Privacy Policy

1. Introduction

Bask (“we,” “us,” or “our”) is a migraine tracking and prediction application designed to help you log attacks, identify patterns, and receive risk insights based on environmental and behavioral data. This Privacy Policy applies to the Bask mobile application, related websites, and any services we provide.

If you have any questions about this policy or how we handle your data, please contact us at privacy@bask.app.

2. Information We Collect

Health & Symptom Data You Provide

Bask is built around data you consciously enter. This may include migraine attack logs (start time, duration, severity, pain location on the head map, symptoms, suspected triggers, and personal notes), medication adherence records, daily check-in responses (such as wellness or feeling dial selections), and optional lifestyle factors you choose to track (sleep, water intake, meals, stress levels, and similar inputs). This data is yours, and it is used solely to power your personal tracking experience.

Automatically Collected Data

Some information is collected automatically to enable core features and improve reliability:

• Barometric pressure and weather data. We retrieve pressure readings and related weather conditions from third-party services based on your device’s general location, if you grant location permission.
• Geolocation. Collected only when you grant permission and used solely for pressure correlation. We do not store precise location server-side.
• Device identifiers. On iOS, the advertising identifier (IDFA) is accessed only if you grant permission through App Tracking Transparency. Otherwise, we use a random app-scoped identifier. A similar approach applies on Android.
• Crash and usage data. Collected via Sentry to diagnose errors and understand feature usage.
• IP address. Transiently observed by network services but not persisted by Bask.

Data From Subscriptions

If you subscribe to Bask Premium, Apple or Google processes your payment. We do not collect or store your credit card or banking information. We do receive a purchase entitlement status from Apple App Store or Google Play to confirm whether your subscription is active.

3. How Bask Uses Your Data

We use the information we collect for the following purposes:

• Generate migraine risk predictions and trigger-pattern analysis for you
• Store, organize, and display your migraine history within the app
• Deliver risk-alert notifications if you enable push notifications
• Improve prediction accuracy using aggregated, anonymized data that cannot be linked back to individual users
• Monitor crashes and analyze product usage through Sentry
• Respond to your support requests and account inquiries

4. Where Your Data Is Stored

Your migraine logs and health data are stored locally on your device using on-device encrypted storage. We do not maintain a central server-side database of your personal health information.

If you opt in to sync, your data is synchronized to your personal iCloud or Google Drive account—your own cloud, not ours. Crash and usage analytics are sent to Sentry for troubleshooting purposes.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases include:

• Consent (Art. 6(1)(a) GDPR): For optional analytics and certain non-essential processing.
• Contract performance (Art. 6(1)(b) GDPR): For processing necessary to provide Bask’s tracking, prediction, and sync features.
• Legitimate interests (Art. 6(1)(f) GDPR): For security, fraud prevention, and service integrity, balanced against your rights.

6. Data Sharing

We do not sell your personal data. We do not share your health data with third parties for advertising purposes.

We rely on a small number of service providers (“subprocessors”) to operate Bask:

• Apple App Store / Google Play Store — subscription management and payment processing
• RevenueCat — subscription entitlement verification
• Sentry — crash reporting and error monitoring

We may disclose information only when required by applicable law, such as in response to a valid court order or legal process.

7. Your Privacy Rights

Depending on where you live, you may have rights including: access, rectification, erasure, data portability, restriction of processing, and objection to processing. You may also withdraw consent where consent is the legal basis.

If you are a California resident, the CCPA grants you the right to know what personal information we collect, the right to deletion, and the right to opt out of the sale of personal information. Bask does not sell personal information.

To exercise any of these rights, go to Settings → Privacy in the app, or email us at privacy@bask.app. We will respond within 30 days.

8. Data Retention

On-device migraine logs and health data are retained until you delete them. If cloud sync is enabled, copies remain in your cloud account until you remove them there. Sentry crash data is retained for 90 days. Account and subscription records are retained as long as you maintain an active subscription and are deleted within 30 days of a verified account deletion request.

9. International Data Transfers

Sentry may process data in servers located in the United States, the European Union, or other jurisdictions. Transfers from the EEA are governed by Standard Contractual Clauses or other adequacy mechanisms. Your local health data never leaves your device except where you explicitly opt in to your own cloud sync.

10. Children’s Privacy

Bask is not directed to children under 13, or under 16 in the European Union. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact privacy@bask.app so we can delete it.

11. Cookies & Tracking

The Bask app does not use third-party advertising SDKs or cross-app tracking identifiers. Our marketing website uses only essential cookies necessary for basic functionality. We do not use tracking pixels or behavioral advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app at least 30 days before the changes take effect. Continued use of Bask after the effective date constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or requests, please email privacy@bask.app or write to:

Bask, Attn: Privacy
[Address on file]