What we store, and how to get rid of it.

The short version

We store what you tell the coach, because a coach that forgets is useless. We do not sell it, we do not share it with advertisers, and we do not use it to train models. You can export it or delete it at any time, and deletion means the rows are gone — not hidden, not flagged, gone.

Who we are

Base1Health is operated by Nu Link, 10111 Clodine Rd, Richmond, TX 77407. For anything about your data, write to privacy@base1health.com.

What we collect, and why

Your account. Email address, a hashed password, and the date you accepted the medical disclaimer. The password is hashed with scrypt and cannot be read back by us or by anyone who obtains the database.

Your profile. Age, height, weight, sex, activity level, goal, and optionally body fat, dietary pattern, allergies, food preferences, available equipment, training experience, injuries, and whether you are taking a GLP-1 medication. This is what the calculations need. Every field is optional except the six the arithmetic cannot work without, and we will tell you which those are rather than demanding the rest.

What you log. Food, workouts, weight, and the check-in answers you give. This is the only honest basis for adjusting a plan, which is why the coach will not propose a change without it.

Your conversations. Stored so the coach has continuity, and so you can read back what you were told and when. Each stored answer records which version of your profile it was based on, so an old reply can still be explained.

Billing. If you subscribe, Stripe processes the payment. We store your Stripe customer and subscription identifiers and the dates and status of the subscription. We never see or store your card number.

Sessions. A random token in a cookie, with only its hash stored, plus a truncated browser description so you can tell a phone from a laptop in your own session list. No advertising cookies, no analytics that follow you to other sites, no fingerprinting.

Special category data

Most of the above is health data, which UK and EU law treats as a special category requiring your explicit consent. Creating an account and completing a profile is that consent, for the single purpose of giving you the guidance you asked for. You can withdraw it by deleting your account, and withdrawing it is not made difficult.

Who sees it

The model provider. To answer you, the relevant parts of your profile and conversation are sent to Anthropic’s API. Anthropic does not train on data submitted through the API. We send what the answer needs and not your email address or your name unless you have put it in the conversation yourself.

Food lookups. Ingredient names are sent to the USDA FoodData Central API to get their composition. The query is a food name — “chicken breast” — and carries nothing that identifies you.

Hosting and payments. The site runs on Netlify and its managed Postgres; payments are processed by Stripe. Both are necessary to operate the service and are bound by their own agreements.

Nobody else. We do not sell data, we do not share it with advertisers or data brokers, we run no advertising pixels, and we take no money from anyone selling a medication, peptide or supplement — which is also why there is nobody we would have an incentive to share it with.

How long we keep it

Your profile, plans, logs and conversations stay while your account exists, because that is the product. Cancelling a subscription does not delete anything — your account drops to the free plan and your history stays readable.

When you ask for deletion, your account is signed out everywhere immediately and the data is hard-deleted after 7 days. The window exists so an accidental deletion is recoverable; after it, the rows are gone and cannot be produced for anybody, including you, including us, including a court. Expired sessions are purged a week after they expire.

Your rights

You can see everything we hold, correct it, export it in a machine-readable form, or delete it. Under UK/EU GDPR you also have the right to object to processing and to restrict it, and to complain to your data protection authority — in the UK the ICO, at ico.org.uk. Under California law you have the right to know, delete and correct, and to not be discriminated against for exercising them; we do not sell personal information and so there is nothing to opt out of.

All of it is in your account settings. Nothing on this list requires you to email us and wait, though you can at privacy@base1health.com if you prefer.

Children

This service is for adults. We do not knowingly collect data from anyone under 18 and the coach refuses to set targets for a minor — not as a formality but because energy needs during growth are not a smaller version of an adult’s and deficits can cost final height and bone density. If you believe a child has created an account, write to us and we will delete it.

Security

Passwords are hashed with scrypt at a memory-hard cost. Session tokens are stored only as hashes, so a database dump contains no usable credentials. Everything travels over TLS. Access to the production database is limited to what the application needs.

No system is perfect. If you find a vulnerability, write to privacy@base1health.com and we will not threaten you about it.

Changes

If this notice changes materially we will say so in the product rather than quietly updating a date. The current medical disclaimer version is 2026-10-12; when it changes you will be asked to read and accept the new one.