Privacy Policy
Last updated: 20 July 2026
Baseline is a private health record built and used by one person. It is not a product sold or offered to the public, and accounts are not open for registration. This policy explains what it stores and why.
What is stored
- Health information you enter or import: clinic visits, lung function results, bloodwork, medications and prescriptions, body measurements, symptoms, care team contacts and uploaded documents.
- Wearable data from WHOOP, if you connect it: recovery, sleep, heart rate variability, resting heart rate, strain and workouts.
- Account information: your email address, and — if you sign in with Google — the name and profile image Google provides.
How it is used
Only to run the app for you: to display your records, chart them over time, and compute the summaries and correlations shown in it. Your data is not sold, rented, shared with advertisers, or used to train anything. There is no analytics or tracking product embedded in it.
Where it lives
Data is stored in a private Supabase project hosted in Sydney, Australia, and the app runs on Vercel. Every table enforces row-level security, so a signed-in account can only read and write its own rows. Uploaded documents live in a private storage bucket and are only reachable through short-lived signed links.
Sign-in with Google
If you sign in with Google, Google tells us your email address, basic profile details and whether that email is verified. We use it to identify your account and nothing else. We never receive your Google password, and we do not request access to Gmail, Drive, Contacts or any other Google service.
Third parties
The app talks to a small number of services in order to work: Supabase (database, authentication, file storage), Vercel (hosting), Google (sign-in, if you use it) and WHOOP (wearable data, if you connect it). It does not send your data anywhere else.
Keeping it
Records are kept until deleted. You can delete individual records in the app at any time. To delete the account and everything in it, use the contact below — deletion removes the health records, uploaded files and the account itself.
Your rights
You can access, correct, export or delete your data at any time. Most of that is available directly in the app; for anything else, ask.
Security, honestly stated
Data is encrypted in transit and at rest by the hosting providers, and access is scoped per account at the database level. No system is perfectly secure, and this one is maintained by an individual rather than a security team — that is worth knowing before putting anything in it.
Not a medical service
Baseline is a personal record-keeping tool. It is not a medical device, it does not provide medical advice, and nothing in it should be used in place of a clinician. Reference ranges shown alongside results describe a general population and may not apply to any given person.
Contact
Questions, or a request to delete data: archie@archiekerr.com.