Privacy Policy

Last updated: May 2026

1. Data we collect

When you upload workout data to Baseline, we process and store:

  • Activity data: sport type, duration, distance, elevation, heart rate, GPS tracks, cadence, power, gear, and derived metrics (TRIMP, CTL/ATL, best efforts).
  • Health data: sleep records, resting heart rate, heart rate variability, body mass, body fat percentage (from Apple Health, WHOOP, Oura, Garmin).
  • Account data: email, display name, username, profile photo, connected source status, subscription tier, referral activity.
  • Usage data: pages viewed, features used (via Vercel Analytics — no PII).

2. How we use your data

Your data is used exclusively to provide the Baseline service: generating dashboards, computing metrics, awarding badges, and sending relevant email notifications. We never sell, rent, or share your personal data with third parties for marketing purposes. Aggregated, anonymized data may be used for product improvement.

3. Data retention

Free plan: Full activity streams retained for 12 months. After 12 months, only aggregate summaries (totals, monthly volumes) are kept.
Pro/Founder: Full historical data retained for the lifetime of your account.
Raw upload files (zips) are deleted from our servers after 7 days regardless of plan.

4. Data portability & deletion

You can export all your data at any time from Settings → Data. You can also request full account deletion, which soft-deletes your data immediately with a 30-day grace period before permanent removal. For GDPR/CCPA requests, email [email protected].

5. Third-party services

Baseline uses the following infrastructure providers: Google Cloud Platform (Firebase Auth, Firestore, Cloud Storage, Cloud Run), Vercel (hosting), Stripe (payments), Resend (transactional email), Cloudflare (DNS & email routing). Each provider has its own privacy policy and security practices.

6. Cookies

Baseline uses a session cookie for authentication (httpOnly, secure in production) and an optional referral cookie (90-day expiry) for tracking referral codes. No advertising or tracking cookies are used.

7. Contact

For privacy inquiries: [email protected]