Privacy Policy

1. Information we collect

• Email address, when you create an account or sign in.
• User-generated text, such as journal entries, mood logs, communication notes, and any messages you choose to write inside the app.
• Voice recordings are ephemeral. Your audio is processed in real time to produce a transcription or insight, and is then discarded. We do not store voice recordings on our servers.
• Crash logs and diagnostics, collected to identify and fix technical problems.
• App interactions, such as the features you use and the screens you visit, used to improve the app experience.

2. No third-party data sharing

We do not sell, rent, or share your personal data with third parties for advertising, marketing, or model training. The only entities that process your data are the infrastructure providers we use to operate the app, listed below as data processors. They act under contract on our behalf and may not use your data for their own purposes.

3. Data processors

Supabase provides our authentication and database infrastructure. Your account data and user-generated text are stored on Supabase servers in the European Union, hosted in the London region. Data is encrypted in transit using TLS and at rest using AES-256. Row-level security ensures each account can only access its own data.

Payment processing, where applicable, is handled entirely by Apple or Google through their respective in-app purchase systems. We never see or store your payment details.

4. Legal basis (GDPR)

• Contract, to create and maintain your account and deliver the features you use.
• Legitimate interest, to diagnose crashes and improve performance.
• Consent, for any optional feature where consent is requested.
• Legal obligation, where retention is required by law.

5. Your rights

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access, to request a copy of the data we hold about you.
• Right to rectification, to correct inaccurate data.
• Right to erasure, to request deletion of your personal data.
• Right to data portability, to receive your data in a structured, machine-readable format.
• Right to restrict processing of your data.
• Right to object to processing for certain purposes.
• Right to lodge a complaint with your local data protection authority.

We extend these rights to all BasedTalk users, regardless of where you are located.

6. Right to deletion

You can delete your account and all associated personal data at any time. In the app, open Settings, then tap Delete Account. This triggers a full wipe of your account and personal data from our systems within 30 days.

If you cannot access the app, email support@humanbased.org from the address associated with your account and we will process the deletion within 30 days.

7. Data retention

• Account data: kept while your account is active, removed within 30 days of deletion.
• User-generated text: kept while your account is active, removed within 30 days of deletion.
• Voice recordings: not stored. Discarded immediately after processing.
• Crash logs: kept up to 90 days, then automatically removed.

8. Children

BasedTalk is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided personal data, contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and notify registered users by email where appropriate.

10. Contact

HumanBased, Copenhagen, Denmark.
Email: support@humanbased.org