Privacy Policy

Information the app collects

The account, profile, workout, coach, and diagnostic information listed below is linked to your Bask account. Progress photos are the exception and stay on your device as described in the next section.

• Account information: your name, email address, Bask user ID, and the identifier returned by Google or Apple if you choose one of those sign-in methods. Passwords are handled by our authentication provider and are never stored by us in plain text.
• Profile and fitness information: the details you provide for coaching, such as date of birth, height, weight, sex, training experience, goals, and equipment access.
• Workout information: exercises, sets, reps, weights, dates, check-ins, notes, routines, and metrics Bask derives from your training, including readiness and progression.
• Coach content: messages you send to Kai and the training context needed to answer or generate coaching features.
• Crash diagnostics: when the app encounters an error, our first-party reporting may store the error message and stack, app path, user agent, limited app context, and your Bask user ID. We use this only to diagnose reliability problems. A count of these errors, recording which part of the app it happened in but not the message or the stack, is also sent to the product analytics provider described below.

Progress photos on your device

The optional Progress Photos gallery stores the photos you add locally on your device. Those photos are not uploaded to Bask, synced to our servers, used for advertising, or sent to Kai, OpenAI, or another AI service. You can delete them from the gallery at any time. Removing the app or clearing its local data may also remove them.

Website and email-list information

If you join the Bask email list, we collect your email address, the page that referred you to Bask when available, and the date, time, and source of your signup. The website uses Google Analytics and Vercel Analytics to understand visits and page performance. These website tools may process page views, device or browser information, approximate location derived from an IP address, and session timing.

The Bask app does not use this website analytics setup. It has its own, described next.

Product analytics in the app

We use PostHog to understand how the app is used, so we can see where people get stuck and what to fix next. It records that an action happened. It does not record the training content behind it.

What we send:

• Actions: opening the app, completing signup, moving through and finishing onboarding, starting, finishing, resuming or discarding a workout, searching for an exercise and finding nothing, generating a routine, opening Kai and asking it a question, and encountering an error.
• Counts and timings for those actions: for example how many exercises and sets a finished workout contained, or how long a routine took to generate. Numbers only.
• Your Bask user ID, the date your account was created, and the app version and platform you are using.
• Standard technical information that the analytics library attaches to every event: the page address within Bask, the referring page, your browser, operating system, device type and screen size. Our analytics provider is configured to discard your IP address, so no location is derived from it.

What we do not send: exercise names, weights, reps, your body measurements or any other training content, your progress photos, the text of your messages to Kai, your name, or your email address.

This data is processed in the European Union. Session recording, heatmaps, surveys and cross-app tracking are switched off.

How we use your information

We use your information to provide authentication, workout tracking, recommendations, readiness, progression, and coaching; save and personalize your training history; generate weekly training chapters and other coaching responses; understand how the app is used so we can improve it; diagnose crashes and improve reliability; and protect the service. We do not sell personal data, use it for third-party advertising, or track you across other companies' apps or websites.

AI processing

Bask uses OpenAI to generate weekly training chapters. For that feature, OpenAI receives a schema-limited set of training facts needed to write the chapter, such as workout and progression summaries. We do not send your email address or progress photos for weekly chapter generation.

If a generative Kai conversation is enabled for your account, the message you send and the relevant workout context may also be processed by OpenAI to produce the response. Bask limits the context to what the coaching feature needs.

If you choose to speak to Kai, Bask records your short voice request and sends the audio through our server to OpenAI to turn it into text. Bask does not store the original audio recording. The resulting text is handled like a message you typed to Kai. You can always use the keyboard instead of the microphone.

Service providers

We use service providers to operate Bask on our behalf:

• Supabase: authentication and database hosting, including account, workout, coach, and diagnostic data.
• Cloudflare: hosting and delivery of the app.
• OpenAI: the AI processing described above.
• Google & Apple: only if you choose to sign in with them, to verify your identity.
• PostHog: product analytics for the app, as described above, processed in the European Union.
• Resend: waitlist, launch, and product emails you ask to receive.
• Vercel and Google Analytics: hosting and measuring the public website.

Data retention and deletion

We keep app data while your account is active and retain diagnostic data only as long as needed for reliability and security. You can permanently delete your account and its linked data at any time from the app: open the You screen → Delete account. Account deletion removes your profile, workout logs, coach data, crash reports, and sign-in record and cannot be undone.

Security and international processing

Data is transmitted over encrypted connections, and access to account-linked rows is restricted. Our service providers may process data in countries outside your own. We use reasonable technical and organizational safeguards, but no service can guarantee perfect security.

Children

Bask is not directed to children under 13. Setup asks you to confirm that you are 13 or older. We do not knowingly collect personal data from children under 13.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export your personal data, withdraw consent, or complain to a data protection authority. Contact support@baskai.app to exercise these rights.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated date above.

Contact

Questions or requests about your data: support@baskai.app.