Baseline Health App Privacy Policy
What Baseline Health App is
Baseline Health App is a private, non-commercial project by Solu: the site soluhealth.app, where a person sees their own sleep, training load, nutrition and well-being data and gets advice from AI coaches. The site is open to invited people only. There are no ads and no fees, and data is never sold.
What data we keep
- Sign-in: the email address that receives your sign-in link. There are no passwords.
- Profile and questionnaire: what you entered yourself: age, height, goals, time zone, habits.
- Garmin watch data, if you connected it: sleep, heart rate, heart rate variability, stress, steps, calories, activities, weight and other values Garmin provides.
- Strava, if connected: activities and their metrics.
- What you enter yourself: food and food photos, weight, blood pressure, well-being, notes, lab result files.
- Conversations with the AI coaches.
- Technical logs: sign-in times, errors, AI usage. Logs contain none of your data values and no conversation text.
Location data is removed from uploaded photos.
Why
Only to show you your own health picture and to give advice based on your data. Data is not used for advertising, not sold, not shared with third parties for their own purposes, and not used to train AI models.
Where it is stored
On the project's own server at DigitalOcean in the USA (New York). Every person has a separate database. An encrypted backup is made once a day and kept off the server. Your data is not in development tools, shared folders or spreadsheets.
Who can see it
- You. Everything stored about you.
- The project administrator sees the system's health without your values. Technically the server owner can open any database. This happens only with your consent or to fix a fault you reported. Every such access is logged, and you get a copy of that log on request.
- The AI provider (Anthropic) receives only what a specific coach answer needs: your question and the relevant numbers. It works under its commercial terms: https://www.anthropic.com/legal/commercial-terms.
- The hosting provider (DigitalOcean) runs the server and has no access to database contents as part of our service.
- The email service receives only your email address, to send the sign-in link.
Other people on the site cannot see your data.
Garmin and other connections
Garmin data arrives only after you press "Allow" in Garmin yourself. We use it only for your page and your advice. You can disconnect at any time in your Baseline Health App profile or in Garmin Connect. After you disconnect we stop receiving data and delete the access token. Data already received stays until you delete it. Strava works the same way.
How long we keep it
- Your data: as long as you have an account.
- After deletion: erased from the server within 7 days, and from encrypted backups when they expire, no later than 30 days.
- Technical logs: 90 days.
- The log of administrator access to your database: as long as you have an account.
What you can do
- Download all your data as one file.
- Correct any record.
- Delete everything: database, files, photos, conversations, connections and sign-in.
- Withdraw consent and disconnect any source.
Do it in your profile or by email to privacy@soluhealth.app. We answer within 30 days.
Security
The site works over https only. Sign-in uses a one-time link sent by email. Backups are encrypted. Access keys are kept in a password manager, not in code. Security updates are installed on the server automatically. Failure alerts contain none of your values. If anything happens to your data, we will email you.
Not medical advice
Baseline Health App does not diagnose and does not replace a doctor. When something in the data looks like a medical question, the site suggests discussing it with a doctor.
Age
The site is for people aged 18 and over.
Changes
We will email you before any change to this policy. The date at the top is the date of the current version.