Privacy Policy
Effective October 2026
1. Who we are
Baseline Health App LLC, a Florida limited liability company (“Baseline,” “we,” “us”), makes the Baseline app for iPhone and its Apple Watch companion app (together, the “App”), and runs this website, baselinehealthapp.com. This policy explains what data the App uses, what leaves your iPhone and when, and what our server keeps.
Questions: support@baselinehealthapp.com.
2. Summary
- No account. There is no sign-up or sign-in, and we don't ask for your email address or phone number.
- Your data lives on your iPhone. Your Apple Health data, profile, scores, workouts, body entries, lab results and Coach chat history are stored on your device.
- Data leaves your iPhone only for AI features and scans, and only after you accept the AI consent screen. You can say “Not now” or turn AI off later; your scores keep working with built-in text.
- When you use them, the data goes through our server on Amazon Web Services (AWS) in the United States to Anthropic's Claude AI, which writes your text or reads your scan.
- Each AI or scan request also carries proof of your App Store subscription and an Apple App Attest check, so our server can confirm access, apply fair-use limits and block fake requests.
- No ads, no analytics, no tracking. The App contains no advertising, analytics or tracking code. We never sell your data, and we never use your health data for advertising or marketing.
- Our server keeps very little, briefly: AI card text for 6 hours, usage counters for up to about 2 days, and logs for 30 days that contain no names, health values, prompts, photos or AI text.
3. What stays on your device
The App stores the following on your iPhone only:
- Your profile: first name, date of birth, biological sex, height, starting weight and goals (such as goal weight, sleep hours, weekly workouts and daily steps) that you enter in the App.
- Data read from Apple Health with your permission (see section 8), and the scores the App calculates from it: Baseline, Recovery, Sleep and Stress, with their history.
- What you log: workouts, sets and personal records; weight and body composition; lab results; cycle tracking settings and cycle days; and your morning check-in answers.
- AI results: the AI text you received and your Coach chat history.
Your first name is used only on your device: it is never sent to our server or to the AI. Personalized text is filled in with your name on your iPhone after it arrives.
Apple Watch. The Watch app doesn't connect to the internet. It exchanges data only with your paired iPhone (for example, the scores it shows and the workouts you record on it).
Backups. The App doesn't sync to iCloud or to any server of ours. If you back up your iPhone (with iCloud Backup or to a computer), iOS may include some of the App's data in that backup, as it does for other apps.
Reminders you turn on in the App (Workout Reminder, Weekly Summary) are scheduled on your iPhone. We don't send push notifications.
4. What leaves your device, and when
Nothing is sent for AI features or scans until you accept the AI consent screen (“AI features need your permission”). It lists what is sent and where it goes. Until you accept, and whenever AI is turned off, the App sends none of the data below.
4.1 AI cards, daily briefing and Coach chat
When the App asks for AI text, it sends a summary of your day that it builds on your iPhone. Depending on the card, this can include:
- your Baseline, Recovery, Sleep and Stress scores and the reasons behind them, and whether today is a day to push, maintain or recover;
- health measures such as overnight heart rate, heart rate variability (HRV), breathing rate, wrist temperature and sleep (duration, stages, timing and your sleep need), and how they compare to your usual levels;
- your workouts and training load (sessions this week, your weekly goal, and your last workout type and when it was);
- for the Body card and chat only: your latest weight, goal weight, recent weight change and body-fat percentage;
- your cycle phase and cycle setting if you track your cycle, and your morning check-in if you answer it;
- notes on how complete your data is, the local time and day of the week, and how many days you have used Baseline.
For Coach chat, the App also sends your question, up to six earlier messages from the same conversation, a short summary of the last seven days and, when there is one, today's Coach card.
If you set your cycle to Pregnant, scores are paused. The AI is told only that scores are paused, never why.
4.2 Lab and InBody scans
When you scan a lab report or an InBody result sheet, the App sends the photo (resized and compressed) and the type of scan. The AI reads the values and returns them to the App, where you check them before anything is saved. Our server doesn't store or log the photo.
4.3 The subscription check
Every AI and scan request carries your App Store subscription transaction, the signed record Apple gives the App for your Baseline Pro subscription or free trial. It holds details of that purchase, such as the product, the purchase and expiry dates, whether you are in a free trial, and the subscription's original transaction ID. It doesn't include your name, email address or payment card. Our server checks Apple's signature to confirm you have access, and uses the original transaction ID to apply fair-use limits (see section 6). Payments themselves are handled entirely by Apple.
4.4 App Attest and the device identifier
To block requests that don't come from the genuine App, the App uses Apple's App Attest. The first time it needs to, it creates a key on your iPhone, has Apple vouch for it, and registers the key's public part with our server. After that, each AI or scan request carries a signature from that key.
Requests also carry the App's version and an identifier for your device (the identifier iOS gives apps from the same developer, or a random ID if that isn't available). Our server doesn't use this identifier for limits and doesn't store or log it.
4.5 What is never sent
Your name, age or date of birth, sex, height, steps, active calories, your list of personal records, your contact details and your location are never sent. Neither are the raw records in Apple Health: the App sends only the summaries described above.
Like any internet service, our server sees your device's IP address while it answers a request. Our server functions' logs don't record it, and it isn't passed to Anthropic.
5. How AI processing works
Our server, run on AWS in the United States (us-east-1), checks your subscription and App Attest, applies fair-use limits, and forwards the request to Anthropic's Claude API. It sends Anthropic the text summary, your chat messages or your scan photo, with our instructions. It sends no identifier for you or your device: not your subscription details, device identifier or IP address. Anthropic returns the response, and our server checks it before passing it to the App.
Anthropic acts as our service provider: it processes the request to return a response. Under its commercial terms, Anthropic does not use this data to train its models and keeps it only for a limited time. Anthropic's own privacy policy and terms describe its practices.
6. What our server keeps, and for how long
| What | Details | How long |
|---|---|---|
| AI card text | DetailsThe short text written for your daily cards (it can repeat numbers from your summary), so the same card isn't written twice. It is filed under a one-way code made from your subscription ID and the card's inputs. | How long6 hours, then it expires and is deleted automatically |
| Coach chat | DetailsNever stored on our server. | How longNot kept |
| Scan photos | DetailsSent to the AI to read and then discarded. Never stored or logged. | How longNot kept |
| Usage counters | DetailsCounts of AI and scan requests per hour and per day, keyed by your subscription's original transaction ID, for fair-use limits. | How longDeleted automatically within about 2 days |
| App Attest keys | DetailsThe public part of each App Attest key and a counter, to check that requests come from the genuine App. They contain no name, health data or purchase details. | How longNo set expiry |
| App Attest challenges | DetailsOne-time codes used once while registering a key. | How long5 minutes |
| Server logs | DetailsOperational records (which function ran, request type, status, timing, whether a check passed). No names, device or transaction IDs, health values, prompts, photos or AI text. | How long30 days |
We don't keep any other copy of your data. Because there are no accounts, nothing on our server is tied to your name or contact details.
7. Who we share data with
We share data only with the service providers that run the App and this website:
- Amazon Web Services hosts our server functions, their database and logs in the United States.
- Anthropic provides the Claude AI that writes your text and reads your scans (section 5).
- Apple handles App Store purchases, subscriptions and refunds, Apple Health and App Attest, under Apple's own privacy policy.
- Vercel hosts this website. The website uses no cookies, analytics or advertising; Vercel processes standard request data, such as IP addresses, to deliver the pages.
We may also disclose information if the law requires it, for example in response to a valid court order. We do not sell personal information, share it for targeted advertising, or share it with data brokers.
8. Apple Health
With your permission, the App reads from Apple Health: heart rate, heart rate variability, heartbeat series, resting heart rate, respiratory rate, sleeping wrist temperature, sleep, steps, active energy, weight, workouts and workout effort, and, only if you turn on cycle tracking, menstrual flow. It writes to Apple Health the workouts and weight you log in the App.
- Health data stays on your iPhone, except the summaries you choose to send for AI features and scans after giving consent (section 4).
- Health data is never sold, never used for advertising or marketing, and never shared with data brokers or information resellers.
- It is used only to give you the App's health and fitness features.
9. Your choices
- Decline or withdraw AI consent. Choose “Not now” on the consent screen, or turn off You › Settings › Share data with AI features at any time. With it off, nothing is sent for AI features or scans and your scores keep working with built-in text.
- Apple Health permissions. Change which data the App can read or write in iOS Settings › Privacy & Security › Health › Baseline, or in the Health app. You › Settings › Apple Health opens Baseline's page in iOS Settings.
- Export My Data. You › Settings › Export My Data creates CSV files of your workouts, weight, body composition and lab results that you can save or share.
- Delete All Data. You › Settings › Delete All Data permanently erases everything Baseline keeps on your iPhone, including workouts, body entries, lab results, scores, AI text, chat history, your profile, preferences and your AI consent answer. It doesn't change Apple Health and doesn't cancel your subscription. It doesn't contact our server; what the server holds expires on its own as listed in section 6.
- Uninstall. Deleting the App removes its data from your iPhone. Cancel your subscription separately in iOS Settings.
- Questions about server data. Email support@baselinehealthapp.com. Because there are no accounts we usually can't tell which stored records are yours, but most of them expire within two days.
Depending on where you live in the United States, you may have rights to access, correct or delete your personal information, or to opt out of certain uses. Email us to make a request; we will not treat you differently for doing so. Since most of your data is only on your iPhone, the App's Export My Data and Delete All Data tools are usually the quickest way.
10. Children
The App is for people aged 13 and older and is not directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has used the App's AI features, contact support@baselinehealthapp.com.
11. Security
Data sent to our server is encrypted in transit (HTTPS). Data our server stores is encrypted at rest by AWS. Every request must carry a valid subscription and is checked with App Attest, and the server's logs are limited to a fixed list of operational fields. On your iPhone, the App's data is protected by iOS, including the encryption tied to your passcode. No system is perfectly secure, so please keep your iPhone locked with a passcode.
12. United States only
The App is offered on the App Store in the United States. Our server runs on AWS in the United States (us-east-1, Northern Virginia).
13. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects what the App sends or what we keep, we will tell you in the App or on this website before it takes effect, and where needed the App will ask for your AI consent again.
14. Contact
Baseline Health App LLC
Email: support@baselinehealthapp.com
Website: baselinehealthapp.com
Baseline is a wellness app, not a medical device. See the Terms of Service.