Privacy Policy

1. Eligibility

Basta is intended only for adults who are at least eighteen (18) years old.

By creating an account or using the Services, you represent and warrant that:

• you are at least 18 years of age;
• the information you provide is accurate and current; and
• you have the legal capacity to enter into this agreement.

We do not knowingly permit individuals under the age of 18 to create accounts or use Basta. If we become aware that an account belongs to someone under 18 years of age, we may suspend or permanently delete that account along with any associated personal information.

2. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

• the Basta mobile application;
• the Basta website located at https://getbasta.app;
• communications with our support team;
• account registration and subscription management.

This Privacy Policy does not apply to third-party websites, applications, or services that you access independently, even if they are linked from Basta. Those services maintain their own privacy policies and practices.

3. Information We Collect

We collect only the information reasonably necessary to provide and improve the Services. The categories of information we collect include the following.

A. Account Information

When you create an account, we collect information including:

• email address;
• encrypted account credentials;
• username or display name;
• birth year (for age verification).

This information is required to create and manage your account.

B. Optional Profile Information

You may choose to provide additional information that allows Basta to personalize calorie estimates and recommendations. This may include:

• biological sex;
• height;
• current weight;
• activity level;
• nutrition or fitness goal;
• preferred daily calorie target.

Providing this information is voluntary. However, certain features may provide more accurate estimates when profile information is available.

C. Meal Information

When you use Basta to log meals, we may collect:

• meal descriptions;
• meal timestamps;
• estimated calories;
• estimated macronutrients;
• AI-generated nutritional estimates;
• your selected outcome (for example, "Made Goal," "Ate More," or "Ate Less");
• daily progress information;
• historical meal logs.

This information allows Basta to provide progress tracking and personalized insights over time.

D. Meal Photos

Meal photos receive special handling. When you submit a meal photo:

1. the image is securely transmitted to our AI processing provider;
2. nutritional estimates are generated;
3. the resulting nutritional information is returned to Basta;
4. the original image is discarded.

Basta does not permanently store meal photos submitted for analysis.

Only the nutritional estimates and meal information generated from the analysis may be associated with your account.

E. Communications

If you contact our support team, we may collect:

• your email address;
• the contents of your message;
• attachments you voluntarily provide;
• any additional information necessary to respond to your request.

Support communications are used solely to assist you and improve customer support.

F. Subscription Information

If you purchase a subscription, payments are processed by the applicable app marketplace. Depending on your platform, subscriptions are managed by:

• Apple App Store; or
• Google Play.

Basta does not receive or store your full payment card information.

We may receive limited subscription information necessary to determine:

• whether your subscription is active;
• subscription expiration dates;
• subscription status;
• anonymous subscription identifiers provided through RevenueCat.

4. Information We Do Not Collect

Basta was designed around the principle of collecting as little personal information as reasonably possible. In particular:

• We do not store meal photos after they have been analyzed.
• We do not sell your personal information.
• We do not use advertising networks within the mobile application.
• We do not use third-party analytics platforms at this time.
• We do not build advertising profiles based on your behavior.
• We do not use your submitted meal photos or prompts to train public artificial intelligence models.

Should our data collection practices change in the future, this Privacy Policy will be updated before those changes become effective.

5. How We Use Your Information

We use the information we collect only to operate and improve Basta. Specifically, we may use your information to:

• create and manage your account;
• authenticate your identity;
• provide personalized calorie estimates;
• calculate nutritional information;
• maintain your meal history;
• synchronize your data across devices;
• provide progress tracking;
• deliver optional push notifications;
• provide customer support;
• detect abuse, fraud, or misuse of the Services;
• comply with legal obligations;
• protect the security and integrity of our systems.

We do not use your information for targeted advertising.

We do not sell personal information to advertisers or data brokers.

6. AI Processing of Meal Photos

One of Basta's primary features is estimating calories and nutritional information using artificial intelligence.

When you choose to analyze a meal:

1. you voluntarily submit a photo and, if applicable, a text description;
2. the photo is securely transmitted to our AI provider;
3. OpenAI is used as our primary AI provider;
4. Anthropic may be used as a fallback provider if OpenAI is unavailable or unable to process the request;
5. the AI returns nutritional estimates;
6. Basta stores only the resulting nutritional information associated with your meal;
7. the original image is discarded and is not retained by Basta.

We configure our AI providers so that submitted content is not used to train public AI models, subject to the terms and capabilities of those providers.

AI-generated nutritional estimates are intended for informational purposes only and may not always be accurate. Users should exercise their own judgment when making dietary decisions.

7. Health and Nutrition Information

Basta allows you to record information related to nutrition and eating habits. This information is used solely to provide features within the application, including:

• calorie estimation;
• progress tracking;
• personalized recommendations;
• daily summaries;
• nutritional insights.

While some information may relate to your health or wellness, Basta is not a medical device.

Basta does not diagnose, treat, cure, or prevent any disease.

Nothing within the Services should be interpreted as medical advice, nutritional counseling, or a substitute for consultation with qualified healthcare professionals.

8. Third-Party Service Providers

To operate Basta, we rely on a limited number of carefully selected third-party service providers. These providers perform services on our behalf and only receive the information necessary to perform those services.

Our current service providers include:

Supabase

We use Supabase to provide:

• user authentication;
• secure database storage;
• account management;
• cloud infrastructure supporting the Services.

User account information, profile information, meal history, nutritional estimates, and related application data are securely stored using Supabase in the United States.

Supabase processes information on our behalf and does not own or control your personal information. Their handling of infrastructure and hosted services is governed by their own privacy practices.

OpenAI

We use OpenAI as our primary provider for AI-powered meal analysis.

When you submit a meal photo or description, that information is transmitted securely to OpenAI solely for the purpose of generating nutritional estimates.

Submitted content is not used to train public AI models under our service configuration and applicable agreements.

Anthropic

If OpenAI is unavailable or unable to complete a request, Basta may use Anthropic as a fallback AI provider.

Anthropic receives only the information necessary to analyze the submitted meal and generate nutritional estimates.

As with OpenAI, submitted content is not intended to be used to train public AI models under our service configuration and applicable agreements.

RevenueCat

We use RevenueCat to manage subscription status across supported platforms.

RevenueCat allows Basta to determine whether your subscription is active without requiring us to process or store your payment information.

RevenueCat may receive anonymous identifiers and subscription status information necessary to provide subscription management services.

Apple App Store and Google Play

Subscription purchases are processed through the applicable app marketplace.

Apple and Google process payment transactions under their own privacy policies and terms.

Basta does not receive your credit card number, banking information, or other financial payment credentials.

9. Push Notifications

Basta may send push notifications related to your use of the Services. These notifications may include:

• meal reminders;
• daily progress reminders;
• streak reminders;
• motivational messages;
• subscription-related notifications;
• important service announcements.

Push notifications are optional. You may disable push notifications at any time through your device's operating system settings.

We do not use push notifications to deliver third-party advertising.

10. How We Share Information

We understand that your information belongs to you.

We do not sell, rent, or trade your personal information to advertisers, marketing companies, or data brokers.

We may disclose information only in the following limited circumstances.

Service Providers

We share information with trusted service providers that help operate Basta, including those identified in this Privacy Policy. These providers are permitted to process information only as necessary to provide services to us.

Legal Requirements

We may disclose information if we believe disclosure is necessary to:

• comply with applicable law;
• respond to valid legal requests;
• protect the rights, property, or safety of Synchay LLC, our users, or others;
• investigate fraud or abuse;
• enforce our Terms of Service.

Business Transfers

If Synchay LLC is involved in a merger, acquisition, financing, asset sale, or other business transaction, your information may be transferred as part of that transaction.

If ownership of Basta changes, the new owner will be required to honor this Privacy Policy until it is lawfully updated.

With Your Consent

We may share information if you specifically request or authorize us to do so.

11. Data Storage and Security

Protecting your information is important to us.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These safeguards include, where appropriate:

• encrypted communications using HTTPS/TLS;
• encrypted storage where supported by our infrastructure providers;
• authenticated user access;
• password-based account authentication;
• restricted administrative access;
• cloud infrastructure provided by Supabase.

Although we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

12. Data Retention

We retain personal information only for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy. Generally:

• account information is retained while your account remains active;
• meal history is retained until you delete it or close your account;
• support communications may be retained for customer service and legal purposes;
• subscription records may be retained for accounting and legal compliance.

Meal photos submitted for AI analysis are not retained after processing.

If legal obligations require us to retain certain information longer than described above, we will retain only the information necessary to satisfy those obligations.

13. Account Deletion

You may request deletion of your Basta account at any time through the application or by contacting us. When your deletion request is received:

• your account is scheduled for deletion;
• access to your account is removed;
• associated personal information is deleted from our production systems.

Some information may remain temporarily in secure system backups before being permanently removed through our normal backup retention process.

Account data is generally removed from our production systems within 30 days after a deletion request.

Information retained to satisfy legal obligations or resolve disputes may be retained for a longer period where required by law.

14. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. These rights may include:

• accessing your personal information;
• correcting inaccurate information;
• requesting deletion of your account;
• obtaining a copy of certain information associated with your account;
• withdrawing consent where processing is based on consent;
• contacting us with questions regarding our privacy practices.

We will respond to verified privacy requests within a reasonable period consistent with applicable law.

15. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Subject to applicable exceptions, California residents may have the right to:

• know what categories of personal information we collect;
• know the purposes for which personal information is used;
• request deletion of personal information;
• request correction of inaccurate personal information;
• request access to specific pieces of personal information;
• receive information regarding our disclosure practices.

Basta does not sell personal information.

Basta does not share personal information for cross-context behavioral advertising.

We will not discriminate against users who exercise their privacy rights.

Requests regarding California privacy rights may be submitted using the contact information provided below.

16. International Users

Basta is currently intended for individuals located in the United States.

Your information is processed and stored on infrastructure located in the United States, including cloud services provided by Supabase. By using the Services, you acknowledge that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country of residence.

If Basta becomes available in additional countries in the future, we may update this Privacy Policy to address additional legal requirements and user rights.

17. Children's Privacy

Basta is not intended for individuals under the age of 18.

We do not knowingly collect, use, or maintain personal information from anyone under 18 years of age.

If we learn that we have inadvertently collected personal information from someone under 18, we will take reasonable steps to delete the account and associated information as soon as practicable.

If you believe that a minor has created an account or submitted personal information through Basta, please contact us using the information provided below.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our Services;
• our technology;
• applicable laws or regulations;
• our business practices; or
• the third-party services we use.

When we make material changes, we will update the Last Updated date at the top of this Privacy Policy.

If required by applicable law, we will also provide additional notice through the Basta application, our website, email, or another appropriate communication method before those changes become effective.

Your continued use of Basta after an updated Privacy Policy becomes effective constitutes your acceptance of the revised policy.

19. Contact Us

If you have questions about this Privacy Policy, your personal information, or your privacy rights, please contact us.

We will make reasonable efforts to respond to privacy-related inquiries in a timely manner.

20. Our Privacy Commitments

At Basta, we believe privacy should be simple.

We built the application around a few core principles that guide how we handle your information:

• We collect only the information needed to provide the Services.
• We do not store your meal photos after they have been analyzed.
• We do not sell your personal information.
• We do not use your information for advertising or behavioral profiling.
• We do not use your submitted meal photos or prompts to train public AI models under our service configurations and applicable agreements.
• We strive to be transparent about how your information is collected, used, and protected.

Our goal is to help you build healthier eating habits while respecting your privacy every step of the way.