Privacy
The short version: your health data is yours, it is used to answer your questions and no one else’s, we do not sell it, and you can delete it. The longer version follows.
What this covers
Baseline is an n-of-1 health analysis service. This policy describes what data we hold about you, why we hold it, and what you can do about it. It applies to the waitlist and to the private beta.
What we collect
Waitlist: your email address, and nothing else. It is used to tell you when a cohort opens. It is not sold, rented, or shared with advertisers.
Beta: the health data you choose to connect or enter — wearable metrics, blood panel results, continuous glucose readings, meals, symptoms, and supplement protocols — together with the account details needed to sign you in.
Operational data: standard server logs and privacy-preserving product analytics. We do not use advertising trackers.
Health data specifically
Health data is treated as special-category personal data. We process it on the basis of your explicit consent, for the sole purpose of producing your own results. You can withdraw that consent at any time, which stops processing and lets you delete the underlying record.
We do not sell health data. We do not share identifiable health data with third parties for their own purposes.
How cohort models work
Baseline estimates effects for you by borrowing statistical strength from a cohort. This is done with pooled parameters, not by exposing one person's record to another. No other user sees your data, and your record is not used to answer anyone else's question in identifiable form.
Storage and access
Data is encrypted in transit and at rest. Access by staff is limited to the people who need it to operate the service, is logged, and is restricted to the minimum necessary.
We use third-party infrastructure providers for hosting, storage, and email. They process data on our instructions under contract and may not use it for their own purposes.
Retention and deletion
Waitlist emails are kept until you unsubscribe or ask us to remove them. Beta health records are kept while your account is open.
You can delete your record at any time. Deletion removes your data from live systems promptly and from backups within the backup rotation period. Aggregate model parameters already estimated cannot be traced back to an individual record and are not reversed by deletion.
Your rights
Depending on where you live you may have the right to access, correct, export, or delete your data, to withdraw consent, to object to processing, and to complain to a supervisory authority. We honour these regardless of jurisdiction where we practically can.
Not medical advice
Baseline reports statistical estimates from your own data. It is not a medical device, it does not diagnose or treat, and nothing it produces is medical advice. Talk to a clinician before changing anything that matters.
Changes
If this policy changes materially we will tell account holders directly rather than only updating this page.
Contact
Questions, requests, and deletion demands: privacy@ownbaseline.com.