privacy policy URL used for App Store submission.
Contact
For support or privacy questions, email [email protected]. Do not include authentication tokens, private notebooks, or secrets in public issue reports.