Pulse is a time tracker. It stores the result of your work — your time entries — and never the raw artifacts behind them. This page explains exactly what lives where, who sees what, and which boundaries the system enforces.

⚠️ Pulse is in closed beta. The data model and access rules below are accurate as of the current release. Breaking changes will be called out in release notes.

What Pulse stores

• Time entries — category, tool, description, duration, optional start/end times, optional note. Entries logged via MCP are tagged source: agent.
• Profile — name, email, password hash (bcrypt), role, team membership.
• Workspace catalog — categories, tools, plus (beta) projects and teams.
• API tokens — only the SHA-256 hash. The raw psk_… is shown once at creation and never recoverable from the database.
• OAuth artifacts — clients, authorization codes (5 min TTL), access tokens (1 h TTL), refresh tokens. All stored hashed.
• AI insight summaries — short cached summaries of your week / month, when the AI gateway is enabled.

What Pulse does NOT store

• The contents of your connected apps. Notion docs, GitHub diffs, Slack messages, Google Calendar events — none of it. Those apps are connected to your AI coding tool, not to Pulse.
• Raw work artifacts. No source code, no documents, no chat logs.
• Activity beyond what's explicitly logged. Pulse doesn't observe your screen, keystrokes, or app usage.

The data flow

flowchart LR
  subgraph apps["Your apps (connected to your AI tool, not Pulse)"]
    A[Notion]
    B[GitHub]
    C[Google]
    D[Slack]
  end
  T["Your AI coding tool<br/>(Claude Code, Codex, Gemini…)"]
  P[("Pulse<br/>your timesheet only")]
  A --> T
  B --> T
  C --> T
  D --> T
  T -- "logs entry via MCP" --> P

Your AI coding tool reads what it needs from its own connected apps, decides what to log, and sends only the entry to Pulse. Pulse itself never makes outbound calls to those apps.

Workspace & role boundaries

flowchart TB
  Tok["Your token / OAuth session"] --> Mine["Your timesheet (write + read)"]
  Mine -. "aggregated only" .-> Mgr["Manager: team totals by category/project<br/>(no individual rows)"]
  Mine -. "read-only impersonation" .-> Adm["Admin: 'view as member'<br/>(cannot modify anyone else's entries)"]

• Per-user. Your token (or OAuth session) maps to exactly one user. Anything logged with it lands on your timesheet — never anyone else's.
• Per-workspace. A user belongs to one workspace. There is no cross-workspace view; even Admins see only their own workspace.