Privacy Policy
Baseline (“the App”)
1. Scope
This Privacy Policy applies to the Baseline mobile application for iOS and Android, related backend services we operate, and the website at baseline-habits.app where this policy is hosted.
2. Information we collect
Depending on how you use Baseline, we may process the following categories of data:
2.1 Account and profile
- Sign-in identifiers such as email address (via our authentication provider)
- Profile details you provide (for example display name, birth date, sex, height, weight goals, activity level, and optional profile photo)
- Subscription and premium status linked to your account
- Referral codes and referral reward status
2.2 Diary, nutrition, and fitness content you create
- Food logs, meals, recipes, custom foods, and nutrition values
- Habit tracking entries
- Weight logs and step counts stored in your account
- Workout sessions, exercises, sets, and related progress statistics
- Photos you attach (for example recipe photos or nutrition-label images)
2.3 Health and fitness data from Apple Health / Health Connect (optional)
If you connect Apple Health (HealthKit) on iOS or Health Connect on Android, and grant permission, Baseline may read selected health and fitness data such as:
- Steps
- Body weight
- Workouts / exercise sessions (including details such as duration, distance, and energy where available)
Baseline does not write data back to Apple Health or Health Connect. You can disconnect or revoke access at any time in system settings or in the App’s Integrations screen. Health data is used only to provide the App’s fitness and nutrition features for you (for example diary activity, calorie context, and progress views).
Apple HealthKit notice: Data obtained from HealthKit is not used for advertising, data mining, or similar services unrelated to health management, and is not sold. We do not use HealthKit data for marketing without a lawful basis and your appropriate consent where required.
2.4 Device permissions and local features
- Camera — to scan barcodes and capture nutrition labels (when you choose those features)
- Photo library — when you choose a photo for your profile, recipes, or label scanning
- Biometric unlock (Face ID / fingerprint) — processed locally on your device to unlock the App; we do not receive your biometric templates
2.5 Technical and service data
- Basic account and service logs needed to operate authentication, sync, and support (for example timestamps and error diagnostics)
- Payment-related identifiers needed to confirm premium subscription status (payment card details are handled by our payment processor, not stored by us)
3. How we use information
We use your information to:
- Provide, maintain, and improve Baseline’s core features
- Sync your diary, workouts, and settings across your signed-in sessions
- Calculate targets, summaries, and progress insights you request in the App
- Process optional premium subscriptions and referral rewards
- Provide customer support and respond to your requests
- Protect the security and integrity of the service
- Comply with legal obligations
We do not sell your personal data. We do not use Apple HealthKit data for advertising.
4. AI-assisted label scanning
If you use nutrition-label scanning, the label image (or derived text) may be processed by our backend and third-party AI / OCR providers (currently including Google Cloud Vision and OpenAI) solely to extract nutrition information for you to review and save. Do not scan labels that contain information you do not want processed for this purpose.
5. Public content
If you publish a recipe or make profile information public, your display name, avatar, and published recipe content may be visible to other Baseline users. You control what you publish.
6. Third-party services
We use service providers that process data on our behalf or at your direction, including:
- Supabase — authentication, database, file storage, and edge functions
- Stripe — premium checkout and billing
- Open Food Facts — barcode product lookup (queries may include the barcode you scan)
- Google Cloud Vision and OpenAI — optional nutrition-label OCR / structuring
- Apple / Google — app distribution and, where used, sign-in or health platforms
These providers process data under their own terms and privacy policies. We configure them to support Baseline’s functionality and do not allow them to use HealthKit-derived data for advertising.
7. Data storage and retention
Account-linked data is stored on our cloud infrastructure (Supabase) so it can sync with your account. We retain your data while your account is active and as needed to provide the service. You can delete your account in the App under Profile → Privacy → Delete account, which removes associated personal data from our systems. You may also contact us at support@baseline-habits.app. We may retain limited records where required for legal, security, or accounting purposes.
8. Security
We use industry-standard safeguards appropriate to the nature of the data, including encrypted transport (HTTPS) and access controls on our backend. No method of transmission or storage is completely secure; please use a strong unique password for your account.
9. Your choices and rights
- Update profile and diary information in the App
- Connect or disconnect Apple Health / Health Connect in Integrations or system settings
- Choose whether to use camera, photo, biometric, or label-scan features
- Delete your account in the App (Profile → Privacy), or email us for access/deletion help
- Cancel premium through the Stripe customer portal or the subscription controls in the App where available
If you are in the EEA/UK or another region with similar laws, you may also have rights to correct, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority.
10. Children
Baseline is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
11. International transfers
Our service providers may process data in countries other than yours (for example where Supabase, Stripe, or AI providers operate). Where required, we rely on appropriate safeguards permitted by applicable law.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version at this URL and revise the “Last updated” date. Continued use of the App after changes become effective means you acknowledge the updated policy.
13. Contact
Questions about privacy or data requests:
support@baseline-habits.app
Website: https://baseline-habits.app