Privacy

Last updated: August 2026

Who’s behind [base]

[base] is run by Steffen Baumgarten — one person looking after a small practice circle, not a company with a data department. That person decides what happens to the data described here, and is the one to write to at hi@base.love with anything on this page.

What [base] stores

Not much, and nothing we’d sell — [base] is a personal practice companion, not a data business. Here’s the whole list:

• Your practice setup: practices, modules and the tools you chose, plus the sessions you run.
• Your check-ins: how practice is going, your gratitude note, the practice emoji you tapped.
• Your alarms and nudges — including the times you set.
• A Home background photo, if you pick one.
• Your email and first name — only if you signed up with them. If you joined with a circle code, your account has neither: it’s anonymous, and there’s nothing there to identify you until you add an email in Settings.
• Only if you turn on text reminders: your phone number and your time zone, kept on our server (never on your phone).
• For about fifteen minutes when someone enters a circle code: a scrambled one-way version of the internet address it came from, so a wrong code can’t be guessed thousands of times. It can’t be turned back into an address, and it’s thrown away when the window passes.

Where it lives

Everything is stored with Supabase in Frankfurt, Germany (EU data residency), protected by row-level security — only your signed-in account can reach your rows. A copy lives on your device so the ritual works fully offline. Our own small servers — the text-reminder scheduler and the analytics counter — run on Fly.io, also in Frankfurt. The app itself is built and updated through Expo (EAS).

Your alarms and nudges

Your wake-up alarm is scheduled on your device by the operating system, so it rings even with no signal — that’s the whole reason [base] is a native app. The times themselves sync to your account, so a new phone gets your mornings back exactly as you left them. And if you switch a nudge to a text message, our server needs that time and your time zone to send it at the right local minute. Analytics never sees any of this — no times, ever.

Permissions (alarms, notifications, photos for your Home background) are asked for only by the feature that needs them, at the moment it needs them.

Text reminders

If you switch a nudge to text (SMS), you share your phone number once and confirm it with a code. The number and your time zone are kept on our server only — never on your device, never in analytics — and are used for exactly one thing: sending you the nudges you set up. Delivery runs through Twilio, a messaging provider that processes your number and the nudge text on our behalf. We also keep a small send record — which nudge went out on which day — so a reminder can’t reach you twice; it holds no message text and no phone number. You can remove your number any time in Settings, and deleting your account removes it too — immediately, in both cases.

Analytics — opt-in, anonymous

Off by default. If you opt in, we count which screens and buttons get used on our own self-hosted counter (Umami, running on our Fly.io server in Frankfurt) — completely anonymous: no names, no notes, no alarm times, no account ids. To count distinct devices without knowing who you are, we use a random id stored only on your phone — it’s tied to nothing about you, and it’s cleared the moment you turn analytics off. You can change your mind any time in Settings; turning it off takes effect immediately.

Why we’re allowed to keep it

• To give you the app you asked for: your account, practice, sessions, alarms and nudges, and sending the text reminders you set up. (Article 6(1)(b) — performance of a contract.)
• Because you said yes: analytics and using a photo from your library. Each is off until you agree, and you can take that agreement back any time in Settings — it applies immediately, with no effect on what happened before. (Article 6(1)(a) — consent.)
• To keep the door safe: the short-lived scrambled address on the circle-code screen, and our providers’ own abuse monitoring. (Article 6(1)(f) — legitimate interests.)

How long we keep it

• Your practice, sessions, check-ins, alarms and nudges: until you delete them, or until you delete your account.
• Your phone number and time zone: until you remove the number in Settings, or delete your account.
• The send record for text reminders: kept as a delivery log — no message text, no number.
• The scrambled address from the circle-code screen: about fifteen minutes.
• Anonymous usage counts: kept as aggregate figures with no route back to you.

Deleting your account removes everything attached to it, immediately and permanently.

When data leaves the EU

Your data lives in Frankfurt. One thing travels further: if you use text reminders, your phone number and the nudge text go to Twilio in the United States. That transfer rests on the European Commission’s standard contractual clauses, included in Twilio’s data-processing terms. Everything else — Supabase, our own servers, the analytics counter — stays in the EU.

Who else touches your data

• Supabase — database, sign-in and file storage (EU, Frankfurt).
• Fly.io — hosts the text-reminder scheduler and the analytics counter (EU, Frankfurt).
• Twilio — delivers text reminders (US).
• Expo (EAS) — builds the app and delivers its updates.

No advertising networks, no data brokers, no third-party analytics. Nothing here is sold or shared for marketing.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, get it in a portable file, ask us to pause using it, or object to the handling we base on legitimate interests. Deleting is instant and needs no one’s help: Settings → Delete account. For anything else, write to hi@base.love, and we’ll come back to you within a month.

You can also withdraw consent for analytics or photo access any time in Settings.

If you think we’ve handled your data badly, you can complain to a data-protection supervisory authority — the Berlin Commissioner for Data Protection and Freedom of Information for us, or the authority in the EU country where you live.

Deleting your account

Settings → Delete account removes your account and everything attached to it — practices, sessions, alarms, profile — immediately and permanently, no email required.

Questions

[base] serves a small community — write to hi@base.love.