Privacy
Last updated 19 October 2026
Draft for legal review. This describes how the app works today; it is not yet a reviewed legal document.
Who we are
Baseline is made by Seigotic. Seigotic decides how your data is used in Baseline and is responsible for it.
What we collect
Your account: email address, and your name and picture if you sign in with Google.
Your profile: year of birth, sex, height, sleep need and time zone, which the scores depend on.
Health data you connect or enter: sleep, heart rate variability, resting and daytime heart rate, steps, workouts, breathing rate, blood oxygen, VO₂max and weight from Google Health; meals, journal entries and lab results you type in.
Plan details if you subscribe: plan, status and dates. Card and UPI details stay with Razorpay; Baseline never sees them.
Product events: names of steps such as “signed up” or “opened Premium” with a time, to see which features help. They never include health values, messages or your email.
How we use it
To calculate your scores against your own baseline, show your trends, answer your Intelligence questions, run your subscription and keep the service secure (for example, rate limits keyed to a one-way hash of your network address).
We do not sell your data or use it for advertising.
Intelligence and AI providers
When you ask Intelligence a question, a summary of your last 14 days of scores, baselines and lab results is sent with your question to an AI provider (Google Gemini or Anthropic) to write the answer. Your name and email are not sent. This only happens for signed-in accounts once the provider account is on terms that exclude training on your data; otherwise answers come from Baseline's own rule engine and nothing leaves Baseline.
Intelligence explains your numbers. It does not diagnose, and it is not medical advice.
Who processes it for us
Supabase (database and sign-in, hosted in Sydney, Australia), Vercel (hosting, Mumbai, India), Google (sign-in and Google Health, if you connect it), Razorpay (payments, if you subscribe) and the AI provider above. Each processes data only to provide its part of the service.
How long we keep it
As long as you have an account. When you delete your account, your data is deleted with it, Google Health access is revoked and any subscription is cancelled. Records Razorpay must keep for tax law stay with Razorpay.
Your choices
Download all of your data, or delete your account, at any time from Settings, Your data. You can disconnect Google Health in your Google account settings.
Security
Every table is protected so one account cannot read another's data. Google Health access tokens are kept where only Baseline's server can read them, never your browser.
Contact
Questions or requests: contact Seigotic. A dedicated privacy contact address will be listed here before launch.