Privacy Policy

Pulse ID is a multi-factor authentication (MFA) app provided by CyberSquad IT Consulting for Medlink Connect. It lets authorised users approve or deny their VMware Horizon sign-ins from their phone. This policy explains what the app collects and how that information is used.

Information we process

• Account identifier — your work username / UPN, so an approval can be matched to your sign-in.
• Device push token — an Apple/Google notification token, used only to deliver sign-in approval prompts to your device.
• Device security key — a public key generated on your device to cryptographically sign your approve/deny decisions. The matching private key never leaves your device.
• Approval events — the time, source IP and outcome of each sign-in approval, kept as a security audit record.

Your biometrics stay on your device

Face ID / Touch ID / fingerprint checks are performed entirely by your phone's operating system. Pulse ID never receives, stores, or transmits your biometric data — it only receives a yes/no result from the device that the check passed.

How we use it

• To notify you of a Horizon sign-in and let you approve or deny it.
• To verify that an approval genuinely came from your enrolled device.
• To keep a security audit trail of authentication decisions.

What we do not do

• We do not sell or rent your information.
• We do not use it for advertising, and the app contains no third-party ad or tracking SDKs.
• We do not access your location, contacts, photos, or messages.

Service providers

Push notifications are delivered via Apple Push Notification service and Google Firebase Cloud Messaging. Application data is hosted on Microsoft Azure infrastructure managed by CyberSquad IT.

Retention

Device and account records are retained while your account is enrolled and are removed when your access is revoked or the device is un-enrolled. Audit records are retained per Medlink Connect's security retention policy.

Your choices

You can remove Pulse ID at any time by deleting the app or asking IT to un-enrol your device. Notifications can be managed in your device settings, though the app requires them to function.

Contact

Questions about this policy or your data: support@cybersquad.com.au.