basis

Privacy Policy

Last updated August 16, 2026

The short version: Basis collects what it needs to run the app and nothing else, we do not sell your data or use it for advertising, and you can export or delete it whenever you want. The rest of this page is that same statement with the details filled in.

1. Introduction

Basis is a workspace for your tasks, notes, and reference material, which means the content you keep in it is often personal, and sometimes it is your work. We treat it that way. This policy explains what we collect, why we collect it, who else touches it, and what you can ask us to do about it.

2. Information we collect

  • Your email address. Used to sign you in, to recover your account, and to send you the transactional messages listed below.
  • The content you create. Tasks, notes, files and attachments, and the structure around them: projects, notebooks, tags, dates. We store this to give it back to you; we do not read it.
  • Device and browser information. Browser, operating system, and timezone, so the app renders correctly and schedules dates in your own day. Our hosting and database providers log IP addresses as part of running the service, which gives an approximate location; we do not use those logs to build a profile of you.
  • Usage analytics. None. Basis runs no analytics or product-telemetry service. No page-view tracking, no session recording, no event pipeline. What we know about how Basis is used comes from people telling us.

3. How we use information

  • to provide the service and sync your content across your devices
  • to keep your account secure and to recover it if you are locked out
  • to send transactional email: sign-in links, password resets, and the reminders you have turned on. No marketing email without your asking for it.
  • to fix problems and improve the product, working from what you report and from error logs
  • to comply with the law where we are required to

4. Services we rely on

Running Basis means a handful of other companies necessarily handle some data on our behalf. Here is the complete list, what each one does, and where to read its own policy:

None of them is an advertising network, and none receives your data for their own purposes. Sign in with Apple and Sign in with Google are only involved if you choose to use them.

5. Storage and security

Your content is stored in Supabase, hosted on Amazon Web Services in the US-East region. It is encrypted in transit (TLS) and at rest. Access is enforced at the database itself through row-level security, so a query can only ever return rows belonging to the account that asked. That is the mechanism which separates your data from every other account, not a check in the app that could be forgotten.

No system is perfectly secure. If a breach ever affects your data, we will tell you what happened and what to do about it, promptly and without being asked.

6. Cookies and tracking

Basis sets cookies for one purpose: keeping you signed in. There are no third-party trackers, no advertising cookies, no cross-site tracking, and no pixels. We do not sell or share personal information for behavioural advertising, and there is nothing to opt out of because there is nothing running.

7. Your rights

Wherever you live, you can ask us to do the following, and we will do it without charging you or making it difficult:

  • Access. Get a copy of the personal data we hold about you.
  • Portability. Export your content at any time, in a form you can take elsewhere.
  • Correction. Fix anything inaccurate. Most of it you can edit yourself.
  • Deletion. Delete your account and everything in it, from Settings or by asking us.
  • Objection and restriction. Ask us to stop or limit a particular use of your data.

These are the rights the GDPR gives people in the UK and EU and the CCPA gives residents of California. We extend them to everyone rather than asking where you live first. To exercise any of them, email hello@thebasis.app. You also have the right to complain to your local data protection authority.

8. Data retention

We keep your content for as long as your account is active. When you delete your account, your content is deleted from our live systems within 30 days, and it ages out of encrypted backups within 90 days. We may keep a minimal record of the deletion itself where we are required to.

9. Children's privacy

Basis is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.

10. International users

Basis is operated from the United States and your data is processed there. If you use Basis from outside the US, you are asking us to transfer your data to the US to provide the service, and you consent to that transfer. US privacy law may differ from the law where you live; the rights in section 7 apply to you regardless.

11. Changes to this policy

We will update this page as Basis changes. For material changes we will give you at least 30days' notice by email before they take effect, and update the date at the top.

12. Contact

Questions about privacy, or a request under section 7, go to hello@thebasis.app. See also the Terms of Service and Support.